JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.180.232.163

194.180.232.163 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.180.232.163

Whois 194.180.232.163

IP Abuse Reports for 194.180.232.163:

This IP address has been reported a total of 10 times from 10 distinct sources. 194.180.232.163 was first reported on May 19th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-04-29 10:29:57 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 194.180.232.163 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 194.180.232.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 06:29:53.120949 2026] [security2:error] [pid 7479:tid 7479] [client 194.180.232.163:45157] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.journ-e.sabri.es\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.journ-e.sabri.es"] [uri "/s3cmd.ini"] [unique_id "afHdobLI436ztScLwBFBcQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 fbarela	2025-12-09 16:00:24 (6 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
Anonymous	2025-11-29 12:49:00 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.29 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.29 is noted in report timestamp show less	Hacking Brute-Force
🇨🇿 lp	2025-11-28 11:53:22 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.180.232.163 2025-11-28T11:53:15+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.180.232.163 2025-11-28T11:53:15+01:00 vpn Access-Reject 'd01' station: 194.180.232.163 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2025-11-28 09:24:47 (6 months ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇩🇪 HandyTreff.de	2025-11-25 13:53:43 (6 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -31.46 (Bad < -10 / Very Bad < -20 / ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -31.46 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.4138.2 show less	Bad Web Bot Web App Attack
Anonymous	2025-11-16 08:49:15 (7 months ago)	wordpress-trap	Web App Attack
🇨🇭 backslash	2025-11-11 13:15:04 (7 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇧🇪 voormedia	2025-11-10 00:27:55 (7 months ago)	Accessed trap at '/wp-login.php'	Web App Attack
Anonymous	2025-05-19 13:06:00 (1 year ago)	Message meets Alert condition The following critical firewall event was detected: SSL VPN login fai ... show more Message meets Alert condition The following critical firewall event was detected: SSL VPN login fail. date=2025-05-19 time=07:06:36 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1747656396098173743 tz="-0500" logid="0101039426" type="event" subtype="vpn" level="alert" vd="root" logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=194.180.232.163 srccountry="United States" user="admin" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged i show less	VPN IP

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 171.25.158.57

🇺🇸 162.216.150.246

🇳🇱 91.92.40.8

🇺🇸 45.79.145.103

🇨🇳 14.103.159.154

🇺🇸 2602:80d:1008::40

🇩🇪 217.160.255.92

🇫🇮 209.85.208.179

🇧🇷 201.63.67.250

🇵🇱 87.251.64.176

🇺🇸 66.132.186.254

🇩🇪 45.135.194.113

🇳🇱 34.178.225.90

🇺🇸 34.139.75.190

🇺🇸 34.106.218.6

🇺🇸 32.197.200.142

🇳🇱 192.253.248.63

🇳🇱 176.65.139.181

🇸🇬 172.253.84.215

🇨🇲 143.105.152.132