JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.140.254.85

37.140.254.85 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 66%: ?

66%

ISP	VPN Consumer Network Services
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇨🇭 Switzerland
City	Oberhausen-Boschenwiesen, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.140.254.85

Whois 37.140.254.85

IP Abuse Reports for 37.140.254.85:

This IP address has been reported a total of 14 times from 13 distinct sources. 37.140.254.85 was first reported on June 9th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 DXC-0	2026-07-02 03:00:55 (1 day ago)	Multiple attacks on Honeypot servers	Web Spam Brute-Force Web App Attack Hacking
🇩🇪 Starburst SysOp Team	2026-07-01 17:05:42 (1 day ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-1)	Hacking Bad Web Bot
🇨🇭 YF	2026-07-01 17:00:42 (1 day ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇬🇧 markawes	2026-07-01 16:14:06 (1 day ago)	[SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 37.140.254.85 ... show more [SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 37.140.254.85 - - [01/Jul/2026:16:13:59 +0000] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36" 37.140.254.85 - - [01/Jul/2026:16:14:04 +0000] "GET /.env.local HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.4 Safari/605.1.15" show less	Web App Attack Port Scan
Anonymous	2026-07-01 15:52:43 (1 day ago)	2026/07/01 15:51:54 [error] 3404734#3404734: 12723 [client 37.140.254.85] ModSecurity: Access denie ... show more 2026/07/01 15:51:54 [error] 3404734#3404734: 12723 [client 37.140.254.85] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.27.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "94.72.101.158"] [uri "/.git/COMMIT_EDITMSG"] [unique_id "178292111448.050669"] [ref ""], client: 37.140.254.85, server: srv.ingeltechgh.com, request: "GET /.git/COMMIT_EDITMSG HTTP/1.1", host: "94.72.101.158" 2026/07/01 15:52:06 [error] 3404736#3404736: *12760 [client 37.140.254.85] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file ... show less	Brute-Force
🇫🇷 YF	2026-07-01 15:15:58 (1 day ago)	Config JSON probe	Web App Attack
🇫🇷 Baking333	2026-07-01 11:56:14 (1 day ago)	redacted:80 37.140.254.85 - - [01/Jul/2026:12:55:45 +0100] "GET /.[redacted] HTTP/1.1" 200 166 0/163 ... show more redacted:80 37.140.254.85 - - [01/Jul/2026:12:55:45 +0100] "GET /.[redacted] HTTP/1.1" 200 166 0/16330 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.4 Safari/605.1.15" redacted:80 37.140.254.85 - - [01/Jul/2026:12:56:12 +0100] "GET /config/.env HTTP/1.1" 200 166 0/21864 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-07-01 08:21:42 (1 day ago)	Probing websites for vulnerabilities	Web App Attack
🇩🇪 XICTRON	2026-07-01 07:50:05 (1 day ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇺🇸 technojoe99	2026-07-01 07:28:47 (1 day ago)	Exploit scan from 37.140.254.85. GET /docker-compose.yaml HTTP/1.1.	Web App Attack
🇫🇷 LoneRider	2026-07-01 06:43:29 (1 day ago)	[01/Jul/2026:08:43:22.950489 +0200] akS3CnW6E7mko-T8mgVRnwAAAAI 37.140.254.85 35870 127.0.0.1 7081 [ ... show more [01/Jul/2026:08:43:22.950489 +0200] akS3CnW6E7mko-T8mgVRnwAAAAI 37.140.254.85 35870 127.0.0.1 7081 [01/Jul/2026:08:43:28.778270 +0200] akS3EHW6E7mko-T8mgVRowAAAAI 37.140.254.85 52434 127.0.0.1 7080 [01/Jul/2026:08:43:29.346545 +0200] akS3EcgC6az2T7IUXgSDjgAAAAA 37.140.254.85 36062 127.0.0.1 7081 ... show less	Hacking
Anonymous	2026-06-09 19:50:02 (3 weeks ago)	\| [Normal/Switzerland] Aggressive IP 37.140.254.85 (~350 hits). Type: DoS Defender- Web server 400 e ... show more \| [Normal/Switzerland] Aggressive IP 37.140.254.85 (~350 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇦 URAN Publishing Service	2026-06-09 16:05:43 (3 weeks ago)	37.140.254.85 - - [09/Jun/2026:19:05:43 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 40 ... show more 37.140.254.85 - - [09/Jun/2026:19:05:43 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 404 706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.140.254.85 - - [09/Jun/2026:19:05:43 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 404 706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
🇫🇷 Octopuce	2026-06-09 12:38:56 (3 weeks ago)	Aggressive web search of vulnerable pages: /wp-admin/css/colors/sunrise/colors_95.php /wp-includes/b ... show more Aggressive web search of vulnerable pages: /wp-admin/css/colors/sunrise/colors_95.php /wp-includes/block-patterns/autoload_classmap.php /wp-con ... show less	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 113.67.8.114

🇬🇧 2a06:4884:9000::98

🇨🇳 220.167.233.41

🇻🇳 165.154.137.186

🇩🇪 164.90.232.107

🇨🇳 106.13.239.146

🇺🇸 74.114.29.18

🇺🇸 73.110.174.243

🇺🇸 13.86.104.104

🇰🇷 222.116.59.194

🇳🇱 213.152.185.117

🇹🇭 203.154.158.195

🇲🇽 187.191.48.4

🇬🇧 165.232.38.41

🇫🇷 90.19.29.86

🇳🇱 89.248.163.42

🇧🇬 79.124.49.70

🇨🇳 39.154.10.145

🇬🇧 5.226.140.98

🇪🇹 196.188.93.169