AbuseIPDB » 37.66.164.94
37.66.164.94
This IP was reported 6 times. Confidence of
Abuse
is 16% : ?
ISP
SFR Infra MAP-T
Usage Type
Fixed Line ISP
ASN
AS15557
Hostname(s)
94.164.66.37.rev.sfr.net
Domain Name
sfr.fr
Country
🇫🇷
France
City
Wattrelos, Hauts-de-France
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 37.66.164.94 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
37.66.164.94 was first reported on
August 4th 2026 , and the most recent report was
1 month ago
Old Reports:
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
COMAITE
2026-09-17 00:45:34
(1 month ago)
SQL injection attempt from 37.66.164.94.
Web App Attack
🇺🇸
eacontent
2026-09-12 13:01:00
(1 month ago)
[Sat Sep 12 07:25:39.539040 2026] [security2:error] [pid 26790:tid 26832] [client 37.66.164.94:20566 ...
show more
[Sat Sep 12 07:25:39.539040 2026] [security2:error] [pid 26790:tid 26832] [client 37.66.164.94:20566] [client 37.66.164.94] ModSecurity: Warning. detected SQLi using libinjection with fingerprint '1UEsc' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: 1UEsc found within ARGS:pageid: 13930 UNION ALL SELECT 'wdjhacrgcruprlzyqjxodmpxtnwrobae'-- m2bmvl"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "holtindependent.com"] [uri "/content/page.php"] [unique_id "aqU2s8JDr5uMmn9DoHJ06gAAAig"]
show less
SQL Injection
🇫🇷
dynamix
2026-09-07 21:45:32
(1 month ago)
Multiple WAF Violations
Web App Attack
🇫🇷
pyrogoto
2026-09-02 02:29:40
(1 month ago)
Attempting SQL code injection : 1' AND EXTRACTVALUE(3174,CONCAT(0x7e,((SELECT (ELT(3174=3174,1)))),0 ...
show more
Attempting SQL code injection : 1' AND EXTRACTVALUE(3174,CONCAT(0x7e,((SELECT (ELT(3174=3174,1)))),0x7e))-- -
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-08-30 14:03:35
(1 month ago)
(mod_security) mod_security (id:220150) triggered by 37.66.164.94 (94.164.66.37.rev.sfr.net): 1 in t ...
show more
(mod_security) mod_security (id:220150) triggered by 37.66.164.94 (94.164.66.37.rev.sfr.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 10:03:29.783134 2026] [security2:error] [pid 24896:tid 24896] [client 37.66.164.94:19432] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\*.{0,399}\\\\*\\\\/)?select)" at ARGS:owner_ineu_express. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.boatregistrationdelaware.com|F|2"] [data ")/**/and/**/(363740311=363740311/**/union/**/all/**/select/**/%2527qhpnbizkiwxzalbbubwkgmzdaygcdguo%2527--/**/ne0o8d"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.boatregistrationdelaware.com"] [uri "/de/delaware-yacht-registration.html"] [unique_id "apQ4MaJzNhSCuqmJafm-HQAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-04 16:10:06
(2 months ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Web App Attack
Hacking
SQL Injection
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: