JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.5.53.162

194.5.53.162 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 34%: ?

34%

ISP	VPN Consumer Paris, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.5.53.162

Whois 194.5.53.162

IP Abuse Reports for 194.5.53.162:

This IP address has been reported a total of 79 times from 37 distinct sources. 194.5.53.162 was first reported on January 22nd 2023, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-06-26 05:09:26 (1 hour ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 20:54:48 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.162 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 16:54:29.933693 2026] [security2:error] [pid 26436:tid 26436] [client 194.5.53.162:58811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.45"] [uri "/.env.test"] [unique_id "ajhPhewNWjvfAexchPB3eAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-06-21 17:02:34 (4 days ago)	Web exploit or injection attempt blocked by ModSecurity WAF.	SQL Injection Web App Attack
🇬🇧 consul.to	2026-06-09 14:41:48 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-07 12:46:14 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-06 19:48:43 (2 weeks ago)	194.5.53.162 - - [06/Jun/2026:22:48:42 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1. ... show more 194.5.53.162 - - [06/Jun/2026:22:48:42 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 404 708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.162 - - [06/Jun/2026:22:48:42 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 404 708 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" ... show less	Web App Attack
🇬🇧 consul.to	2026-06-04 15:11:36 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇮 YF	2026-04-27 23:01:47 (1 month ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇬🇧 consul.to	2026-04-25 08:34:54 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-04-21 22:05:11 (2 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-21 08:32:24 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.162 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 04:32:17.622966 2026] [security2:error] [pid 1153034:tid 1153034] [client 194.5.53.162:36125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "littlehornengineering.com"] [uri "/.git/execute.php"] [unique_id "aec2ER0xob0VmS-xwYGgSwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-20 22:03:57 (2 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-04-18 00:00:37 (2 months ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-04-12 18:05:00 (2 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: WordPress scanning, Webshell probing, Backup file probing show less	Bad Web Bot Web App Attack
Anonymous	2026-04-11 17:07:34 (2 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 188.240.59.37

🇬🇧 45.82.76.107

🇬🇧 194.50.235.137

🇨🇳 114.92.197.111

🇮🇷 89.42.209.10

🇫🇷 85.217.140.34

🇳🇱 80.82.77.202

🇸🇨 45.194.67.30

🇺🇸 20.14.74.238

🇰🇿 188.0.144.126

🇦🇷 186.148.224.83

🇯🇵 162.43.120.162

🇮🇳 117.195.165.164

🇮🇪 98.71.8.129

🇳🇱 91.92.40.10

🇬🇧 89.37.172.153

🇫🇷 85.204.70.104

🇷🇴 80.94.95.211

🇺🇸 74.125.17.187

🇳🇿 45.133.7.142