JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.140.223.193

37.140.223.193 was found in our database!

This IP was reported 355 times. Confidence of Abuse is 40%: ?

40%

ISP	Turkbil Sunucu Hizmetleri
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	turkbil.net.tr
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.140.223.193

Whois 37.140.223.193

IP Abuse Reports for 37.140.223.193:

This IP address has been reported a total of 355 times from 120 distinct sources. 37.140.223.193 was first reported on October 5th 2023, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-10 00:04:11 (1 hour ago)	(wordpress) Apache: Failed WordPress login from 37.140.223.193 (US/United States/-): 10 in the last ... show more (wordpress) Apache: Failed WordPress login from 37.140.223.193 (US/United States/-): 10 in the last 3600 secs (0-197) show less	Hacking
🇩🇪 pscriptos	2026-07-09 23:48:39 (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇮🇹 sssrit	2026-07-08 23:39:46 (1 day ago)	37.140.223.193 - - [09/Jul/2026:01:39:45 +0200] "POST /wp-login.php HTTP/1.1" 401 4732 "-" "Mozilla/ ... show more 37.140.223.193 - - [09/Jul/2026:01:39:45 +0200] "POST /wp-login.php HTTP/1.1" 401 4732 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" ... show less	Web App Attack
🇨🇭 filou812	2026-07-05 15:07:29 (4 days ago)	url tried is "/wp-login.php"	Web App Attack
🇪🇸 masterguru	2026-07-04 16:15:04 (5 days ago)	(wplogin) Failed WordPress login from 37.140.223.193 (US/United States/-): 5 in the last 3600 secs ( ... show more (wplogin) Failed WordPress login from 37.140.223.193 (US/United States/-): 5 in the last 3600 secs (0-122) show less	Hacking
🇫🇷 masterguru	2026-06-12 07:14:15 (3 weeks ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 WeekendWeb	2026-06-08 13:25:44 (1 month ago)	Wordpress Vunerability attack	Web App Attack
🇦🇺 screwlooseit.com.au	2026-05-28 20:43:31 (1 month ago)	Blocked by CSF 13 firewall - Rule: XMLRPC -	Web App Attack
Anonymous	2026-05-16 12:04:41 (1 month ago)	Attac	Brute-Force
🇳🇱 middelkoopcc	2026-05-12 02:03:11 (1 month ago)	2026-05-12 03:55:12 [remote 37.140.223.193:57857] AH01276: Cannot serve directory /<redacted>/wp-con ... show more 2026-05-12 03:55:12 [remote 37.140.223.193:57857] AH01276: Cannot serve directory /<redacted>/wp-content/uploads/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 2026-05-12 03:55:14 [remote 37.140.223.193:57857] AH01276: Cannot serve directory /<redacted>/wp-admin/css/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 2026-05-12 03:55:32 [remote 37.140.223.193:57857] AH01276: Cannot serve directory /<redacted>/wp-admin/js/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 96 more within 20 minutes show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-11 13:07:14 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 37.140.223.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 37.140.223.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 09:07:08.943167 2026] [security2:error] [pid 16193:tid 16193] [client 37.140.223.193:32323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jennyfiore.com"] [uri "/wp-config.php"] [unique_id "agHUfMQKAwJo0zXb2888NAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-05-11 05:41:50 (1 month ago)	Aggressive web search of vulnerable pages: /m.php /admin/function.php /wp-includes/js/jcrop/Jcrop.ph ... show more Aggressive web search of vulnerable pages: /m.php /admin/function.php /wp-includes/js/jcrop/Jcrop.php /a.php /wp-admin/maint/includes/ /wp-cont ... show less	Web App Attack
Anonymous	2026-05-11 03:17:21 (1 month ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇨🇭 🇨🇭 Hosting	2026-05-10 08:00:01 (1 month ago)	Automated security scanning detected: WordPress Login Brute-Force / Probing. Systematic reconnaissan ... show more Automated security scanning detected: WordPress Login Brute-Force / Probing. Systematic reconnaissance using automated tools. show less	Brute-Force Web App Attack
🇫🇷 masterguru	2026-05-09 08:56:02 (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-196) show less	Bad Web Bot

Showing 1 to 15 of 355 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 152.32.218.30

🇩🇪 69.5.169.198

🇺🇸 162.216.150.172

🇩🇪 118.193.58.120

🇺🇸 91.230.168.140

🇫🇷 91.196.152.204

🇳🇱 91.92.40.10

🇷🇺 83.246.133.16

🇩🇪 69.5.169.115

🇺🇸 64.62.156.60

🇳🇱 45.148.10.141

🇨🇦 144.217.74.127

🇩🇪 139.59.140.35

🇨🇳 116.114.6.125

🇭🇰 47.86.168.226

🇿🇲 45.215.253.248

🇬🇧 35.203.210.171

🇷🇴 2.57.121.25

🇭🇰 220.246.43.109

🇷🇴 151.242.191.232