JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 188.37.113.252

188.37.113.252

Neutral Activity

55 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

DSL-ULL

Usage Type

Fixed Line ISP

ASN

AS12353

Hostname(s)

252.113.37.188.rev.vodafone.pt

Domain Name

vodafone.com

Country

🇵🇹 Portugal

City

Vila Nova de Gaia, Porto

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

188.37.113.252 has been reported 55 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 188.37.113.252:

This IP address has been reported a total of 55 times from 31 distinct sources. 188.37.113.252 was first reported on March 24th 2023, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 SleepyHosting	2023-08-23 23:39:14 (3 years ago)	(mod_security) mod_security (id:400010) triggered by 188.37.113.252 (PT/Portugal/252.113.37.188.rev. ... show more (mod_security) mod_security (id:400010) triggered by 188.37.113.252 (PT/Portugal/252.113.37.188.rev.vodafone.pt): 5 in the last 3600 secs show less	Brute-Force
Anonymous	2023-08-23 16:19:08 (3 years ago)	ft-1848-basketball.de 188.37.113.252 [23/Aug/2023:18:19:06 +0200] "POST /wp-login.php HTTP/1.1" 200 ... show more ft-1848-basketball.de 188.37.113.252 [23/Aug/2023:18:19:06 +0200] "POST /wp-login.php HTTP/1.1" 200 10079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ft-1848-basketball.de 188.37.113.252 [23/Aug/2023:18:19:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 663 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" show less	Web App Attack
Anonymous	2023-08-20 17:57:17 (3 years ago)	[18:57:17] 11: Scanning for Exploits - /wp-login.php	Hacking Web App Attack
🇧🇪 taivas.nl	2023-08-16 11:33:00 (3 years ago)	Wordpress_xmlrpc_attack	Bad Web Bot
🇦🇺 MAGIC	2023-08-14 22:00:50 (3 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇦 URAN Publishing Service	2023-08-14 12:26:00 (3 years ago)	188.37.113.252 - - [14/Aug/2023:15:25:59 +0300] "GET /wp-login.php HTTP/1.1" 404 4849 "-" "Mozilla/5 ... show more 188.37.113.252 - - [14/Aug/2023:15:25:59 +0300] "GET /wp-login.php HTTP/1.1" 404 4849 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 188.37.113.252 - - [14/Aug/2023:15:25:59 +0300] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
🇩🇪 niceshops.com	2023-08-13 00:01:27 (3 years ago)	Web Attack ([12/Aug/2023:23:01:34.563] GET /wp-login.php)	Web App Attack
🇻🇳 Xuan Can	2023-08-11 08:20:58 (3 years ago)	(mod_security) mod_security (id:6) triggered by 188.37.113.252 (PT/Portugal/252.113.37.188.rev.vodaf ... show more (mod_security) mod_security (id:6) triggered by 188.37.113.252 (PT/Portugal/252.113.37.188.rev.vodafone.pt): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 11 15:20:52.012144 2023] [security2:error] [pid 40734:tid 47419673376512] [client 188.37.113.252:17029] [client 188.37.113.252] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "www.diendanmaychu.vn"] [uri "/wp-login.php"] [unique_id "ZNXvZKWszxyB9fiLsBcgQQAAAAU"] show less	Brute-Force SSH
🇺🇸 rsiddall	2023-08-06 15:11:09 (3 years ago)	188.37.113.252 - - [06/Aug/2023:11:11:08 -0400] "POST /xmlrpc.php HTTP/1.1" 301 262 "-" "Mozilla/5.0 ... show more 188.37.113.252 - - [06/Aug/2023:11:11:08 -0400] "POST /xmlrpc.php HTTP/1.1" 301 262 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 188.37.113.252 - - [06/Aug/2023:11:11:08 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Brute-Force
🇺🇸 SleepyHosting	2023-08-04 00:41:24 (3 years ago)	(mod_security) mod_security (id:400010) triggered by 188.37.113.252 (PT/Portugal/252.113.37.188.rev. ... show more (mod_security) mod_security (id:400010) triggered by 188.37.113.252 (PT/Portugal/252.113.37.188.rev.vodafone.pt): 5 in the last 3600 secs show less	Brute-Force
Anonymous	2023-07-26 08:18:59 (3 years ago)	188.37.113.252 - - [26/Jul/2023:10:18:57 +0200] "GET /wp-login.php HTTP/1.1" 200 15622 "-" "Mozilla/ ... show more 188.37.113.252 - - [26/Jul/2023:10:18:57 +0200] "GET /wp-login.php HTTP/1.1" 200 15622 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 188.37.113.252 - - [26/Jul/2023:10:18:58 +0200] "POST /wp-login.php HTTP/1.1" 403 11224 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 188.37.113.252 - - [26/Jul/2023:10:18:58 +0200] "POST /xmlrpc.php HTTP/1.1" 403 1793 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Brute-Force Web App Attack
🇩🇪 Ba-Yu	2023-07-11 22:14:00 (3 years ago)	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack
🇺🇦 URAN Publishing Service	2023-07-09 17:39:01 (3 years ago)	188.37.113.252 - - [09/Jul/2023:20:39:01 +0300] "GET /wp-login.php HTTP/1.1" 404 5063 "-" "Mozilla/5 ... show more 188.37.113.252 - - [09/Jul/2023:20:39:01 +0300] "GET /wp-login.php HTTP/1.1" 404 5063 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 188.37.113.252 - - [09/Jul/2023:20:39:01 +0300] "GET /xmlrpc.php HTTP/1.1" 404 468 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
🇦🇺 MAGIC	2023-07-06 01:11:58 (3 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇦 URAN Publishing Service	2023-06-11 09:06:43 (3 years ago)	188.37.113.252 - - [11/Jun/2023:12:06:39 +0300] "GET /wp-login.php HTTP/1.1" 404 276 "-" "Mozilla/5. ... show more 188.37.113.252 - - [11/Jun/2023:12:06:39 +0300] "GET /wp-login.php HTTP/1.1" 404 276 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 188.37.113.252 - - [11/Jun/2023:12:06:41 +0300] "GET /xmlrpc.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇿 212.79.110.18

🇰🇷 211.253.27.70

🇦🇺 180.235.130.4

🇮🇩 36.93.249.106

🇩🇪 193.124.20.243

🇧🇪 192.178.37.152

🇺🇸 172.212.228.106

🇧🇷 167.249.94.182

🇺🇸 166.62.94.210

🇻🇳 103.74.122.88

🇷🇴 80.94.95.116

🇺🇸 75.144.76.68

🇺🇸 70.183.226.45

🇵🇷 67.206.199.61

🇫🇷 51.77.137.49

🇲🇼 41.70.11.50

🇨🇳 39.170.98.131

🇹🇼 34.81.100.241

🇻🇳 171.225.193.51

🇺🇸 152.32.205.153