JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.237.126.164

52.237.126.164 was found in our database!

This IP was reported 109 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.237.126.164

Whois 52.237.126.164

IP Abuse Reports for 52.237.126.164:

This IP address has been reported a total of 109 times from 103 distinct sources. 52.237.126.164 was first reported on July 4th 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Mario Bretscher	2026-07-04 13:55:24 (2 minutes ago)	[Sat Jul 04 15:55:22.692259 2026] [php:error] [pid 1406513] [client 52.237.126.164:14703] script '/v ... show more [Sat Jul 04 15:55:22.692259 2026] [php:error] [pid 1406513] [client 52.237.126.164:14703] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat [Sat Jul 04 15:55:22.852643 2026] [php:error] [pid 1406513] [client 52.237.126.164:14703] script '/var/www/html/002.php' not found or unable to stat [Sat Jul 04 15:55:23.014233 2026] [php:error] [pid 1406513] [client 52.237.126.164:14703] script '/var/www/html/sbdfe.php' not found or unable to stat ... show less	Web App Attack
🇫🇷 guillaume illien	2026-07-04 13:55:04 (2 minutes ago)	52.237.126.164 - - [04/Jul/2026:13:54:57 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 52.237.126.164 - - [04/Jul/2026:13:54:57 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 52.237.126.164 - - [04/Jul/2026:13:54:59 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 52.237.126.164 - - [04/Jul/2026:13:54:59 +0000] "GET /002.php HTTP/1.1" 301 178 "-" "-" 52.237.126.164 - - [04/Jul/2026:13:55:00 +0000] "GET /sbdfe.php HTTP/1.1" 301 178 "-" "-" 52.237.126.164 - - [04/Jul/2026:13:55:01 +0000] "GET /flox.php HTTP/1.1" 301 178 "-" "-" 52.237.126.164 - - [04/Jul/2026:13:55:02 +0000] "GET //wp-includes/assets/ HTTP/1.1" 301 178 "-" "-" 52.237.126.164 - - [04/Jul/2026:13:55:03 +0000] "GET /file61.php HTTP/1.1" 301 178 "-" "-" ... show less	Hacking Brute-Force Web App Attack SSH
🇺🇸 WellSpring	2026-07-04 13:54:11 (3 minutes ago)	Automated probe detected by Ody Sentinel / WellSpr.ing. Type: wordpress_content. Path: /wp-content/p ... show more Automated probe detected by Ody Sentinel / WellSpr.ing. Type: wordpress_content. Path: /wp-content/plugins/hellopress/wp_filemanager.php. Auto-blocked after threshold exceeded. Dossier: https://wellspr.ing/dossier/sentinel-52-237-126-164 show less	Web App Attack
🇫🇮 kumiko	2026-07-04 13:51:33 (6 minutes ago)	[2026-07-04 16:51:33] Probing for WordPress exploits [2 requests] "GET /wp-content/plugins/hellopr ... show more [2026-07-04 16:51:33] Probing for WordPress exploits [2 requests] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 "GET /wp-includes/assets/ HTTP/1.1" 403 show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kommunos	2026-07-04 13:51:32 (6 minutes ago)	/wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇺🇸 lnklnx	2026-07-04 13:49:06 (8 minutes ago)	www.rcmeal.com:80 52.237.126.164 - - [04/Jul/2026:08:49:04 -0500] "GET /wp-content/plugins/hellopres ... show more www.rcmeal.com:80 52.237.126.164 - - [04/Jul/2026:08:49:04 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 647 "-" "-" ... show less	Web App Attack
🇦🇹 penguin-solutions.at	2026-07-04 13:48:43 (9 minutes ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇩🇪 rh24	2026-07-04 13:47:05 (10 minutes ago)	(mod_security) mod_security triggered on hostname [redacted] 52.237.126.164 (SG/Singapore/-)	SQL Injection
Anonymous	2026-07-04 13:45:09 (12 minutes ago)	WordPress plugin direct access attempt: 52.237.126.164 - - [04/Jul/2026:14:45:08 +0100] "GET /wp-co ... show more WordPress plugin direct access attempt: 52.237.126.164 - - [04/Jul/2026:14:45:08 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 234 "-" "Unknown" show less	Hacking Web App Attack
🇺🇸 alecj.com	2026-07-04 13:42:46 (15 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇮🇹 alessio loto	2026-07-04 13:42:17 (15 minutes ago)	WAF Detection: Empty_UserAgent (High Risk IP). AI Confirmed Attack Payload.	Web App Attack
🇦🇺 2000cn.com.au	2026-07-04 13:41:19 (16 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇵🇱 stareradia.pl	2026-07-04 13:40:19 (17 minutes ago)	[Sat Jul 04 15:40:17.740022 2026] [php:error] [pid 2170121:tid 2170121] [client 52.237.126.164:0] sc ... show more [Sat Jul 04 15:40:17.740022 2026] [php:error] [pid 2170121:tid 2170121] [client 52.237.126.164:0] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat [Sat Jul 04 15:40:18.305868 2026] [php:error] [pid 2175244:tid 2175244] [client 52.237.126.164:0] script '/var/www/html/002.php' not found or unable to stat [Sat Jul 04 15:40:18.683794 2026] [php:error] [pid 2177137:tid 2177137] [client 52.237.126.164:0] script '/var/www/html/sbdfe.php' not found or unable to stat [Sat Jul 04 15:40:19.138100 2026] [php:error] [pid 2170434:tid 2170434] [client 52.237.126.164:0] script '/var/www/html/flox.php' not found or unable to stat ... show less	Web App Attack
🇧🇷 mubusys.com	2026-07-04 13:38:57 (18 minutes ago)	52.237.126.164 - - [04/Jul/2026:10:38:50 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 52.237.126.164 - - [04/Jul/2026:10:38:50 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 27 "-" "-" "-" 52.237.126.164 - - [04/Jul/2026:10:38:51 -0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 27 "-" "-" "-" show less	FTP Brute-Force Port Scan Hacking
🇺🇸 brantknudson.org	2026-07-04 13:37:58 (19 minutes ago)	Request path 'GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1'	Web App Attack Hacking

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 204.44.67.117

🇪🇨 170.246.87.169

🇮🇳 154.221.35.72

🇮🇳 117.236.137.4

🇭🇰 103.243.26.174

🇭🇰 103.100.208.168

🇺🇸 69.63.189.132

🇹🇼 198.235.24.98

🇱🇻 196.196.53.89

🇺🇸 136.113.185.71

🇺🇸 69.63.189.135

🇺🇸 67.207.94.191

🇺🇸 54.68.71.126

🇮🇳 49.207.10.116

🇨🇳 122.243.75.243

🇨🇳 115.190.50.19

🇺🇸 69.63.189.134

🇭🇰 45.249.244.136

🇧🇷 2804:fec:d432:1d00:34fe:549b:896:c4f8

🇺🇸 2620:171:16:f004:9999::42