JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 177.53.213.37

177.53.213.37 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 39%: ?

39%

ISP	UNIVERSAL-STEREO C.L.
Usage Type	Fixed Line ISP
ASN	AS263238
Hostname(s)	177-53-213-37.fibramax.ec
Domain Name	fibramax.ec
Country	🇪🇨 Ecuador
City	Quito, Pichincha

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 177.53.213.37

Whois 177.53.213.37

IP Abuse Reports for 177.53.213.37:

This IP address has been reported a total of 40 times from 24 distinct sources. 177.53.213.37 was first reported on January 19th 2025, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 23:53:28 (17 hours ago)	(mod_security) mod_security (id:210350) triggered by 177.53.213.37 (177-53-213-37.fibramax.ec): 1 in ... show more (mod_security) mod_security (id:210350) triggered by 177.53.213.37 (177-53-213-37.fibramax.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 19:53:24.209032 2026] [security2:error] [pid 26711:tid 26711] [client 177.53.213.37:52982] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|nesetsv.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nesetsv.com"] [uri "/"] [unique_id "aq3O9MseTRhBzlR0CtyvoAAAAAU"], referer: https://rankingschecker.space/dir/seo-link-building-experts-146686 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 01:18:47 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 177.53.213.37 (177-53-213-37.fibramax.ec): 1 in ... show more (mod_security) mod_security (id:210350) triggered by 177.53.213.37 (177-53-213-37.fibramax.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 21:18:43.784742 2026] [security2:error] [pid 8687:tid 8710] [client 177.53.213.37:37834] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|justaposephotography.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "justaposephotography.com"] [uri "/"] [unique_id "aqyRc5bPj7kzHhM6z_M25QAAABU"], referer: https://backlinkscheckersite.space/dir/professional-seo-backlinks-109894 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 20:38:36 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 177.53.213.37 (177-53-213-37.fibramax.ec): 1 in ... show more (mod_security) mod_security (id:210350) triggered by 177.53.213.37 (177-53-213-37.fibramax.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 16:38:31.076398 2026] [security2:error] [pid 18497:tid 18497] [client 177.53.213.37:42375] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|feaverslane.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "feaverslane.com"] [uri "/"] [unique_id "aqr-R7-ZIosbrOF4OeWqRQAAAA8"], referer: https://seoonlinechecker.website/dir/seo-optimized-backlinks-71140 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-12 21:01:55 (6 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇸🇪 KIDOS	2026-09-08 00:36:16 (1 week ago)	IIS malicious activity: sql_injection_attempt	Web App Attack
🇺🇸 kosada.com	2026-09-07 01:24:16 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_edition%3A504&f%5B1%5D=digest_key_terms%3A318&f%5B2%5D=digest_key_terms%3A320&field_article_edition%5B504%5D=504&field_key_terms%5B386%5D=386 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-09-04 01:31:51 (2 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-03 15:20:14 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇳🇱 DrLex0	2026-09-02 20:00:39 (2 weeks ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 177.53.213.37 443 - [02/Sep/2026:20:00:39 +0000] "GET [redacted] HTTP/1.1" 410 6196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇺🇸 gui-ying233	2026-08-30 04:15:17 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Tilellit.PRO	2026-08-24 00:08:52 (3 weeks ago)	PrestaShop faceted search filter flooding attempt	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-22 11:25:46 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇻🇳 trung.fun	2026-08-20 00:50:51 (4 weeks ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇺🇸 kosada.com	2026-08-18 03:05:25 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-27 23:30:22 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 159.224.231.103

🇸🇬 152.42.220.107

🇺🇸 147.185.132.157

🇺🇸 64.62.197.191

🇺🇸 172.172.170.199

🇹🇼 106.105.93.202

🇺🇸 34.94.64.183

🇷🇴 2.57.121.25

🇺🇸 2001:470:1:fb5::2c0

🇵🇱 176.53.159.198

🇱🇹 62.60.130.253

🇺🇸 54.172.145.72

🇺🇸 45.17.39.120

🇯🇪 5.42.135.171

🇺🇸 4.148.241.3

🇻🇳 202.60.105.134

🇮🇳 161.248.37.160

🇮🇳 106.202.78.46

🇺🇸 97.161.222.50

🇺🇸 216.180.246.238