AbuseIPDB » 37.131.57.114
37.131.57.114
This IP was reported 2 times. Confidence of
Abuse
is 14% : ?
ISP
VIVA Bahrain BSC CLOSED
Usage Type
Mobile ISP
ASN
AS51375
Domain Name
stc.com.bh
Country
🇧🇭
Bahrain
City
Ar Rifa', Southern Governorate
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 37.131.57.114 :
This IP address has been reported a total of
2
times from
2 distinct
sources.
37.131.57.114 was first reported on
October 7th 2026 , and the most recent report was
16 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-10-22 03:16:45
(16 hours ago)
[Thu Oct 22 10:16:44.351173 2026] [security2:error] [pid 876796:tid 140093838845632] [client 37.131. ...
show more
[Thu Oct 22 10:16:44.351173 2026] [security2:error] [pid 876796:tid 140093838845632] [client 37.131.57.114:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:referer: http://www.baidu.go.id/ request_line = GET /index.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "atmAHAXKqZ9Y8hXfxIPR8wAAAEM"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[876826] [BooQS+UA8DA] [atmAHAXKqZ9Y8hXfxIPR8wAAAEM] keep_alive=[0] [2026-10-22 10:16:44.351181] [R:atmAHAXKqZ9Y8hXfxIPR8wAAAEM] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/122.0.2365.99 Version/17.0 Mobile/15E148 Safari/604.1'
...
show less
Email Spam
Hacking
🇺🇸
TPI-Abuse
2026-10-07 12:01:33
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 37.131.57.114 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 37.131.57.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 08:01:29.685758 2026] [security2:error] [pid 9600:tid 9600] [client 37.131.57.114:51526] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||darkcodeproductions.com.darkcodedesign.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "darkcodeproductions.com.darkcodedesign.net"] [uri "/backup/production.sql"] [unique_id "asY0mUfOEmljNyt6LiX4AwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
2
of 2 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: