JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.5.48.208

194.5.48.208 was found in our database!

This IP was reported 91 times. Confidence of Abuse is 58%: ?

58%

ISP	VPN Consumer Tokyo, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.5.48.208

Whois 194.5.48.208

IP Abuse Reports for 194.5.48.208:

This IP address has been reported a total of 91 times from 63 distinct sources. 194.5.48.208 was first reported on December 10th 2024, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-06-27 02:33:40 (18 hours ago)	Excessive 404/403 errors	Brute-Force
🇳🇿 Antinson	2026-06-26 19:50:35 (1 day ago)	Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints ( ... show more Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.) show less	Bad Web Bot
🇺🇸 ambor	2026-06-26 09:48:05 (1 day ago)	Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: ... show more Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇺🇸 WeekendWeb	2026-06-26 07:26:58 (1 day ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 dtorrer	2026-06-25 06:29:05 (2 days ago)	Brute-force general attack.	Brute-Force
🇺🇸 TPI-Abuse	2026-06-25 00:28:28 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 194.5.48.208 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 194.5.48.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 20:28:22.320451 2026] [security2:error] [pid 15963:tid 16004] [client 194.5.48.208:59141] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 194.5.48.208 (+1 hits since last alert)\|darrylrichards.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "darrylrichards.com"] [uri "/xmlrpc.php"] [unique_id "ajx2Jmw6gQ-L4hL0-VYzvAAAAcY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Savoie	2026-06-17 10:54:00 (1 week ago)	194.5.48.208 www.*.* - [17/Jun/2026:12:54:30 +0200] "GET /wp-login.php HTTP/1.1" 302 250 "-" "Mo ... show more 194.5.48.208 www.*.* - [17/Jun/2026:12:54:30 +0200] "GET /wp-login.php HTTP/1.1" 302 250 "-" "Mozilla/5.0" show less	Bad Web Bot Web App Attack
Anonymous	2026-06-15 05:35:49 (1 week ago)	2026-06-15 05:35:49 warning[2588728]: host unknown[194.5.48.208]: unauthorized access atte ... show more 2026-06-15 05:35:49 warning[2588728]: host unknown[194.5.48.208]: unauthorized access attempted: tcp/9010 show less	Port Scan Brute-Force
🇨🇭 4server	2026-06-04 21:23:01 (3 weeks ago)	[ThuJun0423:22:56.9048092026][security2:error][pid1875627:tid1875869][client194.5.48.208:0]ModSecuri ... show more [ThuJun0423:22:56.9048092026][security2:error][pid1875627:tid1875869][client194.5.48.208:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"xn--tirascarph-ieb.ch\"][uri\"/xmlrpc.php\"][unique_id\"aiHssDakaWc8tFMZ_Yf8VQAAAMw\"] show less	Hacking Web App Attack
Anonymous	2026-05-26 03:55:28 (1 month ago)	194.5.48.208 - - [26/May/2026:05:55:24 +0200] "GET /wp-includes/Text/about.php HTTP/1.1" 404 124 "-" ... show more 194.5.48.208 - - [26/May/2026:05:55:24 +0200] "GET /wp-includes/Text/about.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 194.5.48.208 - - [26/May/2026:05:55:24 +0200] "GET /wp-includes/IXR/index.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 194.5.48.208 - - [26/May/2026:05:55:25 +0200] "GET /wp-includes/ID3/index.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 194.5.48.208 - - [26/May/2026:05:55:25 +0200] "GET /wp-includes/js/index.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 194.5.48.208 - - [26/May/2026:05:55:27 +0200] "GET /wp-includes/assets/index.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" ... show less	Brute-Force Web App Attack
🇨🇭 backslash	2026-05-26 02:21:00 (1 month ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇨🇭 4server	2026-05-25 20:10:19 (1 month ago)	[MonMay2522:10:14.4767732026][security2:error][pid2305307:tid2305573][client194.5.48.208:0]ModSecuri ... show more [MonMay2522:10:14.4767732026][security2:error][pid2305307:tid2305573][client194.5.48.208:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"modules/mod_simplefileuploadv1\\\\\\\\.3\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"640\"][id\"390746\"][rev\"1\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:KnownVulnerableJoomlaSimpleFileUploadv1.3Accessblocked\"][hostname\"serverprivato.ch\"][uri\"/modules/mod_simplefileuploadv1.3/elements/filemanager.php\"][unique_id\"ahSspqvggSKzPT36s__KXQAAARI\"] show less	Hacking Web App Attack
🇦🇺 afleventoffice.com.au	2026-05-25 05:31:47 (1 month ago)	GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/1.1	Web App Attack
🇵🇱 lns.bz	2026-04-08 22:59:12 (2 months ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇳🇱 ipoac.nl	2026-04-08 19:44:36 (2 months ago)	2026-04-08T20:44:35.298094+01:00 ipoac.nl wordpress(-)-: Authentication failure for-from 194.5.48.20 ... show more 2026-04-08T20:44:35.298094+01:00 ipoac.nl wordpress(-)-: Authentication failure for-from 194.5.48.208 show less	Web App Attack

Showing 1 to 15 of 91 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 165.245.218.110

🇫🇮 147.185.133.206

🇨🇳 116.207.109.18

🇰🇷 61.76.112.4

🇬🇭 41.139.12.230

🇬🇭 41.139.12.160

🇬🇧 35.203.211.24

🇺🇸 34.182.163.202

🇮🇳 122.170.111.140

🇩🇪 87.106.163.38

🇮🇷 85.198.19.244

🇲🇻 69.94.40.251

🇸🇪 51.107.188.234

🇮🇳 20.204.136.58

🇯🇵 8.216.17.84

🇺🇸 172.71.194.181

🇩🇪 152.53.87.135

🇨🇳 115.190.155.5

🇳🇱 91.92.40.41

🇷🇺 81.211.72.167