JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.140.254.182

37.140.254.182 was found in our database!

This IP was reported 108 times. Confidence of Abuse is 23%: ?

23%

ISP	VPN Consumer Network Services
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇨🇭 Switzerland
City	Oberhausen-Boschenwiesen, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.140.254.182

Whois 37.140.254.182

IP Abuse Reports for 37.140.254.182:

This IP address has been reported a total of 108 times from 52 distinct sources. 37.140.254.182 was first reported on September 6th 2023, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-28 21:23:11 (4 days ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 37.140.254.182 (CH/Switzerland/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 37.140.254.182 (CH/Switzerland/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇯🇵 SentinalX by uzumaru	2026-06-29 08:14:01 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.cyberghostvpn.com:443 show less	Open Proxy Port Scan
🇫🇷 matthieul.dev	2026-06-21 04:15:18 (1 month ago)	Blocked by os-abuseipdb; 3 hits, proto=udp, ports=46741,6128	Port Scan Brute-Force
🇨🇦 TechnoSolutions CL	2026-06-13 11:29:38 (1 month ago)	37.140.254.182 - - [13/Jun/2026:11:29:35 +0000] "GET /wp-content/languages/themes/ HTTP/1.1" 405 552 ... show more 37.140.254.182 - - [13/Jun/2026:11:29:35 +0000] "GET /wp-content/languages/themes/ HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.140.254.182 - - [13/Jun/2026:11:29:38 +0000] "GET /wp-admin/maint/ HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.140.254.182 - - [13/Jun/2026:11:29:38 +0000] "GET /wp-includes/blocks/archives/ HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.140.254.182 - - [13/Jun/2026:11:29:38 +0000] "GET /wp-content/users.php HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 04:09:44 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 37.140.254.182 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 37.140.254.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 00:09:37.561157 2026] [security2:error] [pid 8404:tid 8404] [client 37.140.254.182:29039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnwarnock.info"] [uri "/wp-includes/images/wp-config.php"] [unique_id "aizYAaSQluifg-olhnd2AQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-13 04:06:20 (1 month ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=14	Hacking
🇺🇸 mnsf	2026-05-20 18:05:13 (2 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇬🇧 consul.to	2026-04-30 06:00:06 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇹 Progetto1	2026-04-28 09:30:05 (3 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇬🇧 consul.to	2026-04-28 08:57:46 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇦 URAN Publishing Service	2026-04-27 09:54:40 (3 months ago)	37.140.254.182 - - [27/Apr/2026:12:54:38 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" ... show more 37.140.254.182 - - [27/Apr/2026:12:54:38 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 404 709 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.140.254.182 - - [27/Apr/2026:12:54:39 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 404 709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" ... show less	Web App Attack
🇬🇧 consul.to	2026-04-23 02:57:37 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 ecs.ge	2026-04-20 23:29:48 (3 months ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇧🇷 Peregrine	2026-04-20 03:10:43 (3 months ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 37.140.254.182 - - [16/Apr/2026:11:49:56 -0300] "GET /a ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 37.140.254.182 - - [16/Apr/2026:11:49:56 -0300] "GET /app_dev.php/_profiler/open?file=app/config/parameters.yml HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-04-18 03:10:54 (3 months ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 37.140.254.182 - - [16/Apr/2026:11:49:56 -0300] "GET /a ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 37.140.254.182 - - [16/Apr/2026:11:49:56 -0300] "GET /app_dev.php/_profiler/open?file=app/config/parameters.yml HTTP/1.1" 404 414 show less	Bad Web Bot

Showing 1 to 15 of 108 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.98

🇨🇳 111.9.47.89

🇺🇸 104.248.227.11

🇺🇸 66.132.172.159

🇺🇸 44.205.192.249

🇨🇳 223.85.251.55

🇻🇳 203.162.186.186

🇲🇽 200.68.173.37

🇲🇽 189.147.193.166

🇺🇸 159.223.202.59

🇮🇳 139.59.18.80

🇰🇷 122.35.192.33

🇳🇬 102.36.150.65

🇫🇷 91.231.89.202

🇺🇸 216.25.89.128

🇳🇱 213.176.26.122

🇬🇧 154.16.44.252

🇸🇬 145.223.130.181

🇺🇸 144.225.187.161

🇩🇪 93.152.221.162