JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.5.53.25

194.5.53.25 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 28%: ?

28%

ISP	VPN Consumer Paris, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.5.53.25

Whois 194.5.53.25

IP Abuse Reports for 194.5.53.25:

This IP address has been reported a total of 88 times from 54 distinct sources. 194.5.53.25 was first reported on September 24th 2021, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-20 23:30:36 (3 days ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-07-20 03:43:12 (4 days ago)	[redacted] 194.5.53.25 - - [20/Jul/2026:05:43:01 +0200] "GET /wp-admin/css/colors/blue/file.php HTTP ... show more [redacted] 194.5.53.25 - - [20/Jul/2026:05:43:01 +0200] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" [redacted] 194.5.53.25 - - [20/Jul/2026:05:43:03 +0200] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" [redacted] 194.5.53.25 - - [20/Jul/2026:05:43:04 +0200] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" [redacted] 194.5.53.25 - - [20/Jul/2026:05:43:04 +0200] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" [redacted] 194.5.53.25 - - [20/Jul/2026:05:43:04 +0200] "GET /wp-admin/index.php HTTP/1.1" 404 2 ... show less	Hacking Web App Attack
🇫🇷 dynamix	2026-07-13 11:34:10 (1 week ago)	Multiple WAF Violations	Web App Attack
🇧🇷 ICS Labs	2026-07-09 17:01:40 (2 weeks ago)	ICS Labs identified 194.5.53.25 as a malicious indicator from threat intelligence.	DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇩🇪 paissangroup	2026-06-09 10:46:38 (1 month ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Lino Project	2026-06-08 08:29:28 (1 month ago)	194.5.53.25 - - [08/Jun/2026:10:29:27 +0200] "GET /wp-admin/includes/index.php HTTP/1.1" 403 570 "-" ... show more 194.5.53.25 - - [08/Jun/2026:10:29:27 +0200] "GET /wp-admin/includes/index.php HTTP/1.1" 403 570 "-" "Go-http-client/1.1" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-06-08 07:59:18 (1 month ago)	194.5.53.25 - - [08/Jun/2026:09:59:17 +0200] "GET /wp-content/themes/builder-and-developer/inc/tgm/e ... show more 194.5.53.25 - - [08/Jun/2026:09:59:17 +0200] "GET /wp-content/themes/builder-and-developer/inc/tgm/error.php HTTP/1.1" 404 91272 "-" "Go-http-client/1.1" ... show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Inartis	2026-06-07 17:59:41 (1 month ago)	194.5.53.25 - - [07/Jun/2026:19:59:41 +0200] "GET /cgi-bin/wp-conflg.php HTTP/1.1" 302 423 "-" "Go-h ... show more 194.5.53.25 - - [07/Jun/2026:19:59:41 +0200] "GET /cgi-bin/wp-conflg.php HTTP/1.1" 302 423 "-" "Go-http-client/1.1" ... show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-05-01 09:17:04 (2 months ago)	Cloudflare WAF: Request Path: /wp-json/wp/v2/ Request Query: Host: elhacker.net userAgent: Mozilla/ ... show more Cloudflare WAF: Request Path: /wp-json/wp/v2/ Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0 Action: block Source: ratelimit ASN Description: F.N.S. HOLDINGS LIMITED Country: FR Method: GET Timestamp: 2026-05-01T09:17:04Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 ipblock.com	2026-05-01 01:26:00 (2 months ago)	IPBlock protected site ID [4055-d][s=07]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-04-30 03:30:29 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 SpaceHost-Server	2026-04-29 22:36:56 (2 months ago)		Brute-Force Web App Attack
🇲🇹 Malta	2026-04-29 13:13:51 (2 months ago)	194.5.53.25 - - [29/Apr/2026:15:13:50 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 194.5.53.25 - - [29/Apr/2026:15:13:50 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" show less	Hacking Web App Attack
🇩🇪 macrob	2026-04-29 11:08:45 (2 months ago)	2026/04/29 11:08:42 [error] 3278288#3278288: 187330752 access forbidden by rule, client: 194.5.53.2 ... show more 2026/04/29 11:08:42 [error] 3278288#3278288: 187330752 access forbidden by rule, client: 194.5.53.25, server: fastcredit.net.ua, request: "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/2.0", host: "fastcredit.net.ua" 2026/04/29 11:08:43 [error] 3278286#3278286: 187330792 access forbidden by rule, client: 194.5.53.25, server: fastcredit.net.ua, request: "GET /wp-content/plugins/semrush/x.php HTTP/2.0", host: "fastcredit.net.ua" 2026/04/29 11:08:43 [error] 3278286#3278286: 187330818 access forbidden by rule, client: 194.5.53.25, server: fastcredit.net.ua, request: "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/2.0", host: "fastcredit.net.ua" ... show less	Web App Attack
🇩🇪 LRob	2026-04-29 05:45:02 (2 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 198.244.242.74

🇺🇸 192.129.135.51

🇺🇸 142.4.15.137

🇨🇳 106.12.128.30

🇩🇪 91.217.249.10

🇫🇷 45.144.28.70

🇬🇧 45.82.76.126

🇦🇷 190.244.39.224

🇧🇷 177.125.130.64

🇫🇮 147.185.133.114

🇱🇹 81.30.98.44

🇸🇬 47.128.63.152

🇺🇸 154.223.17.178

🇭🇰 152.32.239.90

🇮🇩 152.32.154.44

🇸🇬 103.253.27.218

🇧🇩 103.158.206.18

🇮🇹 95.251.174.66

🇷🇴 92.118.39.71

🇫🇷 91.231.89.254