JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.110.150.53

194.110.150.53 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 26%: ?

26%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.110.150.53

Whois 194.110.150.53

IP Abuse Reports for 194.110.150.53:

This IP address has been reported a total of 30 times from 18 distinct sources. 194.110.150.53 was first reported on May 26th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Oakley	2026-05-23 12:16:45 (3 weeks ago)	(mod_security) mod_security (id:900178) triggered by 194.110.150.53 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:900178) triggered by 194.110.150.53 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-05-22 13:54:37 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 194.110.150.53 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.110.150.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 09:54:30.225351 2026] [security2:error] [pid 12941:tid 12941] [client 194.110.150.53:47747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smoothiessoupssalads.com"] [uri "/wp-config.bak"] [unique_id "ahBgFodR-kIpC4hyma_7iQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 11:51:06 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 194.110.150.53 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.110.150.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 07:50:59.359519 2026] [security2:error] [pid 18892:tid 18892] [client 194.110.150.53:42479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qed-consulting.co"] [uri "/wp-config.php.old"] [unique_id "ag2gI39iSJ-ZZbey_uPfMgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 04:31:33 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 194.110.150.53 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.110.150.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 00:31:28.677751 2026] [security2:error] [pid 29026:tid 29026] [client 194.110.150.53:54831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plazahacienda.com"] [uri "/wp-config.php.orig"] [unique_id "ag05IFaqQblZtEBOfq1ecQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 LTM	2026-05-17 06:20:02 (4 weeks ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-05-16 13:45:08 (1 month ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Anonymous	2026-05-09 18:19:57 (1 month ago)	Forum/form spam	Web Spam
Anonymous	2026-05-04 08:11:46 (1 month ago)	194.110.150.53 - - [04/May/2026:16:11:45 +0800] "GET /dbadmin/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Win ... show more 194.110.150.53 - - [04/May/2026:16:11:45 +0800] "GET /dbadmin/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇨🇭 4server	2026-04-30 20:09:48 (1 month ago)	[ThuApr3022:09:41.3156012026][security2:error][pid4107202:tid4107576][client194.110.150.53:0]ModSecu ... show more [ThuApr3022:09:41.3156012026][security2:error][pid4107202:tid4107576][client194.110.150.53:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"381\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"mondo-it.ch\"][uri\"/wp-content/plugins/learnpress/readme.txt\"][unique_id\"afO3BXRkCKHvVzCgpm82QgAAAAM\"] show less	Hacking Web App Attack
Anonymous	2026-01-19 21:27:18 (4 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.19 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.19 is noted in report timestamp show less	Hacking Brute-Force
🇫🇷 masterguru	2025-12-23 11:04:29 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 194.110.150.53 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 194.110.150.53 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇨🇭 backslash	2025-11-19 14:00:51 (6 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 fbarela	2025-11-12 03:00:46 (7 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇱🇻 garmtech.com	2025-10-27 19:46:11 (7 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 Anonymous	2025-02-28 16:00:00 (1 year ago)	Brute force attack detected from 194.110.150.53	DDoS Attack Brute-Force Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.245.152.142

🇻🇳 116.99.173.97

🇺🇸 100.29.192.6

🇳🇱 93.123.109.105

🇫🇷 92.119.125.37

🇺🇸 74.208.14.169

🇭🇰 64.118.130.95

🇷🇺 62.140.234.114

🇫🇷 54.37.83.196

🇨🇳 42.100.26.29

🇺🇦 31.42.184.158

🇭🇰 24.233.3.31

🇿🇦 5.252.185.197

🇱🇻 196.196.53.14

🇨🇳 182.32.227.50

🇧🇼 168.167.228.74

🇯🇵 152.69.204.160

🇭🇰 152.32.171.99

🇨🇦 130.94.114.192

🇹🇼 125.224.22.186