JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.180.233.160

194.180.233.160 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 7%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.180.233.160

Whois 194.180.233.160

IP Abuse Reports for 194.180.233.160:

This IP address has been reported a total of 12 times from 8 distinct sources. 194.180.233.160 was first reported on November 19th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-27 19:56:39 (1 month ago)	wordpress authentication brute force	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-05-06 03:51:23 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-51.194.180.233.160.web-spam ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-51.194.180.233.160.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 mind5t0rm	2026-03-17 09:56:27 (3 months ago)	(XMLRPC) WP XMLPRC Attack 194.180.233.160 (US/United States/-): 3 in the last 3600 secs; Ports: ; D ... show more (XMLRPC) WP XMLPRC Attack 194.180.233.160 (US/United States/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 194.180.233.160 - - [17/Mar/2026:16:56:19 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "curl/8.6.0" 194.180.233.160 - - [17/Mar/2026:16:56:21 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "curl/7.88.1" 194.180.233.160 - - [17/Mar/2026:16:56:22 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "curl/7.88.1" show less	Port Scan
🇫🇷 mrcrassi	2026-03-17 02:19:49 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Wget/1.21.4 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-14 12:16:29 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 194.180.233.160 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 194.180.233.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 08:16:25.171531 2026] [security2:error] [pid 21387:tid 21387] [client 194.180.233.160:52933] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hudson II/Vermont Bark/Recliner/Thumbs.db"] [unique_id "abVRmRBHlcwF07qhI3VgkQAAAA8"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Hudson%20II/Vermont%20Bark/Recliner/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-02-15 22:48:47 (4 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/wheels-uforged-c-71_1127.html ua=' ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/wheels-uforged-c-71_1127.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.4308.137 Safari/537.36') show less	Open Proxy VPN IP
🇨🇭 backslash	2026-02-10 01:45:04 (4 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 nodepile	2026-02-05 07:48:37 (4 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/e60-5series-mtech-polypropylene-re ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/e60-5series-mtech-polypropylene-rear-bumper-p-5685.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.872.195 Safari/537.36') show less	Open Proxy VPN IP
🇺🇸 nodepile	2025-12-16 10:39:36 (6 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/lighting-hid-led-xenon/lightwerkz/ ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/lighting-hid-led-xenon/lightwerkz/g5-r-bixenon-projector-set-hid-retrofit-free-shrouds-sealant.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.2786.140 Safari/537.36') show less	Open Proxy VPN IP
🇩🇪 HandyTreff.de	2025-12-13 12:14:13 (6 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -24.127 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -24.127 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1176.1 show less	Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2025-11-25 19:13:52 (7 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -33.681 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -33.681 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.3712.1 show less	Bad Web Bot Web App Attack
🇨🇭 backslash	2025-11-19 13:45:09 (7 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.123.90.154

🇫🇷 91.196.152.180

🇰🇷 116.123.150.231

🇺🇸 104.248.58.12

🇺🇸 104.237.150.55

🇻🇳 103.186.101.231

🇮🇩 103.181.143.69

🇬🇧 89.37.172.153

🇧🇪 34.156.214.117

🇺🇸 23.94.74.179

🇺🇸 3.129.187.38

🇺🇸 2601:c2:1e00:5a40:7945:5097:13d0:bc3b

🇭🇰 199.45.155.94

🇭🇰 199.45.155.81

🇺🇸 184.94.212.83

🇺🇸 172.239.51.96

🇩🇪 167.94.145.30

🇯🇵 160.251.169.213

🇨🇦 104.234.135.174

🇦🇪 95.182.93.67