Report for IP: 52.191.203.0

Threat LevelLOW23/1002 rule types
2 incidents on record · 2 rule types · last seen 5d ago
PTR N/A

Attack Analysis

Framework Debug Endpoint Probe
This IP probed a debug or admin endpoint from a non-WordPress stack — Spring Boot's actuator, Go's pprof, Symfony's profiler, a Vite dev-server file read, or similar. None of these exist on a WordPress install; the request is a blind, automated sweep fingerprinting whatever stack happens to answer.
Identified Vulnerability Scanner
This request's User-Agent self-identified as an automated vulnerability scanner or security-research bot (rather than a browser). Genuine security researchers and monitoring tools that announce themselves this way are still uninvited probing from this site's point of view — the traffic is automated reconnaissance, not a human visitor.

Reports (2)

Date Severity Description
31 Oct 2026 - 10:44 low Query Guard — Ua Known Scanner
31 Oct 2026 - 10:44 low Query Guard — Path Debug Endpoint Probe