JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.5.48.196

194.5.48.196 was found in our database!

This IP was reported 109 times. Confidence of Abuse is 72%: ?

72%

ISP	VPN Consumer Tokyo, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.5.48.196

Whois 194.5.48.196

IP Abuse Reports for 194.5.48.196:

This IP address has been reported a total of 109 times from 64 distinct sources. 194.5.48.196 was first reported on December 5th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ambor	2026-07-08 19:06:20 (1 hour ago)	Honeypot triggered: /xmlrpc.php on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x ... show more Honeypot triggered: /xmlrpc.php on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36. Method: POST show less	Web App Attack
🇺🇸 ambor	2026-07-07 15:41:09 (1 day ago)	Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: ... show more Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇺🇸 ambor	2026-07-07 14:03:57 (1 day ago)	Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: ... show more Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: Mozilla/5.0 (Linux; Android 13; SM-G998B) AppleWebKit/537.36 Chrome/120.0.0.0 Mobile Safari/537.36 show less	Web App Attack
🇳🇱 Site.eu	2026-07-06 23:40:52 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 consul.to	2026-07-06 12:40:59 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-07-05 03:01:16 (3 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 02:31:27 (3 days ago)	(mod_security) mod_security (id:240000) triggered by 194.5.48.196 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 194.5.48.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 22:31:19.621906 2026] [security2:error] [pid 26320:tid 26320] [client 194.5.48.196:64335] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|polycarbonatex.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "polycarbonatex.com"] [uri "/images/stories/themes.php"] [unique_id "aknB972e8i8khSRN9EmUVQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-07-04 02:55:10 (4 days ago)	194.5.48.196 - - [04/Jul/2026:05:55:05 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 404 ... show more 194.5.48.196 - - [04/Jul/2026:05:55:05 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.48.196 - - [04/Jul/2026:05:55:10 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" ... show less	Web App Attack
🇬🇧 consul.to	2026-07-03 15:10:13 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇦 Mediashaker	2026-07-02 15:39:37 (6 days ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 194.5.48.196 (JP/Japan/- ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 194.5.48.196 (JP/Japan/-) show less	Port Scan
🇫🇷 matthieul.dev	2026-07-02 14:25:22 (6 days ago)	Blocked by os-abuseipdb; 6 hits, proto=tcp,udp, ports=35109	Port Scan Brute-Force
🇺🇸 lostswordfish.com	2026-07-01 19:04:03 (1 week ago)	Wordfence waf block on parsol	Web App Attack
🇳🇱 Site.eu	2026-06-27 02:34:11 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 Octopuce	2026-06-26 19:01:31 (1 week ago)	Aggressive web search of vulnerable pages: /install.php /images/class-config.php /bypass.php /class. ... show more Aggressive web search of vulnerable pages: /install.php /images/class-config.php /bypass.php /class.php /init.php /adminfuns.php /wp_wlx.php /w ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 18:36:54 (1 week ago)	(mod_security) mod_security (id:240000) triggered by 194.5.48.196 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 194.5.48.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 14:36:46.611549 2026] [security2:error] [pid 13093:tid 13093] [client 194.5.48.196:22845] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|megapct.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "megapct.com"] [uri "/images/stories/themes.php"] [unique_id "aj7GvgAIb5qyYToYLTIJgwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇭 197.221.81.66

🇨🇳 110.249.201.119

🇰🇷 222.116.11.71

🇺🇸 205.210.31.41

🇿🇦 196.50.83.166

🇨🇴 190.67.106.221

🇺🇸 185.223.152.75

🇧🇷 167.250.64.154

🇺🇸 104.28.236.176

🇮🇩 103.172.20.218

🇮🇷 81.12.37.22

🇧🇬 79.124.56.246

🇮🇪 20.190.159.130

🇨🇦 205.250.25.62

🇺🇸 195.184.76.160

🇳🇱 185.107.80.93

🇹🇿 154.72.85.146

🇰🇭 150.129.20.163

🇺🇸 147.182.225.86

🇮🇩 103.19.58.154