JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.72.141.15

37.72.141.15 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 15%: ?

15%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.72.141.15

Whois 37.72.141.15

IP Abuse Reports for 37.72.141.15:

This IP address has been reported a total of 12 times from 10 distinct sources. 37.72.141.15 was first reported on June 29th 2024, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 conseilgouz	2026-06-08 08:47:18 (3 hours ago)	joe-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
🇺🇸 TPI-Abuse	2026-06-03 04:54:16 (5 days ago)	(mod_security) mod_security (id:218580) triggered by 37.72.141.15 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:218580) triggered by 37.72.141.15 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 00:54:12.475716 2026] [security2:error] [pid 24483:tid 24483] [client 37.72.141.15:37215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:route. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.\|\|www.skipspsaexchange.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.skipspsaexchange.com"] [uri "/index.php"] [unique_id "ah-zdPUXCqhS2EP6QNbfxgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-02 22:59:51 (3 months ago)	(mod_security) mod_security (id:210350) triggered by 37.72.141.15 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 37.72.141.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 17:59:44.868579 2026] [security2:error] [pid 16043:tid 16063] [client 37.72.141.15:33057] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|inal.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "inal.org"] [uri "/register"] [unique_id "aaYWYGoYV01qmwyjaXT51QAAAFE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-16 13:24:05 (3 months ago)	[Thu Feb 12 02:56:44.265634 2026] [authz_core:error] [pid 1002219] [client 37.72.141.15:50411] AH016 ... show more [Thu Feb 12 02:56:44.265634 2026] [authz_core:error] [pid 1002219] [client 37.72.141.15:50411] AH01630: client denied by server configuration: /home/appowner/www/sec/+CSCOE+ [Fri Feb 13 00:39:38.460651 2026] [authz_core:error] [pid 1052432] [client 37.72.141.15:62363] AH01630: client denied by server configuration: /home/appowner/www/sec/global-protect [Fri Feb 13 11:42:57.521762 2026] [authz_core:error] [pid 1052432] [client 37.72.141.15:18771] AH01630: client denied by server configuration: /home/appowner/www/sec/remote [Fri Feb 13 11:43:01.118084 2026] [authz_core:error] [pid 1052421] [client 37.72.141.15:23697] AH01630: client denied by server configuration: /home/appowner/www/sec/login [Mon Feb 16 05:24:05.279041 2026] [authz_core:error] [pid 1202252] [client 37.72.141.15:64661] AH01630: client denied by server configuration: /home/appowner/www/sec/remote ... show less	Brute-Force SSH
🇺🇸 drewf.ink	2026-01-30 05:11:38 (4 months ago)	[05:11] Port scanning. Port(s) scanned: TCP/6443	Port Scan
Anonymous	2026-01-05 01:32:27 (5 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇿 lp	2025-05-27 18:20:57 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 37.72.141.15 2025-05-27T19:07:41+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 37.72.141.15 2025-05-27T19:07:41+02:00 vpn Access-Reject 'agencies' station: 37.72.141.15 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2025-05-06 11:42:15 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇨🇳 ThreatBook.io	2025-05-05 23:09:33 (1 year ago)	2025-05-05 04:19:00 /+CSCOE+/logon.html	Web App Attack
🇨🇳 ThreatBook.io	2025-04-30 23:11:47 (1 year ago)	2025-04-30 13:17:31 /+CSCOE+/logon.html	Web App Attack
🇷🇺 sms.ru	2024-09-21 08:15:05 (1 year ago)	SMS pumping attack from foreign country	DDoS Attack
🇫🇷 Sklurk	2024-06-29 10:29:52 (1 year ago)	Web App Attack	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.85.222.71

🇹🇷 195.85.207.182

🇪🇸 88.12.9.217

🇨🇳 43.226.36.171

🇷🇴 2.57.121.25

🇬🇧 193.163.125.21

🇨🇳 121.29.149.148

🇱🇹 81.30.98.142

🇳🇱 81.19.216.117

🇷🇴 80.94.95.242

🇬🇧 5.226.140.62

🇳🇱 5.61.209.224

🇺🇸 3.22.171.104

🇻🇳 180.93.138.150

🇷🇺 178.178.222.52

🇺🇸 66.132.186.253

🇺🇸 64.62.156.194

🇧🇪 34.62.187.251

🇫🇷 193.32.126.212

🇫🇷 185.208.207.227