JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.140.254.234

37.140.254.234 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 78%: ?

78%

ISP	VPN Consumer Network Services
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇨🇭 Switzerland
City	Oberhausen-Boschenwiesen, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.140.254.234

Whois 37.140.254.234

IP Abuse Reports for 37.140.254.234:

This IP address has been reported a total of 16 times from 16 distinct sources. 37.140.254.234 was first reported on June 9th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-06 22:31:28 (15 hours ago)		Brute-Force Web App Attack
🇨🇿 huginet	2026-07-06 07:21:50 (1 day ago)	37.140.254.234 - - [06/Jul/2026:09:19:40 +0200] "POST /wp-login.php HTTP/1.1" 503 19589 "https://www ... show more 37.140.254.234 - - [06/Jul/2026:09:19:40 +0200] "POST /wp-login.php HTTP/1.1" 503 19589 "https://www.huginet.net/wp-admin/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 37.140.254.234 - - [06/Jul/2026:09:21:50 +0200] "POST /wp-login.php HTTP/1.1" 503 18656 "https://www.huginet.net/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36" ... show less	Web Spam Blog Spam Hacking Bad Web Bot Web App Attack
🇷🇴 SpamStopper	2026-07-06 05:39:16 (1 day ago)	Fail2Ban - WP Spoofing	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-07-06 05:33:54 (1 day ago)	[MonJul0607:33:48.4933822026][security2:error][pid3786279:tid3786393][client37.140.254.234:0]ModSecu ... show more [MonJul0607:33:48.4933822026][security2:error][pid3786279:tid3786393][client37.140.254.234:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"prstartup.ch\"][uri\"/wp-login.php\"][unique_id\"aks-PCAAU9Z6Z7T3nHC9FQAAAQY\"]\,referer:https://prstartup.ch/wp-admin/ show less	Port Scan Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-06 00:48:24 (1 day ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-07-04 21:23:33 (2 days ago)	[ns65.kdns.gr] httpd-login-spray-site: sites=www.plaero.gr; logs=/var/log/httpd/domains/plaero.gr.lo ... show more [ns65.kdns.gr] httpd-login-spray-site: sites=www.plaero.gr; logs=/var/log/httpd/domains/plaero.gr.log; samples=site_wide=true \| distinct_ips=17 \| /wp-login.php show less	Hacking Web App Attack
🇪🇸 DXC-0	2026-07-02 03:00:50 (5 days ago)	Multiple attacks on Honeypot servers	Web Spam Brute-Force Web App Attack Hacking
🇩🇪 Starburst SysOp Team	2026-07-01 17:05:45 (5 days ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-1)	Hacking Bad Web Bot
🇨🇭 YF	2026-07-01 17:00:31 (5 days ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇬🇧 markawes	2026-07-01 16:17:34 (5 days ago)	[SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 37.140.254.23 ... show more [SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 37.140.254.234 - - [01/Jul/2026:16:14:24 +0000] "GET /.env.development HTTP/1.1" 404 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 37.140.254.234 - - [01/Jul/2026:16:17:34 +0000] "GET /site/.env HTTP/1.1" 404 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" show less	Web App Attack Port Scan
🇫🇷 Baking333	2026-07-01 11:55:19 (6 days ago)	redacted:443 37.140.254.234 - - [01/Jul/2026:12:55:00 +0100] "GET /.env HTTP/1.1" 200 5359 0/19747 " ... show more redacted:443 37.140.254.234 - - [01/Jul/2026:12:55:00 +0100] "GET /.env HTTP/1.1" 200 5359 0/19747 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36" redacted:443 37.140.254.234 - - [01/Jul/2026:12:55:13 +0100] "GET /.[redacted] HTTP/1.1" 200 5359 0/67626 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.4 Safari/605.1.15" show less	Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-07-01 08:21:41 (6 days ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 technojoe99	2026-07-01 07:29:01 (6 days ago)	Exploit scan from 37.140.254.234. GET /.env.development HTTP/1.1.	Web App Attack
🇫🇷 LoneRider	2026-07-01 06:44:34 (6 days ago)	[01/Jul/2026:08:43:18.063529 +0200] akS3BsgC6az2T7IUXgSDgQAAAAA 37.140.254.234 43134 127.0.0.1 7080 ... show more [01/Jul/2026:08:43:18.063529 +0200] akS3BsgC6az2T7IUXgSDgQAAAAA 37.140.254.234 43134 127.0.0.1 7080 [01/Jul/2026:08:43:53.866877 +0200] akS3KXW6E7mko-T8mgVRrgAAAAI 37.140.254.234 42482 127.0.0.1 7081 [01/Jul/2026:08:44:33.443652 +0200] akS3UTibR57wOBNtWw0k6QAAAAc 37.140.254.234 42958 127.0.0.1 7081 ... show less	Hacking
🇺🇦 URAN Publishing Service	2026-06-09 16:05:23 (3 weeks ago)	37.140.254.234 - - [09/Jun/2026:19:05:20 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" ... show more 37.140.254.234 - - [09/Jun/2026:19:05:20 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 404 706 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.140.254.234 - - [09/Jun/2026:19:05:21 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 404 706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.85.128.181

🇨🇱 179.56.198.21

🇵🇱 166.88.37.234

🇸🇬 103.187.147.165

🇺🇸 65.49.20.123

🇩🇪 47.254.158.124

🇺🇸 20.168.6.85

🇳🇱 185.226.197.14

🇺🇸 150.107.36.186

🇦🇪 139.185.55.154

🇷🇺 89.223.38.250

🇩🇪 63.182.21.111

🇪🇬 41.178.54.218

🇨🇦 20.104.50.116

🇪🇹 196.188.113.233

🇳🇱 195.178.110.199

🇵🇰 103.194.93.30

🇩🇰 96.0.24.240

🇰🇿 95.182.15.66

🇨🇦 85.217.149.46