JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.140.254.233

37.140.254.233 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 56%: ?

56%

ISP	VPN Consumer Network Services
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇨🇭 Switzerland
City	Oberhausen-Boschenwiesen, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.140.254.233

Whois 37.140.254.233

IP Abuse Reports for 37.140.254.233:

This IP address has been reported a total of 13 times from 12 distinct sources. 37.140.254.233 was first reported on June 9th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 huginet	2026-07-06 07:28:21 (4 days ago)	37.140.254.233 - - [06/Jul/2026:09:24:12 +0200] "POST /wp-login.php HTTP/1.1" 503 19589 "https://www ... show more 37.140.254.233 - - [06/Jul/2026:09:24:12 +0200] "POST /wp-login.php HTTP/1.1" 503 19589 "https://www.huginet.net/wp-admin/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" 37.140.254.233 - - [06/Jul/2026:09:28:21 +0200] "POST /wp-login.php HTTP/1.1" 503 18656 "https://www.huginet.net/wp-admin/" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Mobile/15E148 Safari/604.1" ... show less	Web Spam Blog Spam Hacking Bad Web Bot Web App Attack
🇷🇴 SpamStopper	2026-07-06 05:42:03 (4 days ago)	Fail2Ban - WP Spoofing	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-04 18:57:44 (5 days ago)	[ns65.kdns.gr] httpd-login-spray-site: sites=www.plaero.gr; logs=/var/log/httpd/domains/plaero.gr.lo ... show more [ns65.kdns.gr] httpd-login-spray-site: sites=www.plaero.gr; logs=/var/log/httpd/domains/plaero.gr.log; samples=site_wide=true \| distinct_ips=10 \| /wp-login.php show less	Hacking Web App Attack
🇪🇸 DXC-0	2026-07-02 03:00:50 (1 week ago)	Multiple attacks on Honeypot servers	Web Spam Brute-Force Web App Attack Hacking
🇩🇪 Starburst SysOp Team	2026-07-01 17:05:45 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-1)	Hacking Bad Web Bot
🇨🇭 YF	2026-07-01 17:00:30 (1 week ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇬🇧 markawes	2026-07-01 16:14:06 (1 week ago)	[SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 37.140.254.23 ... show more [SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 37.140.254.233 - - [01/Jul/2026:16:13:59 +0000] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" 37.140.254.233 - - [01/Jul/2026:16:14:04 +0000] "GET /.git/HEAD HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36" show less	Web App Attack Port Scan
🇫🇷 YF	2026-07-01 15:15:45 (1 week ago)	Environment file probe	Web App Attack
🇫🇷 Baking333	2026-07-01 11:55:03 (1 week ago)	redacted:80 37.140.254.233 - - [01/Jul/2026:12:55:00 +0100] "GET /.env HTTP/1.1" 200 166 0/24473 "-" ... show more redacted:80 37.140.254.233 - - [01/Jul/2026:12:55:00 +0100] "GET /.env HTTP/1.1" 200 166 0/24473 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36" redacted:80 37.140.254.233 - - [01/Jul/2026:12:55:00 +0100] "GET /[redacted] HTTP/1.1" 200 166 0/34599 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" show less	Bad Web Bot Web App Attack
🇺🇸 technojoe99	2026-07-01 07:28:44 (1 week ago)	Exploit scan from 37.140.254.233. GET /_ignition/health-check HTTP/1.1.	Web App Attack
🇫🇷 LoneRider	2026-07-01 06:43:51 (1 week ago)	[01/Jul/2026:08:43:21.746615 +0200] akS3Cf9VMCtYGj7BKzBS1QAAAAM 37.140.254.233 35828 127.0.0.1 7081 ... show more [01/Jul/2026:08:43:21.746615 +0200] akS3Cf9VMCtYGj7BKzBS1QAAAAM 37.140.254.233 35828 127.0.0.1 7081 [01/Jul/2026:08:43:22.874392 +0200] akS3CnJl1kC78cEQYZ6LDQAAAAQ 37.140.254.233 52302 127.0.0.1 7080 [01/Jul/2026:08:43:50.845869 +0200] akS3JnJl1kC78cEQYZ6LHAAAAAQ 37.140.254.233 42470 127.0.0.1 7081 ... show less	Hacking
🇺🇦 URAN Publishing Service	2026-06-09 16:05:12 (1 month ago)	37.140.254.233 - - [09/Jun/2026:19:05:11 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 ... show more 37.140.254.233 - - [09/Jun/2026:19:05:11 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 706 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.140.254.233 - - [09/Jun/2026:19:05:11 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 404 706 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" ... show less	Web App Attack
🇫🇷 Octopuce	2026-06-09 14:06:33 (1 month ago)	Aggressive web search of vulnerable pages: /update/ /wp-content/ /wp-admin/maint/ /themes/zMousse/ / ... show more Aggressive web search of vulnerable pages: /update/ /wp-content/ /wp-admin/maint/ /themes/zMousse/ /wp-content/plugins/ubh/ /wp-admin/images/ / ... show less	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 2804:14c:3b95:af3:1454:c04c:6928:7821

🇺🇸 195.184.76.197

🇱🇰 112.134.190.1

🇺🇸 23.239.178.24

🇱🇹 213.164.120.23

🇧🇷 192.141.115.134

🇺🇸 172.253.249.51

🇹🇭 150.95.82.21

🇺🇸 146.190.134.221

🇭🇺 81.182.246.252

🇳🇱 45.156.128.72

🇳🇱 45.148.10.152

🇺🇸 45.33.40.18

🇳🇱 5.83.143.102

🇦🇷 181.224.182.117

🇺🇸 162.216.150.201

🇺🇸 162.216.150.86

🇮🇪 128.251.36.118

🇩🇪 69.5.169.30

🇺🇸 66.132.224.93