JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.5.53.113

194.5.53.113 was found in our database!

This IP was reported 105 times. Confidence of Abuse is 29%: ?

29%

ISP	VPN Consumer Paris, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.5.53.113

Whois 194.5.53.113

IP Abuse Reports for 194.5.53.113:

This IP address has been reported a total of 105 times from 56 distinct sources. 194.5.53.113 was first reported on December 10th 2020, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-07-15 00:32:56 (2 days ago)	194.5.53.113 - - [15/Jul/2026:02:32:55 +0200] "GET /wp-includes/woocommerce-call.php HTTP/1.1" 403 5 ... show more 194.5.53.113 - - [15/Jul/2026:02:32:55 +0200] "GET /wp-includes/woocommerce-call.php HTTP/1.1" 403 573 "-" "Go-http-client/1.1" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-01 04:33:34 (2 weeks ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 mnsf	2026-06-03 15:05:04 (1 month ago)	Abuse Detected (4)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 14:11:30 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.113 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 10:11:22.169395 2026] [security2:error] [pid 8519:tid 8558] [client 194.5.53.113:47719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "slicebible.org"] [uri "/.git/"] [unique_id "aiA2ChejY9tJllTopho0PQAAAYo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 13:32:49 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.113 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 09:32:45.316905 2026] [security2:error] [pid 1842:tid 1842] [client 194.5.53.113:63839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twccsolutions.com"] [uri "/.git/config"] [unique_id "aiAs_YF9f727I0psyjPSRwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 INTEQ	2026-06-03 13:05:37 (1 month ago)	Web attack from 194.5.53.113	Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 12:29:21 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.113 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 08:29:16.811349 2026] [security2:error] [pid 21573:tid 21573] [client 194.5.53.113:35649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "talkingmess.com"] [uri "/.git/HEAD"] [unique_id "aiAeHFF31__2VQogxWgzTgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 11:11:36 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.113 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 07:11:30.444856 2026] [security2:error] [pid 32591:tid 32591] [client 194.5.53.113:48487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blindshine.com"] [uri "/.git/HEAD"] [unique_id "aiAL4vjmhtG8SfxBHKU3eAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-06-03 10:50:04 (1 month ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 10:30:25 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.113 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 06:30:17.925821 2026] [security2:error] [pid 18892:tid 18892] [client 194.5.53.113:33611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doctorspainmanagement.com"] [uri "/.git/config"] [unique_id "aiACOZF6TSROcd_UXxaStwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-03 10:20:56 (1 month ago)	Fail2Ban triggered	Web App Attack
🇩🇪 YF	2026-05-27 19:10:32 (1 month ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-05-19 03:22:05 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.113 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 23:21:54.892886 2026] [security2:error] [pid 7553:tid 7553] [client 194.5.53.113:34615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "redtraffic.media"] [uri "/prod/.env"] [unique_id "agvXUiSqV6yKkBW8FzzyPQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-19 00:09:36 (2 months ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (19/60 min)'; Requests=19	Port Scan
🇨🇭 zynex	2026-04-18 21:15:28 (2 months ago)	URL Probing: /tiny.php	Web App Attack

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 104.28.254.47

🇺🇸 47.253.226.114

🇨🇦 20.104.112.195

🇺🇸 208.67.219.93

🇺🇸 205.210.31.76

🇳🇱 195.178.110.30

🇸🇬 167.172.89.248

🇵🇭 112.208.74.97

🇫🇷 91.196.152.221

🇺🇸 85.239.151.34

🇺🇸 47.251.25.74

🇱🇻 46.183.221.210

🇱🇹 45.227.254.170

🇸🇪 45.91.171.156

🇸🇬 43.159.51.6

🇨🇦 20.104.50.116

🇳🇴 20.100.198.19

🇳🇴 20.100.175.1

🇯🇵 8.216.48.124

🇧🇷 191.232.233.136