JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.140.254.25

37.140.254.25 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 17%: ?

17%

ISP	VPN Consumer Network Services
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇨🇭 Switzerland
City	Oberhausen-Boschenwiesen, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.140.254.25

Whois 37.140.254.25

IP Abuse Reports for 37.140.254.25:

This IP address has been reported a total of 67 times from 33 distinct sources. 37.140.254.25 was first reported on December 26th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 pusathosting.com	2026-05-03 21:02:44 (1 month ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇬🇧 consul.to	2026-04-27 11:11:46 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇷 Peregrine	2026-04-27 03:10:26 (1 month ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 37.140.254.25 - - [23/Apr/2026:07:06:51 -0300] "GET /ph ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 37.140.254.25 - - [23/Apr/2026:07:06:51 -0300] "GET /phpinfo.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-04-26 03:10:13 (1 month ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 37.140.254.25 - - [23/Apr/2026:07:06:51 -0300] "GET /ph ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 37.140.254.25 - - [23/Apr/2026:07:06:51 -0300] "GET /phpinfo.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇬🇧 consul.to	2026-04-25 08:25:00 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇷 Peregrine	2026-04-24 03:10:14 (1 month ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 37.140.254.25 - - [23/Apr/2026:07:06:51 -0300] "GET /ph ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 37.140.254.25 - - [23/Apr/2026:07:06:51 -0300] "GET /phpinfo.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇺🇸 pixiekat	2026-04-23 14:27:44 (1 month ago)	[Thu Apr 23 14:25:16.023888 2026] [authz_core:error] [pid 537171:tid 537218] [client 37.140.254.25:3 ... show more [Thu Apr 23 14:25:16.023888 2026] [authz_core:error] [pid 537171:tid 537218] [client 37.140.254.25:31915] AH01630: client denied by server configuration: /var/www/html/frontend [Thu Apr 23 14:26:27.598636 2026] [authz_core:error] [pid 537171:tid 537218] [client 37.140.254.25:52381] AH01630: client denied by server configuration: /var/www/html/..; [Thu Apr 23 14:26:47.909336 2026] [authz_core:error] [pid 537171:tid 537183] [client 37.140.254.25:26341] AH01630: client denied by server configuration: /var/www/html/static [Thu Apr 23 14:26:58.928874 2026] [authz_core:error] [pid 537172:tid 537210] [client 37.140.254.25:36187] AH01630: client denied by server configuration: /var/www/html/api [Thu Apr 23 14:27:44.140041 2026] [authz_core:error] [pid 537171:tid 537179] [client 37.140.254.25:30955] AH01630: client denied by server configuration: /var/www/html/ ... show less	Brute-Force
🇧🇷 Peregrine	2026-04-23 10:03:46 (1 month ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 37.140.254.25 - - [23/Apr/2026:07:03:42 -0300] "G ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 37.140.254.25 - - [23/Apr/2026:07:03:42 -0300] "GET /frontend_dev.php/$ HTTP/1.1" 404 18193 show less	Bad Web Bot
🇬🇧 Swiptly	2026-04-13 18:13:29 (1 month ago)	Excessive 403/404/405 PHP/CMS errors from scanning or broken bots ...	Web App Attack
🇫🇷 Octopuce	2026-03-24 10:52:23 (2 months ago)	Aggressive web search of vulnerable pages: /fm.php /1.php /a.php /m.php /modules/ets_whatsapp/securi ... show more Aggressive web search of vulnerable pages: /fm.php /1.php /a.php /m.php /modules/ets_whatsapp/security.php /templates/beez/ /templates/beez3/ / ... show less	Web App Attack
🇩🇪 iNetWorker	2026-03-12 04:48:52 (3 months ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇦 URAN Publishing Service	2026-02-25 22:09:51 (3 months ago)	37.140.254.25 - - [26/Feb/2026:00:09:50 +0200] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_jso ... show more 37.140.254.25 - - [26/Feb/2026:00:09:50 +0200] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 404 2867 "http://visnyk.nuou.org.ua//wp-content/plugins/so-pinyin-slugs/inc/main_json.php" "Go-http-client/1.1" 37.140.254.25 - - [26/Feb/2026:00:09:50 +0200] "GET /wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php HTTP/1.1" 404 300 "http://visnyk.nuou.org.ua//wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php" "Go-http-client/1.1" ... show less	Web App Attack
🇬🇧 consul.to	2026-02-24 11:53:27 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-02-11 21:38:29 (4 months ago)	Multiple WAF Violations	Web App Attack
🇫🇷 dynamix	2026-02-03 04:51:17 (4 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.236

🇧🇩 202.37.47.67

🇧🇷 179.51.153.37

🇸🇬 172.217.97.19

🇨🇳 122.96.28.162

🇵🇱 91.206.245.133

🇬🇧 35.203.210.55

🇺🇸 18.191.163.52

🇺🇸 3.145.0.81

🇧🇷 201.71.50.150

🇺🇸 138.94.219.38

🇨🇳 122.96.48.246

🇲🇲 103.59.163.135

🇩🇪 79.233.204.141

🇮🇩 43.133.148.170

🇸🇦 34.166.5.230

🇺🇸 216.180.246.10

🇸🇪 185.213.154.228

🇫🇷 176.147.160.137

🇺🇸 162.141.167.38