JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.5.49.238

194.5.49.238 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 59%: ?

59%

ISP	VPN Consumer Berlin, Germany
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.5.49.238

Whois 194.5.49.238

IP Abuse Reports for 194.5.49.238:

This IP address has been reported a total of 25 times from 20 distinct sources. 194.5.49.238 was first reported on April 21st 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 David Koswari	2026-10-23 05:14:00 (10 hours ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇦🇱 router.al	2026-10-22 03:58:17 (1 day ago)	10/22/2026-03:58:16.900325 194.5.49.238 Protocol: 6 GPL WEB_SERVER 403 Forbidden	Port Scan
🇫🇷 cityhunter_rhone	2026-10-22 01:20:04 (1 day ago)	Mercurius trap auto report \| source=APACHE_DENIED_AGGREGATE \| last_seen=2026-10-22 03:17:03 \| hits_4 ... show more Mercurius trap auto report \| source=APACHE_DENIED_AGGREGATE \| last_seen=2026-10-22 03:17:03 \| hits_403=1 \| hits_404=0 \| ip=194.5.49.238 \| sample_uri=/intro.php show less	Port Scan Hacking Web App Attack
🇺🇸 Charlesiv	2026-10-22 00:07:20 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 212238 (Datacamp Limited ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 212238 (Datacamp Limited) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-10-21T23:36:42Z Ray ID: a4e416035b1bf6dc UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇮 as211431.net	2026-10-21 21:21:03 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 sonot	2026-10-21 21:13:15 (1 day ago)	Blocked by UFW on mail [80/tcp] \| SPT: 43839 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github.c ... show more Blocked by UFW on mail [80/tcp] \| SPT: 43839 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 masterguru	2026-10-21 19:13:04 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 194.5.49.238 (DE/Germany/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 194.5.49.238 (DE/Germany/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 gerensat	2026-10-12 19:08:10 (1 week ago)	2026-10-12 16:08:09 \| / \| [] \| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (K ... show more 2026-10-12 16:08:09 \| / \| [] \| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 show less	Web App Attack
🇺🇸 gerensat	2026-10-12 18:37:46 (1 week ago)	2026-10-12 15:37:46 \| / \| [] \| Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Fi ... show more 2026-10-12 15:37:46 \| / \| [] \| Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0 show less	Web App Attack
🇺🇸 etu brutus	2026-10-12 18:37:34 (1 week ago)	194.5.49.238 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
Anonymous	2026-09-26 12:06:49 (3 weeks ago)	automatically banned	Brute-Force Web App Attack
🇳🇱 tr1n	2026-09-21 21:18:03 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| ASN: 212238 (Datacamp ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| ASN: 212238 (Datacamp Limited) \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| Timestamp: 2026-09-21T21:18:03Z \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇮 as211431.net	2026-09-21 18:03:18 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Bedios GmbH	2026-07-04 12:21:44 (3 months ago)	Login credentials theft attempt	Hacking
🇺🇸 omc	2026-05-26 12:06:06 (4 months ago)	GET /xmlrpc.php [Q4].	Bad Web Bot

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇹 213.225.7.250

🇳🇱 195.178.110.217

🇨🇳 119.96.173.169

🇧🇩 103.204.211.140

🇬🇧 64.205.72.148

🇩🇪 23.132.164.164

🇺🇿 213.230.93.85

🇰🇷 211.178.165.251

🇺🇸 209.209.59.230

🇵🇪 200.123.229.211

🇫🇷 194.99.26.50

🇭🇰 156.225.1.71

🇭🇰 114.111.53.214

🇮🇩 103.155.47.50

🇨🇮 102.203.41.75

🇮🇳 66.116.224.129

🇩🇪 23.132.164.148

🇺🇸 20.163.58.216

🇺🇸 18.212.223.42

🇨🇳 14.103.117.81