JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.140.254.212

37.140.254.212 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 20%: ?

20%

ISP	VPN Consumer Network Services
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇨🇭 Switzerland
City	Oberhausen-Boschenwiesen, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.140.254.212

Whois 37.140.254.212

IP Abuse Reports for 37.140.254.212:

This IP address has been reported a total of 79 times from 43 distinct sources. 37.140.254.212 was first reported on September 6th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-29 15:26:50 (1 day ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 37.140.254.212 (CH/Switzerland/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 37.140.254.212 (CH/Switzerland/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-07-28 21:23:30 (1 day ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 37.140.254.212 (CH/Switzerland/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 37.140.254.212 (CH/Switzerland/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇯🇵 demonsword	2026-06-30 08:04:00 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.cyberghostvpn.com:443 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-06-29 06:23:15 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: account.jetbrains.com:443 show less	Open Proxy Port Scan
🇨🇦 TechnoSolutions CL	2026-06-13 11:36:18 (1 month ago)	37.140.254.212 - - [13/Jun/2026:11:36:12 +0000] "GET /wp-content/security.php HTTP/1.1" 405 552 "-" ... show more 37.140.254.212 - - [13/Jun/2026:11:36:12 +0000] "GET /wp-content/security.php HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.140.254.212 - - [13/Jun/2026:11:36:15 +0000] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.140.254.212 - - [13/Jun/2026:11:36:17 +0000] "GET /wp-includes/interactivity-api/interactivity-api-core.php HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.140.254.212 - - [13/Jun/2026:11:36:18 +0000] "GET /wp-admin/setup-config-framework.php HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Hacking Brute-Force Web App Attack
🇺🇸 nyt	2026-05-20 12:56:05 (2 months ago)	404 flood (16/60s), 404 flood (17/60s)	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-04-30 05:56:41 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 Major Hostility	2026-04-29 02:11:03 (3 months ago)	"GET /wp-content/plugins/apikey/ HTTP/1.1" 404 "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 404 ... show more "GET /wp-content/plugins/apikey/ HTTP/1.1" 404 "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 404 "GET /wp-content/plugins/ HTTP/1.1" 404 "GET /wp-content/plugins/pwnd/ HTTP/1.1" 404 "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 404 "GET /wp-content/themes/seotheme/ HTTP/1.1" 404 "GET /wp-content/plugins/core/ HTTP/1.1" 404 "GET /wp-content/plugins/Cache/ HTTP/1.1" 404 "GET /wp-content/themes/ HTTP/1.1" 404 "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 404 "GET /wp-content/themes/digital-download/ HTTP/1.1" 404 "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 404 "GET /wp-content/plugins/seoo/ HTTP/1.1" 404 "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 404 "GET /wp-co show less	Web App Attack
🇫🇷 dynamix	2026-04-28 15:48:09 (3 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 ecs.ge	2026-04-20 23:30:05 (3 months ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇨🇳 ThreatBook.io	2026-04-17 00:26:50 (3 months ago)	ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/37.140.254.212 2026- ... show more ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/37.140.254.212 2026-04-16 04:09:57 /ssh-config.json show less	Web App Attack
🇩🇪 ecs.ge	2026-04-16 22:50:19 (3 months ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
Anonymous	2026-04-16 17:00:04 (3 months ago)	suspicious request in access.log	Web App Attack
🇩🇪 ecs.ge	2026-04-15 19:29:16 (3 months ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇸🇬 Starburst SysOp Team	2026-04-12 17:45:15 (3 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-sin2-2)	Hacking Bad Web Bot

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac5:636b:2905::416:12

🇺🇸 195.184.76.192

🇺🇸 192.241.250.15

🇷🇺 89.175.252.170

🇩🇪 69.5.169.96

🇳🇱 45.148.10.244

🇳🇱 45.148.10.141

🇮🇳 34.100.252.44

🇳🇱 213.176.26.63

🇦🇴 193.163.125.252

🇷🇴 193.32.162.27

🇲🇾 175.141.61.163

🇨🇳 175.9.189.79

🇮🇶 169.224.5.174

🇫🇷 141.98.233.84

🇺🇸 135.237.125.160

🇺🇸 103.203.57.20

🇲🇦 102.97.32.155

🇵🇹 89.153.52.22

🇺🇸 65.49.1.152