This IP address has been reported a total of
92
times from
49 distinct
sources.
194.5.48.175 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: ...
show moreHoneypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
[SunJul2602:57:00.9760052026][security2:error][pid1969716:tid1970014][client194.5.48.175:0]ModSecuri ...
show more[SunJul2602:57:00.9760052026][security2:error][pid1969716:tid1970014][client194.5.48.175:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"benvenutialfood.org\"][uri\"/xmlrpc.php\"][unique_id\"amVbXLJ1HwSDoHkh4ZZcjQAAARg\"]
show less
Honeypot triggered: /xmlrpc.php on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x ...
show moreHoneypot triggered: /xmlrpc.php on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36. Method: POST
show less
[WedJul2216:26:51.7682152026][security2:error][pid2825472:tid2825788][client194.5.48.175:0]ModSecuri ...
show more[WedJul2216:26:51.7682152026][security2:error][pid2825472:tid2825788][client194.5.48.175:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"comarcosa.com\"][uri\"/xmlrpc.php\"][unique_id\"amDTKxg7PU8d17Kk87GTIAAAAMk\"]
show less
Honeypot triggered: /xmlrpc.php on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x ...
show moreHoneypot triggered: /xmlrpc.php on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36. Method: POST
show less
[ThuJul1611:54:18.6487602026][security2:error][pid3392470:tid3392732][client194.5.48.175:0]ModSecuri ...
show more[ThuJul1611:54:18.6487602026][security2:error][pid3392470:tid3392732][client194.5.48.175:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"motogiro.com\"][uri\"/xmlrpc.php\"][unique_id\"aliqSuWLpNdOk-QQszLDIAAAAQ4\"]
show less
Honeypot triggered: /xmlrpc.php on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x ...
show moreHoneypot triggered: /xmlrpc.php on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36. Method: POST
show less
Web App Attack
Anonymous
194.5.48.175 - - [15/Jul/2026:09:06:31 +0200] "GET /wp-content/plugins/enhanced-text-widget/analyst/ ...
show more194.5.48.175 - - [15/Jul/2026:09:06:31 +0200] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/1.1" 402 805 "-" "Go-http-client/1.1" ...
show less
(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 194.5.48.175 (JP/Japan/-): 1 in the last 3600 ...
show more(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 194.5.48.175 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 194.5.48.175 - - [15/Jul/2026:01:59:08 +0200] "GET /1.php HTTP/2.0" 404 110555 "http://matteodinicola.net/1.php" "Go-http-client/2.0" "-" host=matteodinicola.net
show less
Aggressive web search of vulnerable pages: /wp-includes/woocommerce-call.php /wp-content/plugins/wor ...
show moreAggressive web search of vulnerable pages: /wp-includes/woocommerce-call.php /wp-content/plugins/wordpress-seo/wp-seo-main-float.php /wp-conten ...
show less
[Tue Jul 14 22:10:56.291607 2026] [php7:error] [pid 193774:tid 193774] [client 194.5.48.175:20821] s ...
show more[Tue Jul 14 22:10:56.291607 2026] [php7:error] [pid 193774:tid 193774] [client 194.5.48.175:20821] script '/var/www/html/4PJcpMFsD8B.php' not found or unable to stat
show less
Web App Attack
Showing 1 to
15
of 92 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