JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.5.53.84

194.5.53.84 was found in our database!

This IP was reported 109 times. Confidence of Abuse is 32%: ?

32%

ISP	VPN Consumer Paris, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.5.53.84

Whois 194.5.53.84

IP Abuse Reports for 194.5.53.84:

This IP address has been reported a total of 109 times from 56 distinct sources. 194.5.53.84 was first reported on December 7th 2022, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-07-15 00:35:55 (14 hours ago)	194.5.53.84 - - [15/Jul/2026:02:35:55 +0200] "GET /wp-includes/core.php HTTP/1.1" 403 573 "-" "Go-ht ... show more 194.5.53.84 - - [15/Jul/2026:02:35:55 +0200] "GET /wp-includes/core.php HTTP/1.1" 403 573 "-" "Go-http-client/1.1" ... show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-14 21:05:55 (18 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-03 14:18:37 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.84 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 10:18:33.157051 2026] [security2:error] [pid 29545:tid 29545] [client 194.5.53.84:27101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rgvatvrepair.com"] [uri "/.git/config"] [unique_id "aiA3uZH1jMOu9-zcekXxnAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 13:39:46 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.84 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 09:39:42.754676 2026] [security2:error] [pid 15547:tid 15567] [client 194.5.53.84:22267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "epsbudgetcommittee.org"] [uri "/.git/HEAD"] [unique_id "aiAungbkKi-_mpGskkAF7AAAAIY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 13:13:31 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.84 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 09:13:28.024542 2026] [security2:error] [pid 22742:tid 22742] [client 194.5.53.84:60661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jmms.mx"] [uri "/.git/HEAD"] [unique_id "aiAoeH6H2qBGjnUDsZp34wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 12:57:57 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.84 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 08:57:49.105899 2026] [security2:error] [pid 27049:tid 27049] [client 194.5.53.84:43291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "freerein.info"] [uri "/.git/config"] [unique_id "aiAkza3ijC5qoQl2ktt37QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 12:15:38 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.84 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 08:15:33.013399 2026] [security2:error] [pid 557:tid 557] [client 194.5.53.84:39209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caribeanvacationsturs.com"] [uri "/.git/HEAD"] [unique_id "aiAa5fo9co8X0Gnl61SNdwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-03 11:06:16 (1 month ago)	Abuse Detected (4)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 10:54:04 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.84 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 06:53:56.892993 2026] [security2:error] [pid 8223:tid 8223] [client 194.5.53.84:43891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yosalvationyo.org"] [uri "/.git/config"] [unique_id "aiAHxK95f20N_93jECQeAgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-03 10:52:32 (1 month ago)	194.5.53.84 - - [03/Jun/2026:10:52:31 +0000] "GET /.git/config HTTP/1.1" 302 678 "-" "Mozilla/5.0 (X ... show more 194.5.53.84 - - [03/Jun/2026:10:52:31 +0000] "GET /.git/config HTTP/1.1" 302 678 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" ... show less	Bad Web Bot Web App Attack
🇩🇪 YF	2026-05-27 19:10:53 (1 month ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇩🇪 big-cloud.nl	2026-05-27 15:31:53 (1 month ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 ghostwarriors	2026-05-25 19:50:25 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-05-25 16:38:58 (1 month ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 194.5.53.84 (FR/France/-): 1 in the last 3600 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 194.5.53.84 (FR/France/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 194.5.53.84 - - [25/May/2026:18:38:53 +0200] "GET /style2.php HTTP/1.1" 200 11764 "-" "Go-http-client/1.1" "-" host=consac.eu show less	Port Scan
🇯🇵 HeliJP	2026-05-14 08:45:46 (2 months ago)	2026-05-14T08:35:06Z - Recognized attacks\bad behavior from IP address 194.5.53.84 on port 443\80 (1 ... show more 2026-05-14T08:35:06Z - Recognized attacks\bad behavior from IP address 194.5.53.84 on port 443\80 (14 daily hits): XSS Attack Detected via libinjection, Possible XSS Attack Detected - HTML Tag Handler, SQLi bypass attempt by ticks detected, SQL Injection Attack: SQL Tautology Detected, Detects classic SQL injection probings 2/3, XSS Filter - Category 1: Script Tag Vector, NoScript XSS InjectionChecker: HTML Injection show less	Hacking Web App Attack SQL Injection

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.66

🇮🇳 103.149.197.34

🇺🇸 44.200.63.240

🇺🇸 23.229.53.42

🇨🇳 182.118.64.225

🇺🇸 74.125.72.21

🇨🇳 60.176.235.77

🇲🇾 49.124.148.192

🇺🇸 20.163.15.96

🇯🇵 218.219.193.151

🇹🇭 203.172.213.166

🇳🇱 193.176.31.218

🇮🇳 172.198.65.198

🇧🇩 160.187.35.142

🇧🇩 103.14.129.62

🇧🇬 93.94.141.115

🇨🇳 81.71.153.211

🇺🇸 65.49.1.185

🇺🇸 44.208.159.253

🇮🇳 14.96.106.175