Total reports
9 from
8 distinct
reporters
First reported
November 10th 2026
Most recent report
9 hours ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
6
🇨🇿
Czechia
1
🇫🇮
Finland
1
Most common categories
Brute-Force
5
Web App Attack
4
Bad Web Bot
3
Port Scan
3
SSH
3
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
Indobsd
2026-11-12 22:02:28
UTC ·
(9 hours ago)
Port Scan
Web App Attack
SSH
🇺🇸
xmission.com
2026-11-12 20:58:40
UTC ·
(10 hours ago)
Blocked by UFW (TCP on 22)
Source port: 58206
TTL: 49
Packet length: 60
TOS: 0x08
This report (for 181.237.37.23) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
SSH
Brute-Force
🇺🇸
dot.mg
2026-11-12 19:16:43
UTC ·
(12 hours ago)
Bruteforce
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-12 16:07:45
UTC ·
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 181.237.37.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:07:38.458791 2026] [security2:error] [pid 24756:tid 24756] [client 181.237.37.23:39658] M ...
show more
(mod_security) mod_security (id:225170) triggered by 181.237.37.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:07:38.458791 2026] [security2:error] [pid 24756:tid 24756] [client 181.237.37.23:39658] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||universeinternational.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "universeinternational.org"] [uri "/wp-json/wp/v2/users"] [unique_id "avXkSokaqU2LgrKSfYgDAAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
thefuzz4
2026-11-12 00:19:37
UTC ·
(1 day ago)
SSH tarpit (endlessh): 2 unsolicited connection(s) to port 22. Automated report.
Brute-Force
SSH
2026-11-11 20:30:55
UTC ·
(1 day ago)
[Firewall] Blacklisted: manual | ISP: Colombia Telecomunicaciones S.a. ESP BIC | Origin: Bogotá, Colombia | Prior AbuseIPDB score: 25% (3 reports) | Blocked at: 2026-11-11 14:04:00
Brute-Force
🇫🇮
6kilowatti
2026-11-10 23:17:27
UTC ·
(2 days ago)
2026-11-11T01:17:26.946666+02:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=181.237.37.23 DST=192.168.0.102 LEN=60 TOS=0x18 PREC=0x20 TTL=52 ID=30563 DF PROTO=TCP SPT=34498 DPT=23 WINDOW=65535 RES=0x00 ...
show more
2026-11-11T01:17:26.946666+02:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=181.237.37.23 DST=192.168.0.102 LEN=60 TOS=0x18 PREC=0x20 TTL=52 ID=30563 DF PROTO=TCP SPT=34498 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
2026-11-10 21:30:08
UTC ·
(2 days ago)
| [Dangerous/Colombia] Aggressive IP 181.237.37.23 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-11-10 15:15:28
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 181.237.37.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:15:23.656162 2026] [security2:error] [pid 25270:tid 25270] [client 181.237.37.23:37438] M ...
show more
(mod_security) mod_security (id:225170) triggered by 181.237.37.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:15:23.656162 2026] [security2:error] [pid 25270:tid 25270] [client 181.237.37.23:37438] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||isslv.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "isslv.net"] [uri "/wp-json/wp/v2/users"] [unique_id "avM1C-O3I3d2TLO_FyDYJAAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
