JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.110.150.53

194.110.150.53 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 24%: ?

24%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.110.150.53

Whois 194.110.150.53

IP Abuse Reports for 194.110.150.53:

This IP address has been reported a total of 30 times from 18 distinct sources. 194.110.150.53 was first reported on May 26th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Oakley	2026-05-23 12:16:45 (3 weeks ago)	(mod_security) mod_security (id:900178) triggered by 194.110.150.53 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:900178) triggered by 194.110.150.53 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-05-22 13:54:37 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 194.110.150.53 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.110.150.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 09:54:30.225351 2026] [security2:error] [pid 12941:tid 12941] [client 194.110.150.53:47747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smoothiessoupssalads.com"] [uri "/wp-config.bak"] [unique_id "ahBgFodR-kIpC4hyma_7iQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 11:51:06 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 194.110.150.53 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.110.150.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 07:50:59.359519 2026] [security2:error] [pid 18892:tid 18892] [client 194.110.150.53:42479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qed-consulting.co"] [uri "/wp-config.php.old"] [unique_id "ag2gI39iSJ-ZZbey_uPfMgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 04:31:33 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 194.110.150.53 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.110.150.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 00:31:28.677751 2026] [security2:error] [pid 29026:tid 29026] [client 194.110.150.53:54831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plazahacienda.com"] [uri "/wp-config.php.orig"] [unique_id "ag05IFaqQblZtEBOfq1ecQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 LTM	2026-05-17 06:20:02 (1 month ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-05-16 13:45:08 (1 month ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Anonymous	2026-05-09 18:19:57 (1 month ago)	Forum/form spam	Web Spam
Anonymous	2026-05-04 08:11:46 (1 month ago)	194.110.150.53 - - [04/May/2026:16:11:45 +0800] "GET /dbadmin/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Win ... show more 194.110.150.53 - - [04/May/2026:16:11:45 +0800] "GET /dbadmin/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇨🇭 4server	2026-04-30 20:09:48 (1 month ago)	[ThuApr3022:09:41.3156012026][security2:error][pid4107202:tid4107576][client194.110.150.53:0]ModSecu ... show more [ThuApr3022:09:41.3156012026][security2:error][pid4107202:tid4107576][client194.110.150.53:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"381\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"mondo-it.ch\"][uri\"/wp-content/plugins/learnpress/readme.txt\"][unique_id\"afO3BXRkCKHvVzCgpm82QgAAAAM\"] show less	Hacking Web App Attack
Anonymous	2026-01-19 21:27:18 (4 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.19 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.19 is noted in report timestamp show less	Hacking Brute-Force
🇫🇷 masterguru	2025-12-23 11:04:29 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 194.110.150.53 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 194.110.150.53 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇨🇭 backslash	2025-11-19 14:00:51 (7 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 fbarela	2025-11-12 03:00:46 (7 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇱🇻 garmtech.com	2025-10-27 19:46:11 (7 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 Anonymous	2025-02-28 16:00:00 (1 year ago)	Brute force attack detected from 194.110.150.53	DDoS Attack Brute-Force Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.12

🇫🇮 178.20.210.208

🇨🇳 218.4.156.254

🇱🇹 216.132.188.45

🇺🇸 195.184.76.180

🇮🇹 188.219.104.210

🇳🇱 45.148.10.141

🇺🇸 20.124.91.8

🇫🇷 2001:41d0:33a:a00::408

🇵🇱 172.69.155.222

🇺🇸 162.216.149.253

🇨🇳 117.72.67.13

🇱🇹 81.30.98.158

🇺🇸 45.61.57.108

🇧🇷 20.206.64.115

🇬🇧 2a06:4880:2000::40

🇺🇸 205.210.31.109

🇩🇪 167.94.146.32

🇰🇷 101.79.17.244

🇺🇸 64.225.17.162