JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.140.242.118

37.140.242.118

Recent Activity

41 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

CNC BILISIM HIZMETLERI INSAAT SANAYI VE TICARET LIMITED SIRKETI

Usage Type

Data Center/Web Hosting/Transit

ASN

AS212219

Hostname(s)

sekin.org

Domain Name

hizhosting.com

Country

🇹🇷 Turkey

City

Sisli, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 37.140.242.118:

This IP address has been reported a total of 41 times from 28 distinct sources. 37.140.242.118 was first reported on April 5th 2025, and the most recent report was 11 minutes ago. In the last 60 days, the top reporter locations were: Finland with 10 reports; United States of America with 9 reports; Germany with 6 reports. The most common categories in these recent reports were: Brute-Force 24 times; SSH 20 times; Port Scan 11 times; Web App Attack 10 times; Bad Web Bot 6 times; Other 9 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Admins@FBN	2026-09-08 14:28:33 (11 minutes ago)	FW-PortScan: Traffic Blocked srcport=39672 dstport=2375	Port Scan
🇧🇾 lns.bz	2026-09-08 14:28:05 (12 minutes ago)	Too many 404 requests [BY]	Web App Attack
🇫🇮 botwork.se	2026-09-08 14:26:09 (14 minutes ago)	2026-09-08T14:18:09.876738+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user minecraft fro ... show more 2026-09-08T14:18:09.876738+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user minecraft from 37.140.242.118 port 55406 2026-09-08T14:21:58.708275+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user httpadmin from 37.140.242.118 port 48466 2026-09-08T14:23:21.277887+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user vagrant from 37.140.242.118 port 43796 2026-09-08T14:24:48.900291+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user test from 37.140.242.118 port 43684 2026-09-08T14:26:08.473646+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user student from 37.140.242.118 port 33330 ... show less	Brute-Force SSH
Anonymous	2026-09-08 14:14:08 (26 minutes ago)	2026-09-08T10:10:18.249868zeus sshd[2078425]: Invalid user admin from 37.140.242.118 port 34550 2026 ... show more 2026-09-08T10:10:18.249868zeus sshd[2078425]: Invalid user admin from 37.140.242.118 port 34550 2026-09-08T10:11:35.040100zeus sshd[2078471]: Invalid user user from 37.140.242.118 port 54224 2026-09-08T10:14:07.508472zeus sshd[2078561]: Invalid user user from 37.140.242.118 port 44328 ... show less	Brute-Force SSH
🇫🇮 botwork.se	2026-09-08 14:04:46 (35 minutes ago)	2026-09-08T13:54:08.397605+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user debian from 3 ... show more 2026-09-08T13:54:08.397605+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user debian from 37.140.242.118 port 45300 2026-09-08T13:55:16.802277+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user admin from 37.140.242.118 port 44268 2026-09-08T13:56:26.596516+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user deploy from 37.140.242.118 port 43870 2026-09-08T13:59:59.332357+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user username from 37.140.242.118 port 44372 2026-09-08T14:04:45.512688+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user fa from 37.140.242.118 port 43288 ... show less	Brute-Force SSH
🇷🇺 lns.bz	2026-09-08 14:03:23 (36 minutes ago)	Too many 404 requests [RU.MTW]	Web App Attack
🇫🇮 Antti	2026-09-08 13:43:03 (57 minutes ago)	2026-09-08T13:40:34.445386+00:00 melon sshd[655455]: User root from 37.140.242.118 not allowed becau ... show more 2026-09-08T13:40:34.445386+00:00 melon sshd[655455]: User root from 37.140.242.118 not allowed because none of user's groups are listed in AllowGroups 2026-09-08T13:41:44.161818+00:00 melon sshd[656667]: Connection from 37.140.242.118 port 40816 on 65.108.201.187 port 22 rdomain "" 2026-09-08T13:41:46.956068+00:00 melon sshd[656667]: Invalid user user from 37.140.242.118 port 40816 2026-09-08T13:42:59.700467+00:00 melon sshd[658210]: Connection from 37.140.242.118 port 43674 on 65.108.201.187 port 22 rdomain "" 2026-09-08T13:43:02.764481+00:00 melon sshd[658210]: User root from 37.140.242.118 not allowed because none of user's groups are listed in AllowGroups show less	Brute-Force SSH
