JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.140.254.231

37.140.254.231 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 69%: ?

69%

ISP	VPN Consumer Network Services
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇨🇭 Switzerland
City	Oberhausen-Boschenwiesen, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.140.254.231

Whois 37.140.254.231

IP Abuse Reports for 37.140.254.231:

This IP address has been reported a total of 16 times from 16 distinct sources. 37.140.254.231 was first reported on June 9th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Mangelot Hosting	2026-07-06 08:05:40 (6 days ago)	(wp_login_try) srv102 WP Login Attempt 37.140.254.231 (CH/Switzerland/-): 10 in the last 3600 secs; ... show more (wp_login_try) srv102 WP Login Attempt 37.140.254.231 (CH/Switzerland/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇨🇿 huginet	2026-07-06 07:19:54 (6 days ago)	37.140.254.231 - - [06/Jul/2026:09:18:33 +0200] "POST /wp-login.php HTTP/1.1" 503 19589 "https://www ... show more 37.140.254.231 - - [06/Jul/2026:09:18:33 +0200] "POST /wp-login.php HTTP/1.1" 503 19589 "https://www.huginet.net/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36" 37.140.254.231 - - [06/Jul/2026:09:19:53 +0200] "POST /wp-login.php HTTP/1.1" 503 18656 "https://www.huginet.net/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36" ... show less	Web Spam Blog Spam Hacking Bad Web Bot Web App Attack
🇷🇴 SpamStopper	2026-07-06 05:37:36 (6 days ago)	Fail2Ban - WP Spoofing	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-04 21:19:49 (1 week ago)	[ns65.kdns.gr] httpd-login-spray-site: sites=www.plaero.gr; logs=/var/log/httpd/domains/plaero.gr.lo ... show more [ns65.kdns.gr] httpd-login-spray-site: sites=www.plaero.gr; logs=/var/log/httpd/domains/plaero.gr.log; samples=site_wide=true \| distinct_ips=10 \| /wp-login.php show less	Hacking Web App Attack
🇪🇸 DXC-0	2026-07-02 03:00:49 (1 week ago)	Multiple attacks on Honeypot servers	Web Spam Brute-Force Web App Attack Hacking
🇵🇱 sefinek.net	2026-07-01 17:57:39 (1 week ago)	Honeypot hit: Unauthorized traffic (68 bytes of payload); 57638 [1] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (68 bytes of payload); 57638 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 Starburst SysOp Team	2026-07-01 17:05:42 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-1)	Hacking Bad Web Bot
🇨🇭 YF	2026-07-01 17:00:29 (1 week ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇬🇧 markawes	2026-07-01 16:14:08 (1 week ago)	[SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 37.140.254.23 ... show more [SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 37.140.254.231 - - [01/Jul/2026:16:13:59 +0000] "GET /.git/config HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 37.140.254.231 - - [01/Jul/2026:16:14:07 +0000] "GET /.env.prod HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36" show less	Web App Attack Port Scan
🇫🇷 Baking333	2026-07-01 11:56:05 (1 week ago)	redacted:80 37.140.254.231 - - [01/Jul/2026:12:56:03 +0100] "GET /api/.env HTTP/1.1" 200 166 0/23679 ... show more redacted:80 37.140.254.231 - - [01/Jul/2026:12:56:03 +0100] "GET /api/.env HTTP/1.1" 200 166 0/23679 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" redacted:443 37.140.254.231 - - [01/Jul/2026:12:56:03 +0100] "GET /api/.env HTTP/1.1" 200 5359 0/19933 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇮🇹 Fusty	2026-07-01 11:54:29 (1 week ago)	Unauthorized attempt on (TCP on port 3000). Source port: 2796 TTL: 116 Packet length: 52 Timestamp: ... show more Unauthorized attempt on (TCP on port 3000). Source port: 2796 TTL: 116 Packet length: 52 Timestamp: 2026-07-01 13:54:29 show less	Port Scan
🇳🇱 BlueWire Hosting	2026-07-01 08:21:52 (1 week ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 technojoe99	2026-07-01 07:28:41 (1 week ago)	Exploit scan from 37.140.254.231. GET /xyzabc123_probe_not_exist HTTP/1.1.	Web App Attack
🇫🇷 LoneRider	2026-07-01 06:43:19 (1 week ago)	[01/Jul/2026:08:43:18.064822 +0200] akS3BnJl1kC78cEQYZ6LBgAAAAQ 37.140.254.231 43148 127.0.0.1 7080 ... show more [01/Jul/2026:08:43:18.064822 +0200] akS3BnJl1kC78cEQYZ6LBgAAAAQ 37.140.254.231 43148 127.0.0.1 7080 [01/Jul/2026:08:43:18.138300 +0200] akS3Bu5ElEERaJ5D0i2LAQAAAAo 37.140.254.231 37076 127.0.0.1 7081 [01/Jul/2026:08:43:19.124012 +0200] akS3B-5ElEERaJ5D0i2LAwAAAAo 37.140.254.231 43242 127.0.0.1 7080 ... show less	Hacking
🇺🇦 URAN Publishing Service	2026-06-09 16:06:03 (1 month ago)	37.140.254.231 - - [09/Jun/2026:19:06:03 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 404 ... show more 37.140.254.231 - - [09/Jun/2026:19:06:03 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 404 706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.140.254.231 - - [09/Jun/2026:19:06:03 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 404 706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.179.87.203

🇬🇧 193.163.125.68

🇫🇷 146.70.194.220

🇺🇸 128.241.26.243

🇺🇸 52.201.155.215

🇸🇦 46.152.2.114

🇧🇷 45.169.85.178

🇳🇱 23.109.177.148

🇩🇪 2.26.64.64

🇵🇰 223.123.65.97

🇺🇸 209.87.169.186

🇺🇾 179.27.99.9

🇺🇸 157.230.191.249

🇺🇸 152.32.235.69

🇨🇳 123.170.22.27

🇸🇪 104.23.221.206

🇺🇸 100.29.192.77

🇹🇷 94.154.43.12

🇫🇷 91.196.152.197

🇺🇸 45.41.189.63