JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.120.189.175

37.120.189.175

Activity Trending Down

31 reports found in our database

30% ▼ ▼ ▼ Elevated

Abuse confidence score ?

ISP

netcup GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS197540

Hostname(s)

v2202606372859474713.hotsrv.de

Domain Name

netcup.de

Country

🇩🇪 Germany

City

Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 37.120.189.175:

This IP address has been reported a total of 31 times from 19 distinct sources. 37.120.189.175 was first reported on June 26th 2026, and the most recent report was 1 month ago. In the last 60 days, the top reporter locations were: Germany with 6 reports; France with 5 reports; United States of America with 5 reports. The most common categories in these recent reports were: Brute-Force 12 times; Bad Web Bot 10 times; Web App Attack 10 times; DDoS Attack 6 times; Fraud VoIP 5 times; Other 8 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 MatStef132	2026-07-14 20:21:34 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-07-13 13:02:48 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇩🇪 todix	2026-07-12 22:05:04 (1 month ago)	Web App Attack Exploid from 37.120.189.175	Web App Attack
🇫🇷 MatStef132	2026-07-11 18:59:41 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇺🇸 Bankbook8585	2026-07-11 18:28:53 (1 month ago)	T-Pot honeypot \| adbhoney honeypot	Hacking
🇩🇪 NxtGenIT	2026-07-11 18:27:24 (1 month ago)	Adbhoneypot Honeypot hit, Event: adbhoney.command.input, Input: getprop ro.product.model	Web App Attack
🇩🇪 Axel	2026-07-11 18:26:18 (1 month ago)	[2026-07-11 18:26:18 UTC] Honeypot ADB (Android Debug Bridge) connection attempt \| AXFRA HONEYPOT	IoT Targeted
🇨🇦 1gz	2026-07-11 12:22:45 (1 month ago)	Triggered Cloudflare WAF (l7ddos) from DE. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from DE. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64; rv:147.0) Gecko/20100101 Firefox/147.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇹🇷 aphollone	2026-07-11 05:27:00 (1 month ago)	HTTP(S) DDoS traffic against techolay.net. This source generated approximately 25,060 requests durin ... show more HTTP(S) DDoS traffic against techolay.net. This source generated approximately 25,060 requests during the observed attack window. Supporting server and Cloudflare logs are available. show less	DDoS Attack
🇹🇷 aphollone	2026-07-11 05:27:00 (1 month ago)	HTTP(S) DDoS traffic against techolay.net. This source generated approximately 25 requests during th ... show more HTTP(S) DDoS traffic against techolay.net. This source generated approximately 25 requests during the observed attack window. Supporting server and Cloudflare logs are available. show less	DDoS Attack
🇹🇷 aphollone	2026-07-11 05:27:00 (1 month ago)	HTTP(S) DDoS traffic against techolay.net. This source generated approximately 0 requests during the ... show more HTTP(S) DDoS traffic against techolay.net. This source generated approximately 0 requests during the observed attack window. Supporting server and Cloudflare logs are available. show less	DDoS Attack
🇫🇷 MatStef132	2026-07-10 18:26:44 (1 month ago)	MatShield L7: blocked on mathost.eu (path-flood-burst)	DDoS Attack
🇺🇸 TPI-Abuse	2026-07-09 23:11:37 (1 month ago)	(mod_security) mod_security (id:217280) triggered by 37.120.189.175 (v2202606372859474713.hotsrv.de) ... show more (mod_security) mod_security (id:217280) triggered by 37.120.189.175 (v2202606372859474713.hotsrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 19:11:30.888701 2026] [security2:error] [pid 5899:tid 5899] [client 37.120.189.175:59586] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|www.fishleadership.org\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fishleadership.org"] [uri "/"] [unique_id "alAqoqweiz8vf05-xr2hhAAAAAY"], referer: http://www.fishleadership.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 m.skupin	2026-07-09 09:36:00 (1 month ago)		Brute-Force Web App Attack Fraud VoIP Hacking
🇨🇦 Aleigo Abuse	2026-07-09 09:05:51 (1 month ago)	SIP fraud attempt detected.	Web App Attack Brute-Force Fraud VoIP Hacking

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 197.39.59.32

🇺🇸 192.0.103.4

🇺🇸 172.172.193.149

🇰🇷 119.204.251.127

🇨🇳 112.31.109.13

🇺🇸 34.125.67.29

🇨🇳 27.212.111.170

🇺🇸 24.238.123.134

🇺🇸 8.234.43.143

🇩🇪 194.88.98.111

🇬🇧 188.240.59.43

🇫🇮 172.102.223.34

🇺🇸 167.89.0.17

🇺🇸 143.198.159.36

🇹🇼 113.61.139.207

🇩🇪 69.5.169.62

🇬🇧 195.206.182.199

🇺🇸 195.184.76.228

🇬🇧 193.163.125.173

🇧🇷 179.42.40.28