JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.5.48.208

194.5.48.208 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 29%: ?

29%

ISP	VPN Consumer Tokyo, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.5.48.208

Whois 194.5.48.208

IP Abuse Reports for 194.5.48.208:

This IP address has been reported a total of 85 times from 61 distinct sources. 194.5.48.208 was first reported on December 10th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Savoie	2026-06-17 10:54:00 (4 days ago)	194.5.48.208 www.*.* - [17/Jun/2026:12:54:30 +0200] "GET /wp-login.php HTTP/1.1" 302 250 "-" "Mo ... show more 194.5.48.208 www.*.* - [17/Jun/2026:12:54:30 +0200] "GET /wp-login.php HTTP/1.1" 302 250 "-" "Mozilla/5.0" show less	Bad Web Bot Web App Attack
Anonymous	2026-06-15 05:35:49 (6 days ago)	2026-06-15 05:35:49 warning[2588728]: host unknown[194.5.48.208]: unauthorized access atte ... show more 2026-06-15 05:35:49 warning[2588728]: host unknown[194.5.48.208]: unauthorized access attempted: tcp/9010 show less	Port Scan Brute-Force
🇨🇭 4server	2026-06-04 21:23:01 (2 weeks ago)	[ThuJun0423:22:56.9048092026][security2:error][pid1875627:tid1875869][client194.5.48.208:0]ModSecuri ... show more [ThuJun0423:22:56.9048092026][security2:error][pid1875627:tid1875869][client194.5.48.208:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"xn--tirascarph-ieb.ch\"][uri\"/xmlrpc.php\"][unique_id\"aiHssDakaWc8tFMZ_Yf8VQAAAMw\"] show less	Hacking Web App Attack
Anonymous	2026-05-26 03:55:28 (3 weeks ago)	194.5.48.208 - - [26/May/2026:05:55:24 +0200] "GET /wp-includes/Text/about.php HTTP/1.1" 404 124 "-" ... show more 194.5.48.208 - - [26/May/2026:05:55:24 +0200] "GET /wp-includes/Text/about.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 194.5.48.208 - - [26/May/2026:05:55:24 +0200] "GET /wp-includes/IXR/index.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 194.5.48.208 - - [26/May/2026:05:55:25 +0200] "GET /wp-includes/ID3/index.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 194.5.48.208 - - [26/May/2026:05:55:25 +0200] "GET /wp-includes/js/index.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 194.5.48.208 - - [26/May/2026:05:55:27 +0200] "GET /wp-includes/assets/index.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" ... show less	Brute-Force Web App Attack
🇨🇭 backslash	2026-05-26 02:21:00 (3 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇨🇭 4server	2026-05-25 20:10:19 (3 weeks ago)	[MonMay2522:10:14.4767732026][security2:error][pid2305307:tid2305573][client194.5.48.208:0]ModSecuri ... show more [MonMay2522:10:14.4767732026][security2:error][pid2305307:tid2305573][client194.5.48.208:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"modules/mod_simplefileuploadv1\\\\\\\\.3\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"640\"][id\"390746\"][rev\"1\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:KnownVulnerableJoomlaSimpleFileUploadv1.3Accessblocked\"][hostname\"serverprivato.ch\"][uri\"/modules/mod_simplefileuploadv1.3/elements/filemanager.php\"][unique_id\"ahSspqvggSKzPT36s__KXQAAARI\"] show less	Hacking Web App Attack
🇦🇺 afleventoffice.com.au	2026-05-25 05:31:47 (3 weeks ago)	GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/1.1	Web App Attack
🇵🇱 lns.bz	2026-04-08 22:59:12 (2 months ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇳🇱 ipoac.nl	2026-04-08 19:44:36 (2 months ago)	2026-04-08T20:44:35.298094+01:00 ipoac.nl wordpress(-)-: Authentication failure for-from 194.5.48.20 ... show more 2026-04-08T20:44:35.298094+01:00 ipoac.nl wordpress(-)-: Authentication failure for-from 194.5.48.208 show less	Web App Attack
🇳🇱 ipoac.nl	2026-04-08 18:48:45 (2 months ago)	2026-04-08T19:48:44.225516+01:00 ipoac.nl wordpress(-)-: Authentication failure for-from 194.5.48.20 ... show more 2026-04-08T19:48:44.225516+01:00 ipoac.nl wordpress(-)-: Authentication failure for-from 194.5.48.208 show less	Web App Attack
🇺🇸 WizardsToolkit	2026-04-05 00:09:21 (2 months ago)	attempted to access	Web App Attack
🇷🇴 INTEQ	2026-04-04 21:03:04 (2 months ago)	Web attack from 194.5.48.208	Web App Attack
🇰🇿 yuki	2026-03-19 03:14:23 (3 months ago)	Blocked by UFW on homeserver [41360/tcp] • SPT: 27733, TTL: 52, LEN: 60, TOS: 0x00, PREC: 0x20 • Rep ... show more Blocked by UFW on homeserver [41360/tcp] • SPT: 27733, TTL: 52, LEN: 60, TOS: 0x00, PREC: 0x20 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 myagent.site	2026-02-04 06:39:50 (4 months ago)	Blocking for trying to access an exploit file: ///vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	Hacking
🇺🇸 myagent.site	2026-02-04 03:11:44 (4 months ago)	Blocking for trying to access an exploit file: //vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	Hacking

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.210.103

🇷🇺 213.180.203.115

🇬🇧 193.163.125.229

🇩🇪 69.5.169.238

🇩🇪 69.5.169.27

🇨🇴 200.10.29.235

🇺🇸 141.11.88.13

🇰🇷 115.178.75.242

🇹🇼 101.13.4.128

🇷🇺 94.233.248.176

🇳🇴 93.89.113.60

🇸🇬 68.178.167.214

🇮🇩 202.51.214.99

🇬🇧 193.163.125.213

🇳🇱 185.229.32.14

🇩🇪 69.5.169.213

🇲🇾 47.250.175.135

🇦🇷 45.226.229.91

🇲🇽 201.140.123.130

🇧🇷 201.26.153.219