JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.46.113.215

37.46.113.215 was found in our database!

This IP was reported 103 times. Confidence of Abuse is 16%: ?

16%

ISP	AltusHost Luxembourg Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51430
Hostname(s)	lux-net-ip.as51430.net
Domain Name	altushost.com
Country	🇳🇱 Netherlands
City	Zwolle, Overijssel

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.46.113.215

Whois 37.46.113.215

IP Abuse Reports for 37.46.113.215:

This IP address has been reported a total of 103 times from 55 distinct sources. 37.46.113.215 was first reported on November 28th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-04 00:50:55 (1 week ago)	(mod_security) mod_security (id:210801) triggered by 37.46.113.215 (lux-net-ip.as51430.net): 1 in th ... show more (mod_security) mod_security (id:210801) triggered by 37.46.113.215 (lux-net-ip.as51430.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 20:50:49.836581 2026] [security2:error] [pid 12547:tid 12547] [client 37.46.113.215:7793] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|bowlinggreenrosesociety.org\|F\|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "bowlinggreenrosesociety.org"] [uri "/license.txt"] [unique_id "aiDL6ZFD8LvTF1250x1ZfAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 00:26:52 (1 week ago)	(mod_security) mod_security (id:210801) triggered by 37.46.113.215 (lux-net-ip.as51430.net): 1 in th ... show more (mod_security) mod_security (id:210801) triggered by 37.46.113.215 (lux-net-ip.as51430.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 20:26:44.763902 2026] [security2:error] [pid 5506:tid 5506] [client 37.46.113.215:50428] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|heckenbach.org\|F\|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "heckenbach.org"] [uri "/license.txt"] [unique_id "aiDGRMxy0lSSO3rm1ZR2OgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 vitex	2026-05-26 04:00:00 (2 weeks ago)	Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically cr ... show more Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically crawled git blame endpoints (/*/blame/commit/<hash>/file) across all commits of public repositories, causing server load of 17+ (normal: <2). Over 71,000 unique IPs involved. Attack window: 2026-05-26 03:30-06:37 UTC. Primary target: PureHTML/purezencart (9933 commits, 5065 files). Each blame request triggers expensive git operations; 30,000+ slow requests per hour. show less	DDoS Attack Bad Web Bot
🇩🇪 big-cloud.nl	2026-05-14 10:03:59 (1 month ago)	Try to access /xmlrpc.php	Web App Attack
🇷🇴 clauss	2026-01-30 12:36:45 (4 months ago)	IP reached maximum auth failures for a one day block	Brute-Force
🇧🇷 SvrAdmin	2025-12-29 06:42:45 (5 months ago)	[101] (smtpauth) Failed SMTP AUTH login from 37.46.113.215 (LU/Luxembourg/lux-net-ip.as51430.net): 5 ... show more [101] (smtpauth) Failed SMTP AUTH login from 37.46.113.215 (LU/Luxembourg/lux-net-ip.as51430.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-12-29 03:42:06 dovecot_login authenticator failed for (ADMIN) [37.46.113.215]:21947: 535 Incorrect authentication data ([email protected]) 2025-12-29 03:42:06 dovecot_login authenticator failed for (ADMIN) [37.46.113.215]:47595: 535 Incorrect authentication data ([email protected]) 2025-12-29 03:42:20 dovecot_login authenticator failed for (ADMIN) [37.46.113.215]:22188: 535 Incorrect authentication data ([email protected]) 2025-12-29 03:42:21 dovecot_login authenticator failed for (ADMIN) [37.46.113.215]:24800: 535 Incorrect authentication data ([email protected]) 2025-12-29 03:42:40 dovecot_login authenticator failed for (ADMIN) [37.46.113.215]:59832: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
Anonymous	2025-12-24 14:35:11 (5 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇩🇪 guldkage	2025-12-19 06:30:44 (5 months ago)	Unauthorized connection attempt detected from IP address 37.46.113.215 to port 23 (ger-02) [TELNET]	Exploited Host
Anonymous	2025-12-11 13:53:49 (6 months ago)	Web Server atack ...	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇧🇪 cmbplf	2025-12-09 03:21:38 (6 months ago)	362 requests with user_agent.original Mozilla/5.0 (Linux; Android 6.0.1; SM-G532MT Build/MMB29T; wv ... show more 362 requests with user_agent.original Mozilla/5.0 (Linux; Android 6.0.1; SM-G532MT Build/MMB29T; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/99.0.4844.88 Mobile Safari/537.36 [FB_IAB/FB4A;FBAV/436.0.0.35.101;] 357 requests with user_agent.original AppleCoreMedia/1.0.0.23A344 (Macintosh; U; Intel Mac OS X 14_0; da_dk) 352 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC; en-US; rv:0.9.3) Gecko/20010802 348 requests with user_agent.original Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 Edg/118.0.2088.76 GLS/97.10.7399.100 338 requests with user_agent.original Mozilla/5.0 (Linux; Android 9) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/119.0.6045.66 Mobile DuckDuckGo/1 Lilo/1.2.3 Safari/537.36 332 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.6) Gecko/20050319 330 requests with user_agent.original Dalvik/2.1.0 (Linux; U; Android 11; Tibuta_Master show less	Brute-Force Bad Web Bot
Anonymous	2025-12-01 11:05:14 (6 months ago)	Web Server atack ...	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇬🇧 Interceptor_HQ	2025-11-23 01:02:50 (6 months ago)	request_uri: / -- automatic report --	Hacking Brute-Force
🇮🇹 main.ows	2025-11-21 01:26:03 (6 months ago)	Nov 21 02:26:03 main postfix/smtpd[2125547]: warning: unknown[37.46.113.215]: SASL LOGIN authenticat ... show more Nov 21 02:26:03 main postfix/smtpd[2125547]: warning: unknown[37.46.113.215]: SASL LOGIN authentication failed: authentication failure, [email protected] ... show less	Phishing Email Spam
Anonymous	2025-11-08 15:05:15 (7 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-10-30 22:35:24 (7 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.127.30.137

🇺🇸 207.90.244.22

🇺🇸 198.58.124.42

🇧🇪 149.154.197.254

🇮🇩 103.27.250.69

🇺🇸 2606:f182:d201::1

🇫🇮 204.168.246.69

🇺🇸 66.132.224.21

🇺🇸 43.162.112.238

🇨🇿 37.44.16.231

🇧🇷 191.7.26.153

🇧🇷 187.1.85.182

🇧🇷 179.184.192.237

🇷🇴 143.20.185.242

127.0.0.1

🇨🇳 117.26.73.109

🇵🇱 87.251.64.158

🇶🇦 2600:1900:4260:40e::67

🇨🇳 218.17.184.95

🇮🇩 210.210.155.71