JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

188.212.135.194

Recent Activity

Abuse confidence score ?

15% Caution

163 reports

63 reporters · latest 13 hours ago

ISP	VPN Consumer Warsaw, Poland
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 188.212.135.194

This IP address has been reported a total of 163 times from 63 distinct sources. 188.212.135.194 was first reported on May 12th 2022, and the most recent report was 13 hours ago. In the last 60 days, the top reporter locations were: Germany with 1 report; France with 1 report. The most common categories in these recent reports were: Port Scan 1 time; Hacking 1 time; Email Spam 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Jochen Pretli	2026-09-25 14:47:09 (13 hours ago)	connection to honeypot	Email Spam Port Scan
🇫🇷 masterguru	2026-09-25 14:06:14 (13 hours ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 188.212.135.194 (PL/Poland/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 188.212.135.194 (PL/Poland/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 dynamix	2026-07-06 17:47:09 (2 months ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-05-05 22:34:51 (4 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-05-04 22:28:40 (4 months ago)		Brute-Force Web App Attack
🇫🇮 Rexikon	2026-05-04 16:07:32 (4 months ago)	188.212.135.194 - - [04/May/2026:18:07:31 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://pa ... show more 188.212.135.194 - - [04/May/2026:18:07:31 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://paramedic24.pl/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 188.212.135.194 - - [04/May/2026:18:07:31 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://paramedic24.pl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/138.0" 188.212.135.194 - - [04/May/2026:18:07:32 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://paramedic24.pl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 OPR/120.0.0.0" 188.212.135.194 - - [04/May/2026:18:07:32 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://paramedic24.pl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/138.0" 188.212.135.194 - - [04/May/2026:18:07:32 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "http ... show less	Brute-Force
🇫🇮 Rexikon	2026-05-04 15:43:14 (4 months ago)	188.212.135.194 - - [04/May/2026:17:43:13 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://pa ... show more 188.212.135.194 - - [04/May/2026:17:43:13 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://paramedic24.pl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.3124.85" 188.212.135.194 - - [04/May/2026:17:43:13 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://paramedic24.pl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 188.212.135.194 - - [04/May/2026:17:43:13 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://paramedic24.pl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 188.212.135.194 - - [04/May/2026:17:43:14 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://paramedic24.pl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 OPR/120. ... show less	Brute-Force
🇺🇸 mnsf	2026-05-04 15:05:37 (4 months ago)	Login Too Frequent (7)	Brute-Force Web App Attack
🇫🇮 Rexikon	2026-05-04 12:40:15 (4 months ago)	188.212.135.194 - - [04/May/2026:14:40:13 +0200] "POST /wp-login.php HTTP/1.0" 200 14528 "https://fa ... show more 188.212.135.194 - - [04/May/2026:14:40:13 +0200] "POST /wp-login.php HTTP/1.0" 200 14528 "https://faid.com.pl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 188.212.135.194 - - [04/May/2026:14:40:13 +0200] "POST /wp-login.php HTTP/1.0" 200 14528 "https://faid.com.pl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 OPR/120.0.0.0" 188.212.135.194 - - [04/May/2026:14:40:13 +0200] "POST /wp-login.php HTTP/1.0" 200 14528 "https://faid.com.pl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.3124.85" 188.212.135.194 - - [04/May/2026:14:40:14 +0200] "POST /wp-login.php HTTP/1.0" 200 14528 "https://faid.com.pl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.3 ... show less	Brute-Force
Anonymous	2026-05-04 09:15:19 (4 months ago)	Aggressive web scan	Web App Attack
🇫🇮 as211431.net	2026-05-03 06:25:24 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from PL. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from PL. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-includes/xl2023.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 ipblock.com	2026-04-26 09:24:00 (4 months ago)	IPBlock protected site ID [4055-d][s=07]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-24 22:55:22 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 188.212.135.194 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 188.212.135.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 18:55:17.025270 2026] [security2:error] [pid 1011:tid 1011] [client 188.212.135.194:61411] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcoinsquaretrader.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcoinsquaretrader.com"] [uri "/sql.sql"] [unique_id "acMWVRFeLRvKrFhYt22Y6gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-23 03:23:02 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 188.212.135.194 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 188.212.135.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 23:22:54.310679 2026] [security2:error] [pid 17260:tid 17260] [client 188.212.135.194:33079] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thegoldentether.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thegoldentether.com"] [uri "/bak/backup.sql"] [unique_id "acCyDvpnfSsEkDiUv0Rt2wAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 pinguin	2026-03-20 19:41:21 (6 months ago)	Triggered Cloudflare WAF (firewallManaged) from PL. Action taken: LOG Protocol: HTTP/1.1 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from PL. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 163 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.100

🇬🇧 195.206.182.216

🇩🇪 193.124.20.234

🇳🇱 185.107.80.93

🇮🇩 182.253.236.158

🇮🇩 182.8.226.202

🇨🇳 180.184.51.110

🇲🇽 177.245.247.58

🇰🇷 175.205.195.27

🇫🇷 164.68.102.175

🇳🇱 109.160.32.26

🇧🇩 103.154.237.53

🇫🇷 89.88.209.51

🇫🇷 85.217.140.35

🇮🇳 68.183.92.206

🇺🇸 205.210.31.3

🇪🇹 196.189.144.111

🇧🇴 189.28.65.108

🇺🇸 167.99.168.244

🇺🇸 162.216.149.116