JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.237.118.111

52.237.118.111 was found in our database!

This IP was reported 593 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.237.118.111

Whois 52.237.118.111

IP Abuse Reports for 52.237.118.111:

This IP address has been reported a total of 593 times from 229 distinct sources. 52.237.118.111 was first reported on May 27th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 macrob	2026-05-28 03:47:14 (1 week ago)	2026/05/28 03:47:11 [error] 3951706#3951706: 262005781 access forbidden by rule, client: 52.237.118 ... show more 2026/05/28 03:47:11 [error] 3951706#3951706: 262005781 access forbidden by rule, client: 52.237.118.111, server: finami.com.ua, request: "GET /wp-content/uploads/index.php HTTP/1.1", host: "www.finami.com.ua" 2026/05/28 03:47:13 [error] 3951706#3951706: 262005796 access forbidden by rule, client: 52.237.118.111, server: finami.com.ua, request: "GET /wp-content/themes/hideo/network.php HTTP/1.1", host: "www.finami.com.ua" 2026/05/28 03:47:13 [error] 3951711#3951711: 262005748 access forbidden by rule, client: 52.237.118.111, server: finami.com.ua, request: "GET /wp-login.php HTTP/1.1", host: "www.finami.com.ua" ... show less	Web App Attack
🇺🇸 dtorrer	2026-05-28 03:47:03 (1 week ago)	General vulnerability scan.	Port Scan
🇦🇺 nzhost.co.nz	2026-05-28 03:47:02 (1 week ago)	$f2bV_matches	Hacking Brute-Force
🇧🇷 dominioz	2026-05-28 03:40:31 (1 week ago)	2026-05-27 19:54:20 GET /xmlrpc.php - - 52.237.118.111 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64; ... show more 2026-05-27 19:54:20 GET /xmlrpc.php - - 52.237.118.111 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/120.0.0.0+Safari/537.36 - 301 595 2026-05-28 03:05:37 GET /wp-trackback.php - - 52.237.118.111 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/120.0.0.0+Safari/537.36 - 404 555 2026-05-28 03:05:40 GET /xmlrpc.php - - 52.237.118.111 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/120.0.0.0+Safari/537.36 - 301 579 2026-05-28 03:40:17 GET /xmlrpc.php - - 52.237.118.111 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/120.0.0.0+Safari/537.36 - 301 619 ... show less	Web App Attack
🇬🇧 Greg Poulson	2026-05-28 03:40:23 (1 week ago)	Our website was hit by this DDOS at a rate of 48 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇦🇺 paulshipley.com.au	2026-05-28 03:24:47 (1 week ago)	furst.com.au:443 52.237.118.111 - - [28/May/2026:13:24:46 +1000] "GET /inputs.php HTTP/1.1" 404 7690 ... show more furst.com.au:443 52.237.118.111 - - [28/May/2026:13:24:46 +1000] "GET /inputs.php HTTP/1.1" 404 76909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇨🇦 TechnoSolutions CL	2026-05-28 03:09:15 (1 week ago)	52.237.118.111 - - [28/May/2026:03:09:10 +0000] "GET /wp-admin/ HTTP/1.1" 405 552 "-" "Mozilla/5.0 ( ... show more 52.237.118.111 - - [28/May/2026:03:09:10 +0000] "GET /wp-admin/ HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.237.118.111 - - [28/May/2026:03:09:13 +0000] "GET /wp-content/admin.php HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.237.118.111 - - [28/May/2026:03:09:14 +0000] "GET /wp-content/themes/pridmag/il.php HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.237.118.111 - - [28/May/2026:03:09:15 +0000] "GET /wp-content/index.php HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Hacking Brute-Force Web App Attack
🇺🇸 chronos	2026-05-28 02:56:46 (1 week ago)	[AUTORAVALT][[27/05/2026 - 23:56:46 -03:00 UTC] Attack from [Microsoft Corporation] [52.237.118.111] ... show more [AUTORAVALT][[27/05/2026 - 23:56:46 -03:00 UTC] Attack from [Microsoft Corporation] [52.237.118.111] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to pr] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇺🇸 xmission.com	2026-05-28 02:48:03 (1 week ago)	52.237.118.111 - - [27/May/2026:20:48:03 -0600] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 ... show more 52.237.118.111 - - [27/May/2026:20:48:03 -0600] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-05-28 02:32:19 (1 week ago)	shotbysuzanne.com.au:443 52.237.118.111 - - [28/May/2026:12:32:16 +1000] "GET /inputs.php HTTP/1.1" ... show more shotbysuzanne.com.au:443 52.237.118.111 - - [28/May/2026:12:32:16 +1000] "GET /inputs.php HTTP/1.1" 404 55612 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇹 www.tana.it	2026-05-28 02:27:42 (1 week ago)	PHP scan	Web App Attack
🇺🇸 markawes	2026-05-28 02:27:19 (1 week ago)	[markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. ... show more [markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. Evidence: 52.237.118.111 - - [28/May/2026:03:27:14 +0100] "GET /wp-admin/ HTTP/1.1" 404 509 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.237.118.111 - - [28/May/2026:03:27:17 +0100] "GET /wp-content/admin.php HTTP/1.1" 404 509 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.237.118.111 - - [28/May/2026:03:27:18 +0100] "GET /wp-content/themes/pridmag/il.php HTTP/1.1" 404 509 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Port Scan Hacking Web App Attack
🇫🇷 mrcrassi	2026-05-28 02:25:55 (1 week ago)	Triggered Cloudflare WAF (botFight) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET ... show more Triggered Cloudflare WAF (botFight) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-admin/css/colors/ectoplasm/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Ba-Yu	2026-05-28 02:17:50 (1 week ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 rh24	2026-05-28 02:17:26 (1 week ago)	52.237.118.111 (SG/Singapore/-), more than 25 Apache 403 hits	Hacking

Showing 481 to 495 of 593 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 210.4.68.72

🇳🇱 185.93.89.33

🇷🇺 83.147.245.82

🇫🇷 82.124.28.243

🇺🇸 45.156.129.76

🇳🇱 45.148.10.141

🇺🇸 45.61.187.220

🇩🇪 2a01:239:217:4800::1

🇩🇪 213.202.222.56

🇨🇭 193.32.127.244

🇳🇱 185.93.89.119

🇪🇸 172.110.221.82

🇺🇸 162.216.149.37

🇺🇸 152.32.148.250

🇨🇳 120.85.118.59

🇺🇸 107.150.105.5

🇮🇶 62.201.242.173

🇨🇦 51.161.84.110

🇧🇷 45.235.184.8

🇫🇷 45.84.88.32