JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.180.236.117

194.180.236.117 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 8%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.180.236.117

Whois 194.180.236.117

IP Abuse Reports for 194.180.236.117:

This IP address has been reported a total of 14 times from 9 distinct sources. 194.180.236.117 was first reported on November 8th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 HandyTreff.de	2026-06-06 13:47:40 (3 weeks ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -60.301 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -60.301 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.4156.2 show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-01 07:07:35 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.180.236.117 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 194.180.236.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 03:07:26.978830 2026] [security2:error] [pid 19899:tid 19899] [client 194.180.236.117:13213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schmitzcomm.net"] [uri "/.env"] [unique_id "afRRLt7WXzo8GHiW2CVlRQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-29 23:28:12 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 194.180.236.117 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 194.180.236.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 19:28:06.610431 2026] [security2:error] [pid 11764:tid 11764] [client 194.180.236.117:38539] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|stalbansparish.org\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stalbansparish.org"] [uri "/s3cmd.ini"] [unique_id "afKUBrkIn0wqc6kAMAi0AQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-28 04:07:15 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 194.180.236.117 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 194.180.236.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 00:07:10.995723 2026] [security2:error] [pid 26621:tid 26621] [client 194.180.236.117:43189] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.kennythompson.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kennythompson.com"] [uri "/s3cmd.ini"] [unique_id "afAybs344veRkyJtttm8WwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2026-04-17 09:04:33 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -51.237 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -51.237 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.3550.1 show less	Web App Attack Bad Web Bot
Anonymous	2026-02-18 16:59:40 (4 months ago)	GlobalProtect Password Spraying	Brute-Force
🇺🇸 nodepile	2026-02-11 17:17:01 (4 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/product_info.php ua='Mozilla/5.0 ( ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/product_info.php ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.586.126 Safari/537.36') show less	Open Proxy VPN IP
🇺🇸 nodepile	2026-02-09 08:09:26 (4 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/projector53suptmsup-euro-headlight ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/projector53suptmsup-euro-headlight-black-housing-pair-p-1182.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.427.85 Safari/537.36') show less	Open Proxy VPN IP
🇨🇭 backslash	2026-01-12 08:35:07 (5 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-12-29 13:06:08 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-12-18 12:56:37 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.18 is noted in report timestamp show less	Hacking Brute-Force
🇨🇭 backslash	2025-12-01 02:00:39 (6 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇱🇻 garmtech.com	2025-11-20 18:55:14 (7 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 fbarela	2025-11-08 06:00:37 (7 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 194.187.178.226

🇨🇦 170.199.135.66

🇳🇱 160.119.69.16

🇨🇳 113.142.60.99

🇺🇸 68.220.62.176

🇺🇸 47.251.142.244

🇳🇱 45.153.34.15

🇬🇧 35.203.211.38

🇬🇧 193.163.125.252

🇩🇪 172.217.33.144

🇺🇸 162.216.150.46

🇮🇳 157.51.233.111

🇪🇸 91.142.222.105

🇩🇪 69.5.169.163

🇲🇴 60.246.83.70

🇵🇱 57.128.225.99

🇸🇬 47.79.11.239

🇰🇿 37.151.243.2

🇷🇺 37.77.150.241

🇬🇧 35.203.211.116