JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.110.150.58

194.110.150.58 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.110.150.58

Whois 194.110.150.58

IP Abuse Reports for 194.110.150.58:

This IP address has been reported a total of 19 times from 12 distinct sources. 194.110.150.58 was first reported on September 19th 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2026-03-25 19:54:24 (2 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 194.110.150.58 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 194.110.150.58 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 17:56:36 (3 months ago)	(mod_security) mod_security (id:210350) triggered by 194.110.150.58 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 194.110.150.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 12:56:27.370873 2026] [security2:error] [pid 28186:tid 28186] [client 194.110.150.58:60795] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.teapartytaxes.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.teapartytaxes.com"] [uri "/"] [unique_id "aZyUy7XzVyDjK4qIsL1tfwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tilellit.pro	2026-02-13 21:54:26 (4 months ago)	Fail2Ban banned 194.110.150.58 for security violations in jail wp-armour. Log: 2026/02/13 21:54:26 [ ... show more Fail2Ban banned 194.110.150.58 for security violations in jail wp-armour. Log: 2026/02/13 21:54:26 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 194.110.150.58 \| Target: wplogin" , client: 194.110.150.58, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇱🇻 garmtech.com	2026-01-27 15:47:44 (4 months ago)	IM360 WAF: Attempt to upload malware	Hacking
Anonymous	2025-12-24 21:35:45 (5 months ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2025-10-20 07:05:43 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 194.110.150.58 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 194.110.150.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 20 03:05:35.796155 2025] [security2:error] [pid 14753:tid 14753] [client 194.110.150.58:24343] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|raynernet.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "raynernet.com"] [uri "/"] [unique_id "aPXfP6BrSP_Nbj1UHfiPBQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-06 20:30:16 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 194.110.150.58 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 194.110.150.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 16:30:13.288987 2025] [security2:error] [pid 22156:tid 22156] [client 194.110.150.58:49725] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Darcy/Thumbs.db"] [unique_id "aLyZ1Y1Sr4rvR7mmv7S_7gAAAAc"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Darcy/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-06-19 04:40:09 (1 year ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
Anonymous	2024-12-21 18:19:30 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force
Anonymous	2024-12-17 12:35:21 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force
Anonymous	2024-12-16 01:54:58 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force
Anonymous	2024-10-10 10:25:24 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
🇨🇦 wil.com	2024-09-25 08:22:16 (1 year ago)	GlobalProtect login attempts with user sstewart.	VPN IP Brute-Force
🇺🇸 TPI-Abuse	2024-08-07 18:06:23 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 194.110.150.58 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 194.110.150.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 07 14:06:16.703058 2024] [security2:error] [pid 27712:tid 27712] [client 194.110.150.58:59773] [client 194.110.150.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Lectern II/Brighton Chocolate/originals/Thumbs.db"] [unique_id "ZrO3mImeq_xOXUTKYCTmaAAAAAQ"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Lectern%20II/Brighton%20Chocolate/originals/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-06-30 15:11:00 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.150

🇭🇰 114.111.52.109

🇺🇸 66.132.172.196

🇧🇷 205.210.31.130

🇺🇸 162.216.149.61

🇺🇸 153.66.115.13

🇷🇴 141.98.83.240

🇧🇳 118.103.253.188

🇭🇰 101.36.122.186

🇰🇿 95.58.255.251

🇳🇱 77.83.39.10

🇺🇸 72.167.51.251

🇱🇹 45.227.254.170

🇬🇧 35.203.210.123

🇳🇱 31.14.32.8

🇩🇪 209.50.184.204

🇲🇽 177.248.37.31

🇭🇰 172.253.6.29

🇸🇬 172.216.169.248

🇩🇿 154.253.149.232