JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.5.48.167

194.5.48.167 was found in our database!

This IP was reported 87 times. Confidence of Abuse is 71%: ?

71%

ISP	VPN Consumer Tokyo, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.5.48.167

Whois 194.5.48.167

IP Abuse Reports for 194.5.48.167:

This IP address has been reported a total of 87 times from 51 distinct sources. 194.5.48.167 was first reported on December 7th 2024, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 DZBOT	2026-07-15 10:38:16 (18 hours ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-07-15 07:06:50 (21 hours ago)	194.5.48.167 - - [15/Jul/2026:09:06:49 +0200] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" ... show more 194.5.48.167 - - [15/Jul/2026:09:06:49 +0200] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 402 805 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-15 00:08:52 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 Octopuce	2026-07-14 23:28:00 (1 day ago)	Aggressive web search of vulnerable pages: /wp-content/themes/index.php /wp-content/themes/builder-a ... show more Aggressive web search of vulnerable pages: /wp-content/themes/index.php /wp-content/themes/builder-and-developer/inc/tgm/error.php /wp-content/ ... show less	Web App Attack
🇬🇧 consul.to	2026-07-14 20:46:49 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 solution.it	2026-07-14 20:11:23 (1 day ago)	[Tue Jul 14 22:11:23.302193 2026] [php7:error] [pid 200393:tid 200393] [client 194.5.48.167:27335] s ... show more [Tue Jul 14 22:11:23.302193 2026] [php7:error] [pid 200393:tid 200393] [client 194.5.48.167:27335] script '/var/www/html/file2.php' not found or unable to stat show less	Web App Attack
🇩🇪 FeG Deutschland	2026-07-14 17:38:03 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 lostswordfish.com	2026-07-12 04:00:13 (4 days ago)	Wordfence waf block on parsol	Web App Attack
🇺🇸 ambor	2026-07-10 23:56:41 (5 days ago)	Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: ... show more Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇺🇸 ambor	2026-07-08 14:38:27 (1 week ago)	Honeypot triggered: /xmlrpc.php on ifebridge.com. User-Agent: Mozilla/5.0 (Linux; Android 13; SM-G99 ... show more Honeypot triggered: /xmlrpc.php on ifebridge.com. User-Agent: Mozilla/5.0 (Linux; Android 13; SM-G998B) AppleWebKit/537.36 Chrome/120.0.0.0 Mobile Safari/537.36. Method: POST show less	Web App Attack
🇺🇸 ambor	2026-07-07 19:51:00 (1 week ago)	Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: ... show more Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 21:33:37 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 194.5.48.167 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 194.5.48.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 17:33:31.130090 2026] [security2:error] [pid 23907:tid 23907] [client 194.5.48.167:43721] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 194.5.48.167 (+1 hits since last alert)\|kulacenterky.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kulacenterky.com"] [uri "/xmlrpc.php"] [unique_id "akl8KxjLzpXouvPEjz2DhwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ambor	2026-07-03 12:37:19 (1 week ago)	Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: ... show more Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: Mozilla/5.0 (Linux; Android 13; SM-G998B) AppleWebKit/537.36 Chrome/120.0.0.0 Mobile Safari/537.36 show less	Web App Attack
🇨🇭 4server	2026-07-02 21:23:49 (1 week ago)	[ThuJul0223:23:43.9511392026][security2:error][pid2948503:tid2948716][client194.5.48.167:0]ModSecuri ... show more [ThuJul0223:23:43.9511392026][security2:error][pid2948503:tid2948716][client194.5.48.167:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"motogiro.com\"][uri\"/xmlrpc.php\"][unique_id\"akbW3_mj2-jHnLjjXtU8KQAAAQ4\"] show less	Hacking Web App Attack
🇺🇸 lostswordfish.com	2026-07-02 10:20:05 (1 week ago)	Wordfence waf block on parsol	Web App Attack

Showing 1 to 15 of 87 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 206.214.217.154

🇨🇳 106.12.215.233

🇧🇩 103.162.185.133

🇧🇩 103.158.11.167

🇫🇷 85.217.140.42

🇩🇪 69.5.169.170

🇬🇧 68.183.40.206

🇰🇷 211.197.62.36

🇮🇳 202.189.235.42

🇧🇷 177.193.193.197

🇳🇱 160.119.69.16

🇻🇳 116.110.148.173

🇺🇸 64.62.156.72

🇺🇸 216.25.89.132

🇧🇷 200.163.145.164

🇲🇦 196.217.56.79

🇪🇹 196.189.106.170

🇧🇷 186.208.110.96

🇷🇺 176.193.245.182

🇷🇺 176.15.66.29