JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.5.53.88

194.5.53.88 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 28%: ?

28%

ISP	VPN Consumer Paris, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.5.53.88

Whois 194.5.53.88

IP Abuse Reports for 194.5.53.88:

This IP address has been reported a total of 76 times from 45 distinct sources. 194.5.53.88 was first reported on December 17th 2022, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 nzhost.co.nz	2026-07-03 08:13:11 (3 days ago)	$f2bV_matches	Hacking Brute-Force
Anonymous	2026-07-01 04:33:34 (5 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 threatintelligence_bvc	2026-06-10 16:23:18 (3 weeks ago)		Brute-Force
🇺🇸 TPI-Abuse	2026-06-03 16:06:05 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.88 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:05:59.793420 2026] [security2:error] [pid 992:tid 992] [client 194.5.53.88:26487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wagsgrooming.com"] [uri "/.git/HEAD"] [unique_id "aiBQ56YGLT8GD5CMrxi4QgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 14:52:49 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.88 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 10:52:45.449962 2026] [security2:error] [pid 4419:tid 4419] [client 194.5.53.88:34431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ctrussell.us"] [uri "/.git/HEAD"] [unique_id "aiA_vdxGph3qV46pZNLYFAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 14:06:57 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.88 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 10:06:52.219986 2026] [security2:error] [pid 7204:tid 7204] [client 194.5.53.88:29049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sanjuangrange.org"] [uri "/.git/HEAD"] [unique_id "aiA0_Hc80uo-N0b5F4NVtwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 12:58:26 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.88 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 08:58:21.415545 2026] [security2:error] [pid 23419:tid 23419] [client 194.5.53.88:37081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "freerein.info"] [uri "/.git/"] [unique_id "aiAk7TDPuioenHsR4RuPwwAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 12:29:13 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.88 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 08:29:05.917668 2026] [security2:error] [pid 23594:tid 23594] [client 194.5.53.88:52129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomorrowsdust.net"] [uri "/.git/HEAD"] [unique_id "aiAeETGJy7EGRgyTTlgJsgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 12:04:47 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.88 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 08:04:40.231498 2026] [security2:error] [pid 2614:tid 2614] [client 194.5.53.88:49205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "personalizedfavorribbon.com"] [uri "/.git/HEAD"] [unique_id "aiAYWG3CP-HvHzd9-BAqDQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-03 11:05:20 (1 month ago)	Abuse Detected (4)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 10:39:00 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.5.53.88 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 194.5.53.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 06:38:53.786050 2026] [security2:error] [pid 3909:tid 3909] [client 194.5.53.88:50487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icoinedthewordironesty.com"] [uri "/.git/"] [unique_id "aiAEPQ4KF20MK6jPcqh5QwAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 YF	2026-05-27 19:10:57 (1 month ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇩🇪 sledzik1984	2026-05-06 03:12:19 (2 months ago)	194.5.53.88 - - [06/May/2026:05:12:17 +0200] "GET /.wp/wso.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (W ... show more 194.5.53.88 - - [06/May/2026:05:12:17 +0200] "GET /.wp/wso.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.88 - - [06/May/2026:05:12:18 +0200] "GET /update/f35.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.88 - - [06/May/2026:05:12:19 +0200] "GET /wp-content/hello.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-04-19 00:10:22 (2 months ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (14/60 min)'; Requests=14	Port Scan
🇳🇱 Site.eu	2026-04-18 16:04:04 (2 months ago)	Excessive 404/403 errors	Brute-Force

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.189

🇪🇸 196.196.150.5

🇧🇴 190.181.25.210

🇺🇸 162.216.150.143

🇳🇱 134.122.54.43

🇨🇳 112.48.92.90

🇷🇺 81.177.101.45

🇿🇦 41.185.8.187

🇺🇸 162.216.150.254

🇮🇳 161.118.169.38

🇮🇶 150.228.105.168

🇮🇳 125.21.59.218

🇫🇷 85.217.140.43

🇧🇷 205.210.31.236

🇵🇭 203.160.191.54

🇭🇰 199.45.155.103

🇳🇱 161.35.155.10

🇺🇸 100.55.63.254

🇺🇸 92.119.19.57

🇨🇿 92.62.233.214