🇫🇮 botwork.se	2026-09-08 13:38:35 (1 hour ago)	2026-09-08T13:28:55.070965+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user aaa from 37.1 ... show more 2026-09-08T13:28:55.070965+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user aaa from 37.140.242.118 port 37792 2026-09-08T13:33:07.574860+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user 1234 from 37.140.242.118 port 36784 2026-09-08T13:34:19.866328+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user ali from 37.140.242.118 port 54576 2026-09-08T13:35:27.080822+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user admin from 37.140.242.118 port 37168 2026-09-08T13:38:33.890614+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user test from 37.140.242.118 port 55012 ... show less	Brute-Force SSH
🇩🇪 Admins@FBN	2026-09-08 13:21:17 (1 hour ago)	FW-PortScan: Traffic Blocked srcport=36161 dstport=2222	Port Scan
🇫🇮 botwork.se	2026-09-08 13:18:31 (1 hour ago)	2026-09-08T13:12:11.182705+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user p from 37.140 ... show more 2026-09-08T13:12:11.182705+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user p from 37.140.242.118 port 38914 2026-09-08T13:13:07.844608+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user test from 37.140.242.118 port 34390 2026-09-08T13:14:14.003593+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user test1 from 37.140.242.118 port 49842 2026-09-08T13:16:29.586925+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user nvidia from 37.140.242.118 port 42432 2026-09-08T13:18:30.773403+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user test from 37.140.242.118 port 54644 ... show less	Brute-Force SSH
🇨🇦 lakered	2026-09-08 13:18:19 (1 hour ago)	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity	Port Scan
🇧🇷 chronos	2026-09-08 13:09:06 (1 hour ago)	Web traffic. Possible probing or exploitation attempts. \| Port: 80 \| Proto: TCP \| Location: Türkiye, ... show more Web traffic. Possible probing or exploitation attempts. \| Port: 80 \| Proto: TCP \| Location: Türkiye, Beyoğlu show less	Web App Attack Hacking Bad Web Bot
🇫🇮 botwork.se	2026-09-08 13:00:23 (1 hour ago)	2026-09-08T12:50:26.387728+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user vyos from 37. ... show more 2026-09-08T12:50:26.387728+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user vyos from 37.140.242.118 port 49758 2026-09-08T12:51:22.003495+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user useradmin from 37.140.242.118 port 60690 2026-09-08T12:55:10.237528+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user admin from 37.140.242.118 port 55980 2026-09-08T12:56:51.659675+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user testuser from 37.140.242.118 port 32814 2026-09-08T13:00:21.629072+00:00 debian-4gb-hel1-2 bb76ac17c8fa[3158683]: Invalid user 1 from 37.140.242.118 port 56464 ... show less	Brute-Force SSH
🇮🇹 ciccio diddo	2026-09-08 12:56:13 (1 hour ago)	High Burst multiple 40X port:Tcp/80,443	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-08 12:47:23 (1 hour ago)	(mod_security) mod_security (id:218420) triggered by 37.140.242.118 (sekin.org): 1 in the last 300 s ... show more (mod_security) mod_security (id:218420) triggered by 37.140.242.118 (sekin.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 08:47:16.198424 2026] [security2:error] [pid 2913:tid 2913] [client 37.140.242.118:44324] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.5:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.5"] [uri "/hello.world"] [unique_id "aqAD1MJpXBhotRvJbIIRhwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.156.126.1

🇺🇸 143.42.164.34

🇧🇩 103.26.136.173

🇦🇺 220.240.109.30

🇰🇷 211.104.215.184

🇮🇳 139.5.248.218

🇳🇱 45.148.10.25

🇺🇸 164.92.70.236

🇻🇳 160.250.131.238

🇨🇳 140.206.236.53

🇧🇬 109.160.32.101

🇧🇩 103.55.145.195

🇧🇩 103.55.145.193

🇭🇰 103.30.40.129

🇵🇰 101.53.228.165

🇬🇧 35.203.211.91

🇫🇷 91.231.89.132

🇺🇸 65.49.1.162

🇳🇱 45.148.10.39

🇺🇸 45.33.109.18