JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.61.114.242

37.61.114.242 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 49%: ?

49%

ISP	Aztelekom LLC
Usage Type	Fixed Line ISP
ASN	AS28787
Domain Name	aztelekom.az
Country	🇦🇿 Azerbaijan
City	Baku, Baki

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.61.114.242

Whois 37.61.114.242

IP Abuse Reports for 37.61.114.242:

This IP address has been reported a total of 15 times from 10 distinct sources. 37.61.114.242 was first reported on June 28th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gui-ying233	2026-08-25 11:36:43 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-23 06:57:47 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 37.61.114.242 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 37.61.114.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 02:57:43.286772 2026] [security2:error] [pid 8449:tid 8449] [client 37.61.114.242:17916] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 37.61.114.242 (+1 hits since last alert)\|tenmenband.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tenmenband.com"] [uri "/xmlrpc.php"] [unique_id "aoqZ5xJSDhkCUESl55ui7gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 04:19:13 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 37.61.114.242 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 37.61.114.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 00:19:06.324045 2026] [security2:error] [pid 22218:tid 22218] [client 37.61.114.242:18209] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 37.61.114.242 (+1 hits since last alert)\|oogeothermal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "oogeothermal.com"] [uri "/xmlrpc.php"] [unique_id "aop0ui9RFxy7HN4Kp_lSRwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 23:01:43 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 37.61.114.242 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 37.61.114.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 19:01:36.403877 2026] [security2:error] [pid 17971:tid 17971] [client 37.61.114.242:6763] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 37.61.114.242 (+1 hits since last alert)\|snowrideadventures.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "snowrideadventures.com"] [uri "/xmlrpc.php"] [unique_id "aooqUKk_q2xYwgperORBgQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WeekendWeb	2026-08-22 20:54:01 (1 week ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 18:45:47 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 37.61.114.242 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 37.61.114.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 14:45:42.050205 2026] [security2:error] [pid 427:tid 427] [client 37.61.114.242:9484] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 37.61.114.242 (+1 hits since last alert)\|warpedweed.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "warpedweed.com"] [uri "/xmlrpc.php"] [unique_id "aonuVhkYQfU24veCCerXWAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 17:35:28 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 37.61.114.242 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 37.61.114.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 13:35:25.271352 2026] [security2:error] [pid 1613:tid 1658] [client 37.61.114.242:9481] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 37.61.114.242 (+1 hits since last alert)\|busybeerestaurant.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "busybeerestaurant.com"] [uri "/xmlrpc.php"] [unique_id "aond3TafoLf5b-1lKQ7UXAAAAFc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-08-22 17:27:14 (1 week ago)	Blocked by YFC Security on https://brixzly.com — type: xmlrpc_attempts	Brute-Force Web App Attack
Anonymous	2026-08-22 16:57:04 (1 week ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇮🇹 VHosting	2026-08-22 15:05:06 (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 13:05:57 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 37.61.114.242 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 37.61.114.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 09:05:51.906100 2026] [security2:error] [pid 7613:tid 7613] [client 37.61.114.242:1556] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 37.61.114.242 (+1 hits since last alert)\|celebritybikinigossip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "celebritybikinigossip.com"] [uri "/xmlrpc.php"] [unique_id "aomer3Tbh7qP-ZhvZUZfWwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-08-22 13:01:37 (1 week ago)	Blocked by CSF 13 firewall - Rule: XMLRPC AZ/Azerbaijan/-	Web App Attack
🇺🇸 bigwavedave	2026-08-22 12:31:56 (1 week ago)	Wordpress Attack	Web App Attack
🇲🇹 Malta	2026-08-22 11:58:15 (1 week ago)	37.61.114.242 - - [22/Aug/2026:13:58:15 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack by WordPress.com ... show more 37.61.114.242 - - [22/Aug/2026:13:58:15 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack by WordPress.com" show less	Hacking Web App Attack
🇩🇪 Vegascosmetics	2026-06-28 08:57:16 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 196.251.121.132

🇧🇩 182.48.70.110

🇷🇺 178.49.5.49

🇨🇦 104.233.20.104

🇸🇬 84.75.148.242

🇬🇧 34.39.68.79

🇺🇸 2607:f298:5:118a::9e8:3c0b

🇮🇩 2600:3c0c::2000:96ff:fe8b:9e90

🇨🇳 218.9.233.218

🇰🇷 211.56.131.199

🇻🇪 201.221.114.190

🇨🇳 180.108.222.116

🇧🇷 168.75.77.111

🇩🇪 116.202.151.220

🇺🇸 107.174.188.218

🇻🇳 103.78.2.252

🇫🇷 91.231.89.84

🇩🇪 69.5.169.205

🇩🇪 69.5.169.141

🇮🇳 49.37.194.211