JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.114.50.18

37.114.50.18 was found in our database!

This IP was reported 603 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	DATALIX
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58087
Hostname(s)	18.50.114.37.in-addr.arpa
Domain Name	datalix.de
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.114.50.18

Whois 37.114.50.18

IP Abuse Reports for 37.114.50.18:

This IP address has been reported a total of 603 times from 224 distinct sources. 37.114.50.18 was first reported on March 7th 2025, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Kenshin869	2026-06-05 20:55:52 (15 hours ago)	Wordpress unauthorized access attempt	Brute-Force
🇩🇪 4server	2026-06-05 19:17:13 (16 hours ago)	[FriJun0521:17:09.8757012026][security2:error][pid1180740:tid1180899][client37.114.50.18:0]ModSecuri ... show more [FriJun0521:17:09.8757012026][security2:error][pid1180740:tid1180899][client37.114.50.18:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"vulcanoricambi.ch\"][uri\"/\"][unique_id\"aiMgtWda9sqC7uys7Wnw9gAAARM\"] show less	Port Scan Brute-Force Web App Attack
🇵🇱 nfsec.pl	2026-06-05 00:02:27 (1 day ago)	37.114.50.18 - - [05/Jun/2026:00:02:25 +0000] "GET /app/etc/env.php HTTP/1.1" 404 30056 "-" "Mozilla ... show more 37.114.50.18 - - [05/Jun/2026:00:02:25 +0000] "GET /app/etc/env.php HTTP/1.1" 404 30056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" 37.114.50.18 - - [05/Jun/2026:00:02:26 +0000] "GET /app/etc/local.xml HTTP/1.1" 404 25350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" 37.114.50.18 - - [05/Jun/2026:00:02:26 +0000] "GET /wp-config.php HTTP/1.1" 403 2054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" 37.114.50.18 - - [05/Jun/2026:00:02:26 +0000] "GET /application/config/database.php HTTP/1.1" 404 25425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" 37.114.50.18 - - [05/Jun/2026:00:02:26 +0000] "GET /config/database.yml HTTP/1.1" 404 25658 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ... show less	Web App Attack Exploited Host
🇩🇪 s@ch@	2026-06-04 20:00:10 (1 day ago)	Jail: plesk-panel \| Web application attack (Plesk Panel)	Web App Attack
🇩🇪 sverson	2026-06-04 03:02:22 (2 days ago)	Automated report	Hacking
🇮🇩 sockominfo	2026-06-03 14:00:38 (2 days ago)	PHP CGI-bin vulnerability attempt.. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (No ... show more PHP CGI-bin vulnerability attempt.. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-03 13:00:38 (2 days ago)	PHP CGI-bin vulnerability attempt.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (No ... show more PHP CGI-bin vulnerability attempt.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-03 12:00:11 (3 days ago)	PHP CGI-bin vulnerability attempt.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CS ... show more PHP CGI-bin vulnerability attempt.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 LRob.fr	2026-06-02 12:45:03 (3 days ago)	Malicious automated scanning and prompt injection attempts on AI chatbot endpoint.	Bad Web Bot Web App Attack
🇨🇦 JuicyJ	2026-06-02 11:29:38 (4 days ago)	Trying to look for places to exploit	Web Spam
🇩🇪 findlab	2026-06-02 08:35:01 (4 days ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-06-02 02:35:26 (4 days ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 ghostwarriors	2026-06-01 22:20:31 (4 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 london2038.com	2026-06-01 20:50:02 (4 days ago)	Detected by WP fail2ban 2026-06-01T22:50:01.078351+02:00 wordpress: Authentication attempt from 37.1 ... show more Detected by WP fail2ban 2026-06-01T22:50:01.078351+02:00 wordpress: Authentication attempt from 37.114.50.18 show less	Brute-Force Web App Attack
🇩🇪 sverson	2026-06-01 11:06:05 (5 days ago)	Automated report	Hacking

Showing 1 to 15 of 603 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 175.107.217.213

🇩🇪 152.53.22.186

🇮🇹 79.50.89.38

🇬🇧 3.9.179.117

🇧🇷 186.238.247.238

🇺🇸 185.180.141.70

🇵🇪 161.132.37.31

🇺🇸 144.202.92.17

🇨🇳 120.48.148.35

🇨🇳 111.47.243.219

🇷🇺 81.177.101.45

🇱🇺 64.89.161.184

🇺🇸 54.153.77.8

🇫🇷 51.178.137.163

🇬🇧 37.156.65.64

🇧🇪 35.240.97.176

🇦🇺 16.176.174.161

🇸🇬 13.212.50.106

🇳🇱 5.61.209.126

🇷🇴 2.57.121.25