AbuseIPDB » 37.215.1.63
37.215.1.63
This IP was reported 9 times. Confidence of
Abuse
is 30% : ?
ISP
BELTELECOM
Usage Type
Fixed Line ISP
ASN
AS6697
Hostname(s)
mm-63-1-215-37.mfilial.dynamic.pppoe.byfly.by
Domain Name
beltelecom.by
Country
🇧🇾
Belarus
City
Barysaw, Minsk
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 37.215.1.63 :
This IP address has been reported a total of
9
times from
7 distinct
sources.
37.215.1.63 was first reported on
January 19th 2022 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-09-16 21:38:33
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 37.215.1.63 (mm-63-1-215-37.mfilial.dynamic.ppp ...
show more
(mod_security) mod_security (id:210492) triggered by 37.215.1.63 (mm-63-1-215-37.mfilial.dynamic.pppoe.byfly.by): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 17:36:42.853400 2026] [security2:error] [pid 19522:tid 19522] [client 37.215.1.63:3456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flugstad.com"] [uri "/app/config/parameters.yml.1"] [unique_id "aqsL6qq1n_Yu1SgQFZ1PogAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇹
Malta
2026-09-11 15:15:27
(1 week ago)
37.215.1.63 - - [11/Sep/2026:17:15:27 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ...
show more
37.215.1.63 - - [11/Sep/2026:17:15:27 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇫🇷
masterguru
2026-09-09 05:25:24
(1 week ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 37.215.1.63 (BY/Belarus/mm-63-1-215-37.mfilia ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 37.215.1.63 (BY/Belarus/mm-63-1-215-37.mfilial.dynamic.pppoe.byfly.by): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-09-09 02:20:11
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 37.215.1.63 (mm-63-1-215-37.mfilial.dynamic.ppp ...
show more
(mod_security) mod_security (id:225170) triggered by 37.215.1.63 (mm-63-1-215-37.mfilial.dynamic.pppoe.byfly.by): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 22:20:03.766703 2026] [security2:error] [pid 4645:tid 4645] [client 37.215.1.63:3078] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kimbrothersduluth.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kimbrothersduluth.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqDCU6q5PrMB4E9gkAK9AgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
nyuuzyou
2026-09-08 11:59:52
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on applic ...
show more
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-08T11:59:52Z.
show less
Bad Web Bot
🇺🇸
kosada.com
2026-07-31 09:11:39
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-18 12:14:06
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇳🇱
exxos
2025-08-07 07:03:01
(1 year ago)
http-no-verb
Hacking
🇿🇦
IrisFlower
2022-01-19 11:53:43
(4 years ago)
Unauthorized connection attempt detected from IP address 37.215.1.63 to port 22 [J]
Port Scan
Hacking
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: