JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.61.40.12

194.61.40.12 was found in our database!

This IP was reported 207 times. Confidence of Abuse is 32%: ?

32%

ISP	VPN Consumer Mumbai, India
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.61.40.12

Whois 194.61.40.12

IP Abuse Reports for 194.61.40.12:

This IP address has been reported a total of 207 times from 90 distinct sources. 194.61.40.12 was first reported on October 31st 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 avaio-media	2026-05-26 06:29:20 (3 weeks ago)		Web App Attack
🇺🇸 Major Hostility	2026-05-12 07:54:39 (1 month ago)	"GET /wp-content/uploads/file.php HTTP/1.1" 404 "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1 ... show more "GET /wp-content/uploads/file.php HTTP/1.1" 404 "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 404 "GET /wp-includes/customize/dedi1.php HTTP/1.1" 404 "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 404 "GET /wp-admin/css/colors/index.php HTTP/1.1" 404 "GET /warm.PhP7 HTTP/1.1" 404 "GET /wp-admin/admin.php HTTP/1.1" 404 "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 404 "GET /blog/wp-content/about.php HTTP/1.1" 404 "GET /hehehehe.php HTTP/1.1" 404 "GET /.well-known/acme-challenge/install.php HTTP/1.1" 404 "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 404 "GET /.well-known%2 show less	Web App Attack
🇩🇪 www.Examensfragen.de	2026-05-12 07:49:16 (1 month ago)		Web Spam Bad Web Bot
🇫🇷 masterguru	2026-05-10 08:47:25 (1 month ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-195)	Hacking
🇫🇷 dynamix	2026-05-10 06:09:39 (1 month ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2026-05-09 20:40:58 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 pduggusa	2026-05-05 06:42:31 (1 month ago)	Detected attacking dugganusa.com at 2026-05-05T06:42:31.353Z \| Attack: Proxy \| Source: DugganUSA Pre ... show more Detected attacking dugganusa.com at 2026-05-05T06:42:31.353Z \| Attack: Proxy \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-05-05 05:39:53 (1 month ago)	Detected attacking dugganusa.com at 2026-05-05T05:39:53.200Z \| Attack: Proxy \| Source: DugganUSA Pre ... show more Detected attacking dugganusa.com at 2026-05-05T05:39:53.200Z \| Attack: Proxy \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-05-05 04:39:17 (1 month ago)	Detected attacking dugganusa.com at 2026-05-05T04:39:17.212Z \| Attack: Proxy \| Source: DugganUSA Pre ... show more Detected attacking dugganusa.com at 2026-05-05T04:39:17.212Z \| Attack: Proxy \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-05-05 03:39:41 (1 month ago)	Detected attacking dugganusa.com at 2026-05-05T03:39:41.468Z \| Attack: Proxy \| Source: DugganUSA Pre ... show more Detected attacking dugganusa.com at 2026-05-05T03:39:41.468Z \| Attack: Proxy \| Source: DugganUSA PreCog auto-block show less	Hacking
🇮🇳 evicky2002	2026-05-04 06:00:00 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=93, sources=3)	Hacking Brute-Force SSH
🇫🇷 Octopuce	2026-05-04 01:45:55 (1 month ago)	Aggressive web search of vulnerable pages: /tinyfilemanager/ /wp-includes/js/tinymce/utils/ /compone ... show more Aggressive web search of vulnerable pages: /tinyfilemanager/ /wp-includes/js/tinymce/utils/ /components/com_newsfeeds/models/ /.trash7309/ /wp- ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-03 18:23:45 (1 month ago)	(mod_security) mod_security (id:234930) triggered by 194.61.40.12 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:234930) triggered by 194.61.40.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 14:23:38.047975 2026] [security2:error] [pid 7832:tid 7847] [client 194.61.40.12:42227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|ahsdistance.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "ahsdistance.org"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "afeSqv1nnSyV7s7SEDP5oQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-05-03 18:09:20 (1 month ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇹🇭 MWA SOC	2026-04-29 22:24:11 (1 month ago)		Hacking

Showing 1 to 15 of 207 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.66

🇳🇱 176.65.139.36

🇷🇺 83.239.0.202

🇺🇸 66.132.224.85

🇺🇸 64.62.197.43

🇲🇽 187.174.238.116

🇺🇸 172.253.0.17

🇺🇸 138.68.243.18

🇳🇱 107.189.27.179

🇨🇳 101.227.79.195

🇫🇷 92.205.161.152

🇬🇧 35.203.211.128

🇨🇳 223.109.255.145

🇲🇦 196.117.162.137

🇷🇺 188.120.237.145

🇨🇴 143.105.99.48

🇺🇸 137.184.217.238

🇻🇳 103.163.214.149

🇩🇪 89.163.145.38

🇺🇸 66.132.186.211