JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.110.150.198

194.110.150.198 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 18%: ?

18%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.110.150.198

Whois 194.110.150.198

IP Abuse Reports for 194.110.150.198:

This IP address has been reported a total of 17 times from 11 distinct sources. 194.110.150.198 was first reported on March 21st 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-07-03 17:32:40 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇬🇧 Oakley	2026-06-01 11:06:00 (1 month ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇨🇭 backslash	2026-05-18 10:36:01 (1 month ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-16 23:32:10 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 194.110.150.198 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 194.110.150.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 19:32:04.160667 2026] [security2:error] [pid 15433:tid 15433] [client 194.110.150.198:16337] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Lochmere II Recliner/Broughton Saddle/Thumbs.db"] [unique_id "agj-dK6yAvDbJPLlSnAq5gAAAAM"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Lochmere%20II%20Recliner/Broughton%20Saddle/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-04-16 15:33:00 (2 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-22 15:34:52 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 194.110.150.198 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 194.110.150.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 10:34:45.045038 2026] [security2:error] [pid 9276:tid 9276] [client 194.110.150.198:36853] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|omintara.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "omintara.com"] [uri "/"] [unique_id "aXJDlX5jjJltc4rufdTc3AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 04:27:00 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 194.110.150.198 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 194.110.150.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 23:26:54.463047 2025] [security2:error] [pid 29580:tid 29580] [client 194.110.150.198:25551] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|benissan.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "benissan.com"] [uri "/"] [unique_id "aTUCDtVdkbX_eIorZG0AoAAAAAs"], referer: https://www.facebook.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 pamircil	2025-09-26 10:11:12 (9 months ago)	🍯 WinnieThePooh Honeypot : GET request to '/wp-config.copy' on (http/80)💀	Hacking Brute-Force SSH
🇨🇿 lp	2025-09-09 21:25:29 (10 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.110.150.198 2025-09-09T22:57:55+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.110.150.198 2025-09-09T22:57:55+02:00 vpn Access-Reject 'assistant' station: 194.110.150.198 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-09-04 18:24:15 (10 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.110.150.198 2025-09-04T19:32:13+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.110.150.198 2025-09-04T19:32:13+02:00 vpn Access-Reject 'yumi' station: 194.110.150.198 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-08-27 21:24:32 (10 months ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 194.110.150.198 2025-08-27T22:54:52+0 ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 194.110.150.198 2025-08-27T22:54:52+02:00 vpn Access-Reject 'jaimie' station: 194.110.150.198 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-08-27T22:57:31+02:00 vpn Access-Reject 'jeraldine' station: 194.110.150.198 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 octageeks.com	2025-03-27 04:06:06 (1 year ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇦🇺 afleventoffice.com.au	2025-03-14 06:36:14 (1 year ago)	GET /wp-login.php HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2024-11-19 09:50:37 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 194.110.150.198 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 194.110.150.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 19 04:50:32.351810 2024] [security2:error] [pid 21524:tid 21544] [client 194.110.150.198:36465] [client 194.110.150.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nankerphelge.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nankerphelge.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZzxfaPNzdBk-444IoswfiwAAANI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-05-29 08:00:37 (2 years ago)	Web App Attack	Hacking Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 101.47.159.125

🇳🇱 45.198.224.120

🇧🇦 31.223.135.207

🇮🇳 223.230.3.124

🇨🇳 222.71.230.141

🇨🇳 171.15.55.136

🇮🇶 169.224.121.50

🇺🇸 162.158.244.139

🇰🇪 102.210.28.22

🇱🇧 94.187.23.219

🇹🇷 78.184.9.101

🇩🇪 69.5.169.97

🇺🇸 66.132.172.116

🇲🇽 38.49.151.90

🇸🇦 37.105.219.249

🇸🇬 20.153.140.50

🇦🇿 194.164.224.40

🇸🇦 188.49.121.81

🇺🇸 185.150.190.130

🇧🇴 181.115.138.37