JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.4.53.70

194.4.53.70 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Digital Resources Management S.L.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS211373
Domain Name	digitalrm.es
Country	🇲🇦 Morocco
City	Rabat, Rabat-Sale-Kenitra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.4.53.70

Whois 194.4.53.70

IP Abuse Reports for 194.4.53.70:

This IP address has been reported a total of 38 times from 30 distinct sources. 194.4.53.70 was first reported on August 9th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 myintarweb	2026-08-15 00:08:03 (15 hours ago)	194.4.53.70 - - [09/Aug/2026:09:21:06 +0100] 443 "GET /wp-json/wp/v2/users HTTP/1.1" 404 31008 "-" " ... show more 194.4.53.70 - - [09/Aug/2026:09:21:06 +0100] 443 "GET /wp-json/wp/v2/users HTTP/1.1" 404 31008 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" ... show less	Hacking Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-08-09 10:08:01 (6 days ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-09 09:37:35 (6 days ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇩🇪 expandmade.com	2026-08-09 08:46:40 (6 days ago)	unauthorized rest api call [09/Aug/2026:08:46:40 "GET /wp-json/wp/v2/users"]	Web App Attack
🇳🇱 Mangelot Hosting	2026-08-09 08:33:59 (6 days ago)	(wp_user_enum) srv104 WordPress User Enumeration 194.4.53.70 (MA/Morocco/-): 8 in the last 3600 secs ... show more (wp_user_enum) srv104 WordPress User Enumeration 194.4.53.70 (MA/Morocco/-): 8 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇮🇹 CoreTech srl	2026-08-09 08:33:57 (6 days ago)	cloudlinux2 fail2ban: 2026-08-09 10:28:46,651 fail2ban.filter [1775]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-09 10:28:46,651 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 102.98.66.12 - 2026-08-09 10:28:46cloudlinux2 fail2ban: 2026-08-09 10:30:31,012 fail2ban.actions [1775]: NOTICE [plesk-modsecurity] Unban 136.117.1.236cloudlinux2 fail2ban: 2026-08-09 10:30:28,051 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 93.86.237.200 - 2026-08-09 10:30:28cloudlinux2 fail2ban: 2026-08-09 10:30:48,262 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 194.4.53.70 - 2026-08-09 10:30:48cloudlinux2 fail2ban: 2026-08-09 10:31:00,301 fail2ban.filter [1775]: INFO [plesk-wordpress] Found 45.131.193.107 - 2026-08-09 10:30:59cloudlinux2 fail2ban: 2026-08-09 10:31:10,210 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 93.86.237.200 - 2026-08-09 10:31:10cloudlinux2 fail2ban: 2026-08-09 10:31:41,819 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 93.86.237.200 - 2026-08-09 10:31:41cloudlinux2 fail2ban: show less	Web App Attack
🇳🇱 JCB	2026-08-09 08:29:00 (6 days ago)	194.4.53.70 - - [09/Aug/2026:11:10:55 +0300] "GET /wp-json/wp/v2/users HTTP/1.1" 404 236 "-" "Mozill ... show more 194.4.53.70 - - [09/Aug/2026:11:10:55 +0300] "GET /wp-json/wp/v2/users HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" show less	Web App Attack
🇦🇺 Bay13	2026-08-09 08:24:44 (6 days ago)	CrowdSec:custom/http-sensitive-files	Web App Attack
🇬🇧 gurnip	2026-08-09 08:22:40 (6 days ago)	Vulnerability probe of page /wp-json/wp/v2/users, not found on server.	Brute-Force Web App Attack
🇬🇧 myintarweb	2026-08-09 08:21:07 (6 days ago)	194.4.53.70 - - [09/Aug/2026:09:21:06 +0100] 443 "GET /wp-json/wp/v2/users HTTP/1.1" 404 31008 "-" " ... show more 194.4.53.70 - - [09/Aug/2026:09:21:06 +0100] 443 "GET /wp-json/wp/v2/users HTTP/1.1" 404 31008 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-09 08:11:54 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 194.4.53.70 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 194.4.53.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 09 04:11:50.185456 2026] [security2:error] [pid 242159:tid 242159] [client 194.4.53.70:21001] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.jrpiano.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jrpiano.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ang2Rtis7Upijwqx8-_WrAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-08-09 08:08:13 (6 days ago)	Too many Status 40X (14)	Brute-Force Web App Attack
🇳🇱 MM-bot	2026-08-09 08:03:26 (6 days ago)	URL-probe: HTTP/1.1 GET request on /wp-json/wp/v2/users (2026-08-09 10:03:26 UTC+2)	Web App Attack Hacking
Anonymous	2026-08-09 07:45:47 (6 days ago)	[server.tmg.gr] httpd-suspicious-path: sites=www.aidshep2017.gr,www.aidshep2024.gr; logs=/var/log/ht ... show more [server.tmg.gr] httpd-suspicious-path: sites=www.aidshep2017.gr,www.aidshep2024.gr; logs=/var/log/httpd/domains/aidshep2017.gr.log,/var/log/httpd/domains/aidshep2024.gr.log; samples=/wp-json/wp/v2/users show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-09 07:42:19 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 194.4.53.70 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 194.4.53.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 09 03:42:13.082637 2026] [security2:error] [pid 626608:tid 626608] [client 194.4.53.70:14669] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|wisconsinstatehuntingexpo.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wisconsinstatehuntingexpo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "angvVZSQ6PQ97FZ5oAHnCAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 200.77.172.159

🇮🇷 185.147.161.216

🇰🇷 141.101.84.136

🇨🇳 113.25.249.100

🇿🇦 105.224.26.170

🇷🇺 88.147.174.51

🇫🇮 147.185.133.244

🇺🇸 142.111.152.14

🇩🇪 57.131.131.18

🇷🇺 37.252.19.172

🇧🇪 34.156.156.224

🇵🇹 185.228.3.77

🇩🇪 167.94.146.60

🇸🇬 103.187.147.214

🇫🇷 91.231.89.26

🇳🇱 91.92.40.233

🇺🇸 40.124.186.101

🇰🇷 1.237.156.72

🇷🇺 217.118.78.94

🇹🇬 196.171.94.17