This IP address has been reported a total of
25
times from
20 distinct
sources.
52.249.216.197 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 9
reports;
Germany
with 6
reports;
Brazil
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
17
times;
Hacking
10
times;
Bad Web Bot
9
times;
Port Scan
6
times;
Brute-Force
4
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -69.639 (Bad < -10 / Very Bad < -20 ...
show moreBot/Spam/Scrapper attack detected on www.handytreff.de - Score: -69.639 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85
show less
Web vulnerability scanning / probing from 52.249.216.197: automated requests for CMS admin paths, lo ...
show moreWeb vulnerability scanning / probing from 52.249.216.197: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 1 hits; paths: /wp-admin/css/.
show less
Port Scan
Hacking
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /admin/controller/extension/extension/ HTTP/1.1
[Security Alert] Detected targeted scanning for WordPress vulnerabilities. Access has been automatic ...
show more[Security Alert] Detected targeted scanning for WordPress vulnerabilities. Access has been automatically blocked, and the IP address has been banned. [Method]: => GET. [Request]: => /wp-admin/css. Access revoked. [User-Agent]: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36. [OS]: Unknown. [IP Address]: 52.249.216.197. [IoA Datetime]: 2026-10-09 13:20:49 UTC +1.
show less
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show moreTriggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-admin/css/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy ...
show moreProbing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Oct 9, 11:31 UTC. Origin: United States, Dulles Town Center.
show less
