JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.52.75.205

37.52.75.205 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 58%: ?

58%

ISP	JSC Ukrtelecom
Usage Type	Fixed Line ISP
ASN	AS6849
Hostname(s)	205-75-52-37.pool.ukrtel.net
Domain Name	ukrtelecom.ua
Country	🇺🇦 Ukraine
City	Tatarbunary, Odesa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.52.75.205

Whois 37.52.75.205

IP Abuse Reports for 37.52.75.205:

This IP address has been reported a total of 19 times from 15 distinct sources. 37.52.75.205 was first reported on May 17th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 maciejka	2026-10-21 20:11:26 (10 hours ago)	2026-10-21 22:05:17 SMTP call from [37.52.75.205] dropped: too many syntax or protocol errors (last ... show more 2026-10-21 22:05:17 SMTP call from [37.52.75.205] dropped: too many syntax or protocol errors (last command was "\205.\340\300\313x\275\224\337\276\372\rc\200\230b\022\v\2441/\031\301\024K\203\034\272N\374*\037\336\361\326)\370\371LQ\T\271\3674\003\216\265\317P\023u\373\340\223w\324\005\334B\025\003\231`T\241\277\2468\360(\346er\206(\2120mr\177\374?k\320kW`\346\206b\312N\213\206@\230\272\007\v\356P\320\036\3526\255\314f\|@x\237\364\226\304\221\313\236\201\366\323\243IA@\276{\3421a\224\364^\214\224\033\3549\243o\360p\343\243\263\215M\362\213.\353\302\344u\310\274\335\020\306\"-E\301\2409?h\210\335\354\324\215\303\203\3420_l\363s\232\240n\333\225\315BZ \247>0M\212w\241\370{\362\240H.\376\360\f\017\220\355FzB'\340Y\2407\365\210\266\031\317\326M\277\|\242Q\370y\027#\207\245\r\240)\260\036\016\356\020\227\344\016\212\tx;\243t<\017:~\306\367(\274\333L\361/c\272\231\217DT\306\251\321\251\3518w-e\334\326\356\374\317\203GA\fm\305]\310\032S\235\023N\354X\363Ri\362\331M0JJ\230\340\255\223\032\005\v ... show less	Brute-Force
🇩🇪 Hazzard	2026-10-20 11:18:38 (1 day ago)	(wordpress) Failed wordpress login from 37.52.75.205 (UA/Ukraine/Odesa/Odesa/205-75-52-37.pool.ukrte ... show more (wordpress) Failed wordpress login from 37.52.75.205 (UA/Ukraine/Odesa/Odesa/205-75-52-37.pool.ukrtel.net/[redacted]): (CF_ENABLE) show less	Brute-Force
🇫🇷 LRob	2026-10-19 12:15:01 (2 days ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 FeG Deutschland	2026-10-18 01:32:24 (4 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 13:05:13 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 37.52.75.205 (205-75-52-37.pool.ukrtel.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 37.52.75.205 (205-75-52-37.pool.ukrtel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:05:10.167004 2026] [security2:error] [pid 5858:tid 5858] [client 37.52.75.205:39890] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|crittergetterpestcontrol.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "crittergetterpestcontrol.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atIhBmKQm7TDAhR6YsVFNAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 Mugen	2026-10-15 00:50:40 (1 week ago)	Unauthorized VPN login attempts	Brute-Force
🇩🇪 bazter.pro	2026-10-14 21:45:09 (1 week ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 19:58:23 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 37.52.75.205 (205-75-52-37.pool.ukrtel.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 37.52.75.205 (205-75-52-37.pool.ukrtel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 15:58:15.753315 2026] [security2:error] [pid 7453:tid 7453] [client 37.52.75.205:33672] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ohiohca.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ohiohca.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as_e1_XRirtLGsOuKfrPfgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-10-14 13:25:34 (1 week ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-197)	Hacking
🇩🇪 FeG Deutschland	2026-10-10 13:21:02 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇨🇿 lp	2026-10-01 10:52:05 (2 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 37.52.75.205 2026-10-01T12:29:42+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 37.52.75.205 2026-10-01T12:29:42+02:00 vpn Access-Reject 'belohoub' station: 37.52.75.205 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: zam_pool msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-09-29 04:54:33 (3 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 37.52.75.205 2026-09-29T05:29:13+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 37.52.75.205 2026-09-29T05:29:13+02:00 vpn Access-Reject 'xhrav05' station: 37.52.75.205 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 Countryman	2026-09-29 00:10:02 (3 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇺🇸 nationaleventpros.com	2026-09-10 10:10:54 (1 month ago)	WordPress login attempt	Brute-Force
🇫🇷 Zkillu	2026-08-19 22:29:28 (2 months ago)	UDP flood (DDoS) vs AS215599: 14603 pkts / 20.88 MB to UDP 80/8443 across 571 dst IP(s), 2026-08-19 ... show more UDP flood (DDoS) vs AS215599: 14603 pkts / 20.88 MB to UDP 80/8443 across 571 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.206.95.162

🇦🇷 181.46.166.194

🇺🇸 173.207.70.42

🇫🇷 172.71.135.78

🇨🇳 117.131.213.135

🇫🇷 88.178.199.77

🇨🇳 43.248.108.136

🇰🇷 221.162.3.55

🇺🇸 216.132.189.101

🇭🇰 125.59.204.176

🇧🇬 79.124.58.18

🇻🇳 42.96.19.37

🇯🇵 8.216.8.118

🇰🇷 221.167.50.229

🇰🇷 211.219.233.163

🇩🇪 185.71.126.225

🇺🇸 165.154.235.9

🇰🇷 121.189.105.95

🇫🇷 91.231.89.119

🇫🇷 82.229.54.33