JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.5.48.199

194.5.48.199 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 33%: ?

33%

ISP	VPN Consumer Tokyo, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.5.48.199

Whois 194.5.48.199

IP Abuse Reports for 194.5.48.199:

This IP address has been reported a total of 74 times from 49 distinct sources. 194.5.48.199 was first reported on December 10th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-06-09 07:27:17 (1 day ago)	[TueJun0909:27:14.3816582026][security2:error][pid6270:tid6698][client194.5.48.199:0]ModSecurity:Acc ... show more [TueJun0909:27:14.3816582026][security2:error][pid6270:tid6698][client194.5.48.199:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"xn--tirascarph-ieb.ch\"][uri\"/xmlrpc.php\"][unique_id\"aifAUrmKuUWKB8gRtEtRrgAAANQ\"] show less	Hacking Web App Attack
🇨🇭 4server	2026-06-04 21:23:01 (6 days ago)	[ThuJun0423:22:56.8925032026][security2:error][pid1875628:tid1875850][client194.5.48.199:0]ModSecuri ... show more [ThuJun0423:22:56.8925032026][security2:error][pid1875628:tid1875850][client194.5.48.199:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"xn--tirascarph-ieb.ch\"][uri\"/xmlrpc.php\"][unique_id\"aiHssK8OQlUTxX86JnqsNAAAAQ0\"] show less	Hacking Web App Attack
Anonymous	2026-05-26 03:55:05 (2 weeks ago)	194.5.48.199 - - [26/May/2026:05:55:02 +0200] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" ... show more 194.5.48.199 - - [26/May/2026:05:55:02 +0200] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 194.5.48.199 - - [26/May/2026:05:55:03 +0200] "GET /wp-content/plugins/schema/geckos.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 194.5.48.199 - - [26/May/2026:05:55:03 +0200] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 194.5.48.199 - - [26/May/2026:05:55:03 +0200] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 194.5.48.199 - - [26/May/2026:05:55:04 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 124 "-" "Go-http-client/1.1" ... show less	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-05-26 03:20:05 (2 weeks ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇨🇭 backslash	2026-05-26 02:21:00 (2 weeks ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇩🇪 webko.si	2026-05-26 00:07:21 (2 weeks ago)	pridenmozic.si: Bruteforce web app access, URI detail: '/wp-includes/Text/Diff/Engine/template-singl ... show more pridenmozic.si: Bruteforce web app access, URI detail: '/wp-includes/Text/Diff/Engine/template-singl-portfolio.php'. show less	Web App Attack
🇩🇪 4server	2026-05-25 22:00:49 (2 weeks ago)	[TueMay2600:00:43.9157952026][security2:error][pid522203:tid522309][client194.5.48.199:0]ModSecurity ... show more [TueMay2600:00:43.9157952026][security2:error][pid522203:tid522309][client194.5.48.199:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"modules/mod_simplefileuploadv1\\\\\\\\.3\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"640\"][id\"390746\"][rev\"1\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:KnownVulnerableJoomlaSimpleFileUploadv1.3Accessblocked\"][hostname\"feldenkraistherapy.ch\"][uri\"/modules/mod_simplefileuploadv1.3/elements/filemanager.php\"][unique_id\"ahTGi1b_t39TcG-yo_qGXwAAAQ0\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-05-25 20:11:09 (2 weeks ago)	[MonMay2522:11:06.9717882026][security2:error][pid2305307:tid2305547][client194.5.48.199:0]ModSecuri ... show more [MonMay2522:11:06.9717882026][security2:error][pid2305307:tid2305547][client194.5.48.199:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/\(revslider\\|elementor\\|layer-slider\)/.\*\\\\\\\\.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"394\"][id\"960832\"][msg\"WordPresspluginexploitscannerblocked\"][hostname\"serverprivato.ch\"][uri\"/wp-content/plugins/revslider/temp/update_extract/revslider.php\"][unique_id\"ahSs2qvggSKzPT36s__KxQAAAQc\"] show less	Hacking Web App Attack
🇦🇺 afleventoffice.com.au	2026-05-25 05:33:58 (2 weeks ago)	GET /wp-content/plugins/payment-gateway-pix-for-woocommerce/Includes/files/certs_c6/admin.php HTTP/1 ... show more GET /wp-content/plugins/payment-gateway-pix-for-woocommerce/Includes/files/certs_c6/admin.php HTTP/1. show less	Web App Attack
Anonymous	2026-04-10 20:52:22 (2 months ago)	wp admin page access attempt ...	Hacking Web App Attack
🇱🇹 kermit	2026-02-23 16:35:37 (3 months ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇬🇧 consul.to	2026-02-21 01:43:36 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-02-18 05:00:26 (3 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇺🇸 myagent.site	2026-02-04 10:07:28 (4 months ago)	Blocking for trying to access an exploit file: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	Hacking
🇺🇸 myagent.site	2026-02-04 03:16:09 (4 months ago)	Blocking for trying to access an exploit file: //vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	Hacking

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.30.64.65

🇺🇸 172.236.228.86

🇩🇪 161.35.65.86

🇳🇱 144.124.254.216

🇨🇦 99.227.144.51

🇺🇸 91.230.168.209

🇺🇸 66.132.172.138

🇺🇸 45.33.109.8

🇩🇪 2003:ea:4706:8d00:e843:81ca:ec92:48a5

🇳🇱 195.178.110.26

🇺🇸 193.3.53.7

🇺🇸 174.20.47.38

🇦🇪 154.29.29.171

🇸🇬 152.42.199.186

🇮🇳 103.190.7.203

🇫🇷 91.231.89.132

🇷🇺 91.79.14.114

🇳🇴 81.167.26.57

🇳🇱 45.156.87.34

🇳🇱 45.142.193.53