JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.110.214.132

37.110.214.132 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 35%: ?

35%

ISP	UNITEL LLC (BEELINE UZBEKISTAN)
Usage Type	Mobile ISP
ASN	AS41202
Domain Name	beeline.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.110.214.132

Whois 37.110.214.132

IP Abuse Reports for 37.110.214.132:

This IP address has been reported a total of 15 times from 11 distinct sources. 37.110.214.132 was first reported on May 4th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 pltcldvlpr	2026-07-28 04:59:47 (15 hours ago)	Bogus Useragent: 37.110.214.132 - - [28/Jul/2026:06:59:46 +0200] "GET /protocol?id=he_20_131&offset= ... show more Bogus Useragent: 37.110.214.132 - - [28/Jul/2026:06:59:46 +0200] "GET /protocol?id=he_20_131&offset=150&seq=140 HTTP/1.1" 444 0 "-" "Opera/9.53.(Windows CE; ayc-PE) Presto/2.9.177 Version/10.00" asn=41202 org="UNITEL LLC" country=UZ ... show less	Bad Web Bot
🇨🇭 Origon	2026-07-23 03:30:42 (5 days ago)	NOQUEUE - IP: 37.110.214.132 - Jul 23 05:30:42 plesk postfix/smtpd[1874093]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 37.110.214.132 - Jul 23 05:30:42 plesk postfix/smtpd[1874093]: NOQUEUE: reject: RCPT from unknown[37.110.214.132]: 554 5.7.1 Service unavailable; Client host [37.110.214.132] blocked using dnsbl-1.uceprotect.net; IP 37.110.214.132 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=37.110.214.132; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[37.110.214.132]> show less	Email Spam
🇺🇸 kosada.com	2026-07-12 04:18:43 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇳🇱 soverin	2026-07-11 04:49:04 (2 weeks ago)	spam	Email Spam
🇺🇸 TPI-Abuse	2026-07-09 19:26:11 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 37.110.214.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 37.110.214.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 15:26:05.859972 2026] [security2:error] [pid 21638:tid 21638] [client 37.110.214.132:11762] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 37.110.214.132 (+1 hits since last alert)\|deborahbein.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "deborahbein.com"] [uri "/xmlrpc.php"] [unique_id "ak_1zSAo1RSeeoDJWO95uQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 19:46:03 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 37.110.214.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 37.110.214.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 15:45:54.870264 2026] [security2:error] [pid 8811:tid 8811] [client 37.110.214.132:8366] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 37.110.214.132 (+1 hits since last alert)\|phoboschildren.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "phoboschildren.com"] [uri "/xmlrpc.php"] [unique_id "akli8moo1hKKrz_0VK6YMAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 15:29:21 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Reinhard	2026-06-22 05:23:28 (1 month ago)	Harvesting non-existent pages or unknown malicious BOT.	Bad Web Bot
🇩🇪 ghostwarriors	2026-06-09 03:20:23 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇳🇱 soverin	2026-06-05 15:19:01 (1 month ago)	spam	Email Spam
🇨🇭 Origon	2026-06-05 08:04:26 (1 month ago)	NOQUEUE - IP: 37.110.214.132 - Jun 5 10:04:26 plesk postfix/smtpd[1464064]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 37.110.214.132 - Jun 5 10:04:26 plesk postfix/smtpd[1464064]: NOQUEUE: reject: RCPT from unknown[37.110.214.132]: 554 5.7.1 Service unavailable; Client host [37.110.214.132] blocked using dnsbl-2.uceprotect.net; Net 37.110.212.0/22 is UCEPROTECT-Level2 listed because 24 impacts are seen from UNITEL, UZ/AS41202 there. See: http://www.uceprotect.net/rblcheck.php?ipr=37.110.214.132 / Net 37.110.208.0/21 is UCEPROTECT-Level2 listed because 65 impacts are seen from UNITEL, UZ/AS41202 there. See: http://www.uceprotect.net/rblcheck.php?ipr=37.110.214.132; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[37.110.211.32]> show less	Email Spam
🇫🇷 security.rdmc.fr	2026-05-21 09:30:13 (2 months ago)	Port Scan Attack proto:TCP src:40782 dst:23	Port Scan
🇬🇧 knock	2026-05-15 05:17:18 (2 months ago)	Knock-Knock honeypot brute-force: SMB (4 total hits)	Brute-Force
🇩🇪 HandyTreff.de	2026-05-11 19:00:37 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -60.218 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -60.218 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa show less	Web App Attack Bad Web Bot
Anonymous	2026-05-04 20:45:35 (2 months ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.162.218.85

🇮🇳 163.223.191.2

🇮🇩 163.7.11.126

🇺🇸 154.94.3.246

🇺🇸 52.167.144.58

🇺🇸 52.167.144.23

🇳🇱 46.151.178.13

🇬🇭 41.139.60.62

🇬🇧 35.203.210.207

🇺🇸 34.230.6.118

🇺🇸 32.192.4.86

🇯🇵 8.216.13.61

🇺🇸 3.89.60.38

🇨🇭 209.99.191.19

🇺🇸 195.184.76.1

🇦🇷 190.181.100.202

🇮🇩 180.245.155.49

🇺🇸 164.92.111.19

🇺🇸 107.167.34.125

🇺🇸 104.210.56.226