JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.238.63.132

37.238.63.132 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 30%: ?

30%

ISP	EarthLink Ltd. Communications&Internet Services
Usage Type	Fixed Line ISP
ASN	AS203214
Domain Name	earthlink.iq
Country	🇮🇶 Iraq
City	Baghdad, Baghdad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.238.63.132

Whois 37.238.63.132

IP Abuse Reports for 37.238.63.132:

This IP address has been reported a total of 30 times from 22 distinct sources. 37.238.63.132 was first reported on January 15th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-06-13 00:27:06 (1 week ago)	Scraping webshop URLs (www.instanttrustmarine.com), likely botnet drone	Bad Web Bot Exploited Host
🇩🇪 pltcldvlpr	2026-06-04 08:49:49 (2 weeks ago)	Bogus Useragent: 37.238.63.132 - - [04/Jun/2026:10:49:49 +0200] "GET /protocol?id=sn_7_85&paragraph= ... show more Bogus Useragent: 37.238.63.132 - - [04/Jun/2026:10:49:49 +0200] "GET /protocol?id=sn_7_85&paragraph=14103710&seq=1353 HTTP/1.1" 444 0 "-" "Opera/8.58.(X11; Linux i686; af-ZA) Presto/2.9.189 Version/10.00" asn=203214 org="Hulum Almustakbal Company for Communication Engineering and Services Ltd" country=IQ ... show less	Bad Web Bot
Anonymous	2026-05-16 10:39:21 (1 month ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇩🇪 milcraft.nl	2026-05-15 09:45:21 (1 month ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇺🇸 MPL	2026-05-11 11:16:03 (1 month ago)	tcp/23	Port Scan
🇫🇷 security.rdmc.fr	2026-05-11 07:16:56 (1 month ago)	Port Scan Attack proto:TCP src:12179 dst:23	Port Scan
🇫🇷 security.rdmc.fr	2026-05-08 05:42:26 (1 month ago)	Port Scan Attack proto:TCP src:50178 dst:23	Port Scan
🇦🇺 PetePK	2026-05-07 19:29:01 (1 month ago)	Probed 1 time(s): TCP/23	Port Scan
🇺🇸 TPI-Abuse	2026-05-07 18:25:32 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 37.238.63.132 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 37.238.63.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 14:25:23.707449 2026] [security2:error] [pid 22170:tid 22170] [client 37.238.63.132:21823] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gilesvolvocarselpaso.com.acadianahero.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gilesvolvocarselpaso.com.acadianahero.com"] [uri "/instagram.com"] [unique_id "afzZE1kKS6uc3GA6K78EXgAAAAk"], referer: http://gilesvolvocarselpaso.com.acadianahero.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-20 11:03:02 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 37.238.63.132 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 37.238.63.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 07:02:52.329269 2026] [security2:error] [pid 19802:tid 19802] [client 37.238.63.132:29417] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.benjaminshaw.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.benjaminshaw.com"] [uri "/baggywrinkle/quote.bak"] [unique_id "aeYH3KCRzrk5nyr4bmP-BgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2026-04-14 11:39:52 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -76.216 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -76.216 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇺🇸 stechusa	2026-04-13 23:34:57 (2 months ago)	[Askari] \| country=IQ \| Behavior: Outdated browser, Concurrent page load during attack, HTTP/1.1 ove ... show more [Askari] \| country=IQ \| Behavior: Outdated browser, Concurrent page load during attack, HTTP/1.1 over TLS, Targeting specific pages show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-04-13 23:34:57 (2 months ago)	ELEVATED_THREAT \| country=IQ \| ASN=Hulum Almustakbal Company for Communication Engineering and Servi ... show more ELEVATED_THREAT \| country=IQ \| ASN=Hulum Almustakbal Company for Communication Engineering and Services Ltd \| AbuseIPDB=52% \| 11 IPs targeting /category/light-bulbs.html \| HTTP/1.1 over TLS (elevated=True) \| Facet request during elevated threat (facet_ratio=0.58, unique_ips=60) show less	Bad Web Bot DDoS Attack
Anonymous	2026-04-10 20:21:35 (2 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp show less	Exploited Host Bad Web Bot
Anonymous	2026-03-30 20:57:04 (2 months ago)	2026-03-30 22:57:04 ERROR util.AccessViolations - 37.238.63.132 report to fail2ban - action: block . ... show more 2026-03-30 22:57:04 ERROR util.AccessViolations - 37.238.63.132 report to fail2ban - action: block ... show less	Hacking Brute-Force Bad Web Bot

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.37

🇵🇱 87.251.64.141

🇧🇪 34.62.139.47

🇺🇸 205.210.31.83

🇺🇸 172.59.242.168

🇺🇸 162.216.150.96

🇨🇦 139.177.194.83

🇨🇳 120.48.1.102

🇦🇷 45.238.106.173

🇩🇪 5.253.246.158

🇨🇳 222.176.201.40

🇺🇸 216.180.246.191

🇺🇸 205.210.31.71

🇧🇷 190.115.84.25

🇨🇳 182.54.23.46

🇺🇸 165.154.163.215

🇺🇸 162.216.149.171

🇭🇰 144.48.8.10

🇨🇦 143.105.55.104

🇯🇵 124.155.125.131