JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.37.32.112

193.37.32.112 was found in our database!

This IP was reported 623 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Singapore, Republic of Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.37.32.112

Whois 193.37.32.112

IP Abuse Reports for 193.37.32.112:

This IP address has been reported a total of 623 times from 199 distinct sources. 193.37.32.112 was first reported on July 25th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-06-18 22:49:05 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇧🇷 ICS Labs	2026-06-17 15:58:13 (3 days ago)	ICS Labs identified 193.37.32.112 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
Anonymous	2026-06-17 10:33:49 (3 days ago)	193.37.32.112 - - [17/Jun/2026:18:33:42 +0800] "GET /wp-includes/interactivity-api/wp-conflg.php HTT ... show more 193.37.32.112 - - [17/Jun/2026:18:33:42 +0800] "GET /wp-includes/interactivity-api/wp-conflg.php HTTP/1.1" 404 60968 "https://outfieldasia.com/wp-includes/interactivity-api/wp-conflg.php" "Go-http-client/1.1" 193.37.32.112 - - [17/Jun/2026:18:33:43 +0800] "GET /wp-includes/js/dist/vendor/about.php HTTP/1.1" 404 60968 "https://outfieldasia.com/wp-includes/js/dist/vendor/about.php" "Go-http-client/1.1" 193.37.32.112 - - [17/Jun/2026:18:33:44 +0800] "GET /ws.php HTTP/1.1" 404 360 "https://outfieldasia.com/ws.php" "Go-http-client/1.1" 193.37.32.112 - - [17/Jun/2026:18:33:45 +0800] "GET /ab.php HTTP/1.1" 404 360 "https://outfieldasia.com/ab.php" "Go-http-client/1.1" 193.37.32.112 - - [17/Jun/2026:18:33:45 +0800] "GET /wp-includes/l10n/wp-conflg.php HTTP/1.1" 404 60968 "https://outfieldasia.com/wp-includes/l10n/wp-conflg.php" "Go-http-client/1.1" 193.37.32.112 - - [17/Jun/2026:18:33:46 +0800] "GET /database.php HTTP/1.1" 404 360 "https://outfieldasia.com/database.php" "Go-http-client/1.1" 19 ... show less	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-06-16 19:50:44 (4 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob.fr	2026-06-16 08:30:15 (4 days ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇳🇱 Site.eu	2026-06-16 04:13:56 (5 days ago)	Excessive multi-domain requests	Brute-Force
🇬🇷 setupgr	2026-06-15 20:50:42 (5 days ago)	(mod_security) mod_security (id:1000001) triggered by 193.37.32.112: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:1000001) triggered by 193.37.32.112: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 23:50:41.017602 2026] [security2:error] [pid 1965768:tid 1965819] [client 193.37.32.112:64545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp-load.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "92"] [id "1000001"] [msg "Bad file blocked: /wp-content/languages/plugins/wp-load.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.adoro.gr"] [uri "/wp-content/languages/plugins/wp-load.php"] [unique_id "ajBloZhSggell5vQAURahgAAAVg"] show less	Port Scan
🇩🇪 4server	2026-06-15 17:30:43 (5 days ago)	[MonJun1519:30:39.2019042026][security2:error][pid72762:tid72812][client193.37.32.112:0]ModSecurity: ... show more [MonJun1519:30:39.2019042026][security2:error][pid72762:tid72812][client193.37.32.112:0]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof\"rx/index\\\\\\\\.php\$\"against\"REQUEST_FILENAME\"required.[file\"/etc/apache2/conf.d/modsec_rules/51_asl_wordpress_extra.conf\"][line\"33\"][id\"333149\"][rev\"21\"][msg\"Atomicorp.comWAFRules:PossiblePHPwebshelldetectedandblocked\"][severity\"CRITICAL\"][hostname\"mail.vg13.ch\"][uri\"/wp-content/uploads/wp-sync-db/admin.php\"][unique_id\"ajA2v5VVSGfNHMGayDC2QgAAAAM\"] show less	Port Scan Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-06-15 01:25:32 (6 days ago)	193.37.32.112 - - [15/Jun/2026:04:25:31 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 404 711 "-" ... show more 193.37.32.112 - - [15/Jun/2026:04:25:31 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 404 711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" ... show less	Web App Attack
🇫🇮 as211431.net	2026-06-14 16:43:09 (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-content/index.php UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 barbarella	2026-06-14 02:05:49 (1 week ago)	Multiple (3) times attack on http port 80: Tried to access Wordpress files (GET /wp-content/uploads/ ... show more Multiple (3) times attack on http port 80: Tried to access Wordpress files (GET /wp-content/uploads/wp-config.php) 04:05:50 Hacking attempt of Wordpress (GET /wp-includes/js/wp-config.php) 04:06:45 Hacking attempt of Wordpress (GET /wp-includes/images/wp-config.php) show less	Web App Attack
🇳🇱 Site.eu	2026-06-13 17:35:59 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 LRob.fr	2026-06-13 17:30:10 (1 week ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇩🇪 ghostwarriors	2026-06-13 10:20:26 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ddw	2026-06-13 02:48:18 (1 week ago)	Access Violation Attempts - Multiple 403 Forbidden responses.	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 623 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.246

🇸🇬 152.32.218.149

🇫🇷 128.79.142.83

🇸🇪 104.23.221.148

🇺🇸 207.204.228.202

🇺🇸 165.154.163.10

🇺🇸 155.117.232.67

🇬🇭 154.161.182.221

🇨🇳 112.53.123.177

🇱🇹 46.29.234.126

🇨🇳 220.181.108.145

🇰🇷 218.157.205.238

🇧🇷 181.233.55.36

🇷🇺 176.195.93.253

🇰🇷 115.140.161.61

🇳🇬 102.88.21.136

🇺🇸 99.144.123.156

🇨🇳 60.191.221.172

🇸🇬 58.182.17.56

🇺🇸 47.251.116.61