JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

194.5.83.15

Recent Activity

Abuse Confidence Score

33% Elevated

117 reports

63 reporters · latest 5 days ago

ISP: VPN Consumer Hong Kong
Usage Type: Data Center/Web Hosting/Transit
ASN: AS137409
Domain Name: vpnconsumer.com
Country: 🇭🇰 Hong Kong
City: Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

117 from 63 distinct reporters

First reported

October 29th 2022

Most recent report

5 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 2 🇫🇷 France 1 🇮🇹 Italy 1

Most common categories Brute-Force 4 Web App Attack 3 SSH 2 Bad Web Bot 2 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-11-10 06:39:17 UTC · (5 days ago)	Scanning for web/db/file exploits on tpc-005.mach3builders.nl	SQL Injection Bad Web Bot Web App Attack
🇷🇴 SpamStopper	2026-11-10 05:44:35 UTC · (5 days ago)	Fail2Ban - WordPress Bruteforce and Badbots	Hacking Bad Web Bot
🇩🇪 dispaisyenterprises	2026-11-01 17:38:03 UTC · (1 week ago)	2026-11-01T19:37:44.026756+02:00 dedi111 sshd-session[3076313]: Invalid user hw230f8034t from 194.5.83.15 port 14010 2026-11-01T19:37:46.681891+02:00 dedi111 sshd-session[3076685]: Invalid user admin from 194.5.83.15 port 17913 2026-11-01T19:37:54.68 ... show more 2026-11-01T19:37:44.026756+02:00 dedi111 sshd-session[3076313]: Invalid user hw230f8034t from 194.5.83.15 port 14010 2026-11-01T19:37:46.681891+02:00 dedi111 sshd-session[3076685]: Invalid user admin from 194.5.83.15 port 17913 2026-11-01T19:37:54.685316+02:00 dedi111 sshd-session[3076717]: Invalid user admin from 194.5.83.15 port 10335 2026-11-01T19:37:57.324968+02:00 dedi111 sshd-session[3076719]: Invalid user admin from 194.5.83.15 port 27189 2026-11-01T19:38:02.531001+02:00 dedi111 sshd-session[3076731]: Invalid user guest from 194.5.83.15 port 53067 ... show less	Brute-Force SSH
🇳🇱 nightcoil	2026-11-01 17:35:17 UTC · (1 week ago)	2026-11-01T17:35:12.867228+00:00 edge-ams-1 sshd-session[621001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.5.83.15 2026-11-01T17:35:15.231597+00:00 edge-ams-1 sshd-session[621001]: Failed password fo ... show more 2026-11-01T17:35:12.867228+00:00 edge-ams-1 sshd-session[621001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.5.83.15 2026-11-01T17:35:15.231597+00:00 edge-ams-1 sshd-session[621001]: Failed password for invalid user hw230f8034t from 194.5.83.15 port 4830 ssh2 2026-11-01T17:35:17.175935+00:00 edge-ams-1 sshd-session[621003]: Invalid user admin from 194.5.83.15 port 27018 ... show less	Brute-Force SSH
🇫🇷 dynamix	2026-10-24 19:06:57 UTC · (3 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇮🇹 VHosting	2026-10-15 17:10:03 UTC · (4 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-08-25 14:37:16 UTC · (2 months ago)	Excessive 404/403 errors	Brute-Force
Anonymous	2026-08-20 18:28:01 UTC · (2 months ago)	194.5.83.15 - - [21/Aug/2026:02:28:00 +0800] "GET /wp-admin/setup-config.php HTTP/1.1" 301 262 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" ...	Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-08-19 17:43:25 UTC · (2 months ago)	(mod_security) mod_security (id:1000001) triggered by 194.5.83.15 (HK/Hong Kong/Kowloon/Hong Kong/-/[AS137409 GSLNETWORKS-AS-AP GSL Networks Pty LTD]): 1 in the last 86400 secs (CF_ENABLE); Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed A ... show more (mod_security) mod_security (id:1000001) triggered by 194.5.83.15 (HK/Hong Kong/Kowloon/Hong Kong/-/[AS137409 GSLNETWORKS-AS-AP GSL Networks Pty LTD]): 1 in the last 86400 secs (CF_ENABLE); Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Aug 19 20:43:22.851398 2026] [security2:error] [pid 1876547:tid 1876731] [client 194.5.83.15:28009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/db.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /wp-content/plugins/linkpreview/db.php"] [severity "CRITICAL"] [tag "security"] [hostname "setworldup.com"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aoXrOiFsynIi359Umb6HxgAABBY"] show less	Port Scan
🇫🇷 dynamix	2026-07-10 17:26:36 UTC · (4 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Ba-Yu	2026-07-10 12:49:10 UTC · (4 months ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇬🇧 consul.to	2026-06-21 01:13:31 UTC · (4 months ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 raph	2026-05-22 00:50:12 UTC · (5 months ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-21 22:01:59 UTC · (5 months ago)	Auto-ban: >3000 req/min op 2026-05-21	Web App Attack SSH Hacking
🇩🇪 BlueWire Hosting	2026-05-21 15:45:54 UTC · (5 months ago)	Bad bot ignoring robot.txt	Bad Web Bot

Showing 1 to 15 of 117 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 221.156.21.112

🇺🇸 72.11.128.35

🇳🇱 45.148.10.157

🇵🇸 213.6.216.86

🇯🇵 152.32.201.80

🇫🇮 147.185.133.172

🇨🇦 137.184.166.176

🇰🇷 125.182.93.18

🇰🇷 118.47.77.183

🇧🇩 103.172.188.26

🇳🇬 102.88.137.80

🇺🇿 89.236.230.142

🇬🇧 185.130.158.2

🇩🇪 172.104.255.10

🇺🇸 137.184.202.67

🇰🇷 121.141.6.41

🇫🇷 91.196.152.207

🇩🇪 64.226.89.43

🇳🇱 34.90.186.97

🇳🇱 164.92.147.67