JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.150.74.196

37.150.74.196 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 74%: ?

74%

ISP	JSC Kazakhtelecom
Usage Type	Fixed Line ISP
ASN	AS9198
Hostname(s)	37.150.74.196.dynamic.telecom.kz
Domain Name	telecom.kz
Country	🇰🇿 Kazakhstan
City	Astana, Astana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.150.74.196

Whois 37.150.74.196

IP Abuse Reports for 37.150.74.196:

This IP address has been reported a total of 16 times from 12 distinct sources. 37.150.74.196 was first reported on July 27th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-29 12:35:10 (1 hour ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-07-29 07:00:00 (6 hours ago)	Apache probe; attempts=33; exact paths: /xmlrpc.php	Web App Attack
🇩🇪 ghostwarriors	2026-07-28 20:20:34 (17 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-28 20:10:55 (17 hours ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇫🇮 YF	2026-07-28 17:30:44 (20 hours ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇩🇪 akasolutions.de	2026-07-28 16:35:23 (21 hours ago)	(wordpress) Failed wordpress login from 37.150.74.196 (KZ/Kazakhstan/37.150.74.196.dynamic.telecom.k ... show more (wordpress) Failed wordpress login from 37.150.74.196 (KZ/Kazakhstan/37.150.74.196.dynamic.telecom.kz) show less	Brute-Force
🇺🇸 jsjdmediallc	2026-07-28 04:40:05 (1 day ago)	Auto-blocked: score 144 (threshold 10). Tier: HIGH. Hits: 28. Flags: xmlrpc, xmlrpc-burst. Paths: /x ... show more Auto-blocked: score 144 (threshold 10). Tier: HIGH. Hits: 28. Flags: xmlrpc, xmlrpc-burst. Paths: /xmlrpc.php, /xmlrpc.php, /xmlrpc.php, /xmlrpc.php, /xmlrpc.php show less	Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-28 04:35:41 (1 day ago)	(xmlrpc) Failed xmlrpc access from 37.150.74.196 (KZ/Kazakhstan/37.150.74.196.dynamic.telecom.kz): 5 ... show more (xmlrpc) Failed xmlrpc access from 37.150.74.196 (KZ/Kazakhstan/37.150.74.196.dynamic.telecom.kz): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-28 04:03:50 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 37.150.74.196 (37.150.74.196.dynamic.telecom.kz ... show more (mod_security) mod_security (id:240335) triggered by 37.150.74.196 (37.150.74.196.dynamic.telecom.kz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 00:03:47.017896 2026] [security2:error] [pid 1425423:tid 1425423] [client 37.150.74.196:63625] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 37.150.74.196 (+1 hits since last alert)\|insidepublications.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "insidepublications.com"] [uri "/xmlrpc.php"] [unique_id "amgqI_2SIrclJe81MSL3VwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-28 03:32:57 (1 day ago)	[ns41.kdns.gr] httpd-xmlrpc-post: sites=www.kkourelis.gr; logs=/var/log/httpd/domains/kkourelis.gr.l ... show more [ns41.kdns.gr] httpd-xmlrpc-post: sites=www.kkourelis.gr; logs=/var/log/httpd/domains/kkourelis.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 21:24:19 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 37.150.74.196 (37.150.74.196.dynamic.telecom.kz ... show more (mod_security) mod_security (id:240335) triggered by 37.150.74.196 (37.150.74.196.dynamic.telecom.kz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 17:24:13.083855 2026] [security2:error] [pid 3885162:tid 3885162] [client 37.150.74.196:56268] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 37.150.74.196 (+1 hits since last alert)\|virtualmediamasters.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "virtualmediamasters.net"] [uri "/xmlrpc.php"] [unique_id "amfMfYpNcW8mE-XRGFqfqwAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 19:53:09 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 37.150.74.196 (37.150.74.196.dynamic.telecom.kz ... show more (mod_security) mod_security (id:240335) triggered by 37.150.74.196 (37.150.74.196.dynamic.telecom.kz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 15:53:01.483039 2026] [security2:error] [pid 1307931:tid 1307931] [client 37.150.74.196:62570] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 37.150.74.196 (+1 hits since last alert)\|waterjetsolutions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "waterjetsolutions.com"] [uri "/xmlrpc.php"] [unique_id "ame3Harw6CrxVvVclgHv_AAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-27 19:49:28 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 19:00:46 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 37.150.74.196 (37.150.74.196.dynamic.telecom.kz ... show more (mod_security) mod_security (id:240335) triggered by 37.150.74.196 (37.150.74.196.dynamic.telecom.kz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 15:00:42.563091 2026] [security2:error] [pid 1474431:tid 1474431] [client 37.150.74.196:55558] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 37.150.74.196 (+1 hits since last alert)\|ohiohca.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ohiohca.com"] [uri "/xmlrpc.php"] [unique_id "ameq2ruPgpuHz7k7nwLfBQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-07-27 17:14:47 (1 day ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 167.99.155.75

🇨🇳 122.191.115.237

🇨🇳 118.196.68.35

🇬🇧 118.193.64.15

🇧🇪 109.138.83.25

🇻🇳 103.9.77.247

🇺🇸 91.230.168.140

🇳🇱 77.91.71.11

🇧🇷 43.157.163.155

🇨🇦 20.63.98.115

🇱🇹 194.165.16.164

🇺🇸 162.251.236.178

🇺🇸 23.247.179.33

🇺🇸 23.247.178.253

🇳🇱 23.176.184.152

🇷🇴 2.57.122.168

🇬🇧 2a06:4880:a000::c3

🇬🇧 2001:41d0:801:2000::4b64

🇧🇷 201.63.223.140

🇳🇱 185.223.235.45