JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.238.68.4

37.238.68.4 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 31%: ?

31%

ISP	EarthLink Ltd. Communications&Internet Services
Usage Type	Fixed Line ISP
ASN	AS203214
Domain Name	earthlink.iq
Country	🇮🇶 Iraq
City	Mosul, Nineveh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.238.68.4

Whois 37.238.68.4

IP Abuse Reports for 37.238.68.4:

This IP address has been reported a total of 23 times from 16 distinct sources. 37.238.68.4 was first reported on June 30th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-26 18:35:04 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-26 17:17:03 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-25 19:09:20 (1 week ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-post.asp show less	Exploited Host Bad Web Bot
🇩🇪 klaus_ph	2026-08-16 03:31:45 (2 weeks ago)	37.238.68.4 - - [15/Aug/2026:03:58:35 +0200] "GET /lka/Record/z0000121/Cite?lng=uk HTTP/1.1" 500 312 ... show more 37.238.68.4 - - [15/Aug/2026:03:58:35 +0200] "GET /lka/Record/z0000121/Cite?lng=uk HTTP/1.1" 500 31230 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.17 Safari/537.36" ... show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-13 09:04:46 (2 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇷🇴 INTEQ	2026-07-15 13:16:12 (1 month ago)	Web attack from 37.238.68.4	Web App Attack
🇺🇸 stechusa	2026-07-14 18:06:49 (1 month ago)	[Askari] \| Behavior: Slow-read attack, HTTP/1.1 over TLS, Concurrent page load during attack, Target ... show more [Askari] \| Behavior: Slow-read attack, HTTP/1.1 over TLS, Concurrent page load during attack, Targeting specific pages, URL template abuse show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-07-14 18:06:49 (1 month ago)	ELEVATED_THREAT \| 623 IPs targeting /brand.html \| URL template shared by 298 IPs: /brand.html?bulb_s ... show more ELEVATED_THREAT \| 623 IPs targeting /brand.html \| URL template shared by 298 IPs: /brand.html?bulb_shape=&bulb_shape_type=&bulb_type=&mode=list&p= \| Facet request during elevated threat (facet_ratio=0.97, unique_ips=832) show less	Bad Web Bot DDoS Attack
🇪🇸 elcruzado.es	2026-05-19 22:37:21 (3 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 37.238.68.4 (IQ/Iraq ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 37.238.68.4 (IQ/Iraq/-) show less	Bad Web Bot
🇹🇷 Threat.live	2026-05-06 16:25:16 (3 months ago)	Suspicious Connection Attempts	Brute-Force
Anonymous	2026-05-02 20:49:41 (4 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp show less	Exploited Host Bad Web Bot
Anonymous	2026-04-20 11:18:25 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇳🇱 DrLex0	2026-04-11 09:11:07 (4 months ago)	BnL001: instant single request only to 1 page forbidden by robots.txt. Host is likely part of a botn ... show more BnL001: instant single request only to 1 page forbidden by robots.txt. Host is likely part of a botnet. show less	Bad Web Bot Exploited Host
🇺🇸 TPI-Abuse	2026-03-21 13:08:04 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 37.238.68.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 37.238.68.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 09:07:56.273660 2026] [security2:error] [pid 32578:tid 32578] [client 37.238.68.4:41544] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hudson II/Vermont Bark/Recliner/Thumbs.db"] [unique_id "ab6YLCQbI0cPJQg33YtfywAAAAk"], referer: https://vitalitywebb.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-02-14 00:36:15 (6 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.223.107.86

🇺🇸 172.59.69.171

🇸🇪 162.158.183.41

🇵🇭 156.236.93.46

🇺🇸 147.185.132.73

🇯🇵 43.153.154.237

🇺🇸 34.48.119.24

🇺🇸 2a03:2880:f810:4e::

🇩🇪 213.209.159.210

🇦🇷 190.196.253.52

🇦🇺 124.171.133.25

🇳🇱 91.92.40.217

🇺🇸 64.62.197.35

🇮🇶 62.201.212.54

🇹🇼 36.238.114.113

🇺🇸 2607:f8b0:4001:c1c::125

🇳🇱 195.178.110.218

🇬🇷 191.96.146.167

🇹🇳 165.51.28.234

🇸🇬 84.75.150.5