JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.61.40.126

194.61.40.126 was found in our database!

This IP was reported 148 times. Confidence of Abuse is 30%: ?

30%

ISP	VPN Consumer Mumbai, India
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.61.40.126

Whois 194.61.40.126

IP Abuse Reports for 194.61.40.126:

This IP address has been reported a total of 148 times from 65 distinct sources. 194.61.40.126 was first reported on October 31st 2023, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Octopuce	2026-07-23 03:53:24 (6 days ago)	Aggressive web search of vulnerable pages: /wp-login.php /wp-includes/assets/info.php /wp-includes/c ... show more Aggressive web search of vulnerable pages: /wp-login.php /wp-includes/assets/info.php /wp-includes/class.api.php /wp-admin/chosen.php /autoload ... show less	Web App Attack
🇬🇧 consul.to	2026-07-22 22:57:29 (6 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 WizardsToolkit	2026-07-22 01:35:55 (1 week ago)	attempted to access	Web App Attack
🇨🇭 Origon	2026-06-30 03:49:24 (4 weeks ago)	http-wordpress-scan - IP: 194.61.40.126 - time="2026-06-30T05:49:23+02:00" level=info msg="(555f66b ... show more http-wordpress-scan - IP: 194.61.40.126 - time="2026-06-30T05:49:23+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress-scan by ip 194.61.40.126 (NL/137409) : 4h ban on Ip 194.61.40.126" module=db show less	Web App Attack
🇬🇧 Yosi	2026-06-30 03:46:37 (4 weeks ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇦🇺 aranguren.org	2026-06-02 07:49:29 (1 month ago)	194.61.40.126 - - [02/Jun/2026:17:49:26 +1000] "GET /natural.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 ( ... show more 194.61.40.126 - - [02/Jun/2026:17:49:26 +1000] "GET /natural.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.40.126 - - [02/Jun/2026:17:49:27 +1000] "GET /item.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.40.126 - - [02/Jun/2026:17:49:27 +1000] "GET /function/function.php HTTP/1.1" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.40.126 - - [02/Jun/2026:17:49:27 +1000] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.40.126 - - [02/Jun/2026:17:49:27 +1000] "GET /wp-admin/images/admin.php HTTP/1.1" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) A ... show less	Bad Web Bot
Anonymous	2026-05-23 06:50:17 (2 months ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 194 ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 194.61.40.126 (IN/India/-) show less	Brute-Force
🇫🇷 Octopuce	2026-05-19 23:06:25 (2 months ago)	Aggressive web search of vulnerable pages: /wp-includes/images/autoload_classmap.php /wp-includes/ID ... show more Aggressive web search of vulnerable pages: /wp-includes/images/autoload_classmap.php /wp-includes/ID3/wp-conflg.php /wp-admin/theme-editor.php ... show less	Web App Attack
🇫🇷 masterguru	2026-05-19 09:22:30 (2 months ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-197)	Hacking
Anonymous	2026-04-25 12:05:40 (3 months ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (177/60 min)'; Requests=177	Port Scan
🇺🇦 URAN Publishing Service	2026-04-24 18:44:08 (3 months ago)	194.61.40.126 - - [24/Apr/2026:21:44:06 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 404 706 ... show more 194.61.40.126 - - [24/Apr/2026:21:44:06 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 404 706 "-" "Go-http-client/1.1" 194.61.40.126 - - [24/Apr/2026:21:44:07 +0300] "GET /wp-admin/fmadmin.php HTTP/1.1" 404 706 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇫🇷 rellik	2026-04-24 16:21:00 (3 months ago)	Mass Scanning Critical Files, Potential Part of BotNet	Hacking DDoS Attack Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-20 10:06:56 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 194.61.40.126 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 194.61.40.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 06:06:48.963504 2026] [security2:error] [pid 3122464:tid 3122464] [client 194.61.40.126:52323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "family.hatfulofrain.com"] [uri "/.git/execute.php"] [unique_id "aeX6uFbDntiR3VnU5KMPjQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-04-19 04:40:27 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇭 zynex	2026-04-18 05:17:01 (3 months ago)	URL Probing: /wp-includes/admin-bar-decryption.php	Web App Attack

Showing 1 to 15 of 148 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 31.14.254.70

🇺🇸 216.73.217.55

🇧🇷 177.22.44.30

🇩🇪 165.154.164.79

🇺🇸 162.216.149.240

🇺🇸 162.216.149.39

🇺🇸 162.214.22.174

🇺🇸 146.190.164.28

🇺🇸 104.22.64.57

🇫🇷 85.217.140.35

🇳🇱 84.105.229.48

🇰🇷 220.95.208.142

🇺🇸 184.105.247.204

🇵🇪 179.49.159.16

🇵🇱 176.53.159.197

🇳🇱 91.92.40.217

🇩🇪 69.5.169.125

🇩🇪 69.5.169.25

🇳🇱 45.148.10.141

🇺🇸 2a09:bac5:9443:1b37::2b6:39