JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.180.232.11

194.180.232.11 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 38%: ?

38%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.180.232.11

Whois 194.180.232.11

IP Abuse Reports for 194.180.232.11:

This IP address has been reported a total of 25 times from 17 distinct sources. 194.180.232.11 was first reported on June 2nd 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-06-04 14:34:40 (6 days ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-34.194.180.232.11.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-34.194.180.232.11.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇬🇧 Oakley	2026-05-28 15:19:51 (1 week ago)	(mod_security) mod_security (id:900177) triggered by 194.180.232.11 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:900177) triggered by 194.180.232.11 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇩🇪 Hans Wurst	2026-05-26 23:14:00 (2 weeks ago)	Many 404-Error: Suspicion of URL-Fuzzing/Bot-Scan.	Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 21:22:03 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 194.180.232.11 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.180.232.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 17:21:56.648665 2026] [security2:error] [pid 20497:tid 20497] [client 194.180.232.11:56545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bosdkbook.com"] [uri "/wp-config.php.orig"] [unique_id "ag4l9Aob4t0DVQNzd_7GxwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 18:53:41 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 194.180.232.11 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.180.232.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 14:53:34.836603 2026] [security2:error] [pid 5426:tid 5540] [client 194.180.232.11:15027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "east-lease.com"] [uri "/wp-config.php.orig"] [unique_id "ag4DLtgl061utoxsLOMr-QAAAhU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 12:43:03 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 194.180.232.11 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.180.232.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:42:56.377927 2026] [security2:error] [pid 14954:tid 14954] [client 194.180.232.11:57989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.store.newmooncafe.com"] [uri "/wp-config.php.dist"] [unique_id "ag2sUG3ng4QtTZ2o9B8CkAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-05-16 09:44:23 (3 weeks ago)	paulshipley.info:443 194.180.232.11 - - [16/May/2026:19:44:22 +1000] "GET /?author=1 HTTP/1.1" 404 3 ... show more paulshipley.info:443 194.180.232.11 - - [16/May/2026:19:44:22 +1000] "GET /?author=1 HTTP/1.1" 404 3681 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" ... show less	Web App Attack
🇲🇽 ygb	2026-05-15 22:50:36 (3 weeks ago)	Blocked at layer 3 after 1 attempts	Web App Attack
🇩🇪 LRob.fr	2026-05-14 18:00:09 (3 weeks ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇩🇪 LRob.fr	2026-05-14 17:30:05 (3 weeks ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇬🇧 Oakley	2026-05-08 01:36:21 (1 month ago)	(mod_security) mod_security (id:900209) triggered by 194.180.232.11 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:900209) triggered by 194.180.232.11 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇨🇭 4server	2026-04-30 20:09:43 (1 month ago)	[ThuApr3022:09:39.8589072026][security2:error][pid4107206:tid4107958][client194.180.232.11:0]ModSecu ... show more [ThuApr3022:09:39.8589072026][security2:error][pid4107206:tid4107958][client194.180.232.11:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"381\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"mondo-it.ch\"][uri\"/wp-content/plugins/wpforms-lite/readme.txt\"][unique_id\"afO3A5baoKfgp5qd3XlNHAAAAEQ\"] show less	Hacking Web App Attack
🇫🇷 masterguru	2026-04-16 16:13:39 (1 month ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)	Hacking
🇺🇸 octageeks.com	2026-04-12 04:06:34 (1 month ago)	Wordpress malicious attack:[octawp]	Web App Attack
Anonymous	2026-03-18 10:26:09 (2 months ago)	Aggressive web scan	Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.40.215.162

🇧🇷 187.16.97.90

🇨🇦 85.217.149.36

🇧🇷 34.95.213.197

🇺🇸 20.127.195.254

🇳🇱 195.133.24.182

🇬🇧 193.163.125.205

🇩🇪 157.230.101.170

🇧🇪 146.148.5.239

🇺🇸 143.244.182.86

🇮🇳 122.187.228.233

🇰🇷 121.171.95.112

🇻🇳 113.160.140.138

🇺🇸 70.37.89.177

🇰🇷 59.16.212.232

🇰🇷 222.239.251.12

🇳🇱 160.119.69.14

🇧🇷 155.2.219.94

🇷🇺 81.200.14.134

🇮🇹 79.3.96.178