JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.180.236.119

194.180.236.119 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 25%: ?

25%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.180.236.119

Whois 194.180.236.119

IP Abuse Reports for 194.180.236.119:

This IP address has been reported a total of 12 times from 7 distinct sources. 194.180.236.119 was first reported on June 9th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 bps-statistics	2026-08-31 10:25:33 (2 days ago)	WP Login Scan Activities: "2026-08-31T17:25:33.669+07:00" "/wp-login.php" "194.180.236.119" "Mozilla ... show more WP Login Scan Activities: "2026-08-31T17:25:33.669+07:00" "/wp-login.php" "194.180.236.119" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Web App Attack
🇩🇪 MusicLibrary	2026-08-25 22:36:48 (1 week ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇮🇩 bps-statistics	2026-08-25 01:18:21 (1 week ago)	WP Login Scan Activities: "2026-08-25T08:18:21.403+07:00" "/wp-login.php" "194.180.236.119" "Mozilla ... show more WP Login Scan Activities: "2026-08-25T08:18:21.403+07:00" "/wp-login.php" "194.180.236.119" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Web App Attack
🇪🇸 el-brujo	2026-08-15 20:35:04 (2 weeks ago)	[Sat Aug 15 22:35:02.030510 2026] [proxy_fcgi:error] [pid 910780:tid 910871] [remote 194.180.236.119 ... show more [Sat Aug 15 22:35:02.030510 2026] [proxy_fcgi:error] [pid 910780:tid 910871] [remote 194.180.236.119:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com [Sat Aug 15 22:35:03.536380 2026] [proxy_fcgi:error] [pid 910780:tid 910905] [remote 194.180.236.119:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com ... show less	Hacking Web App Attack
🇮🇩 bps-statistics	2026-08-02 12:32:50 (4 weeks ago)	WP Login Scan Activities: "2026-08-02T19:32:50.447+07:00" "/wp-login.php" "194.180.236.119" "Mozilla ... show more WP Login Scan Activities: "2026-08-02T19:32:50.447+07:00" "/wp-login.php" "194.180.236.119" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇩 bps-statistics	2026-07-29 15:30:47 (1 month ago)	WP Login Scan Activities: "2026-07-29T22:30:47.696+07:00" "/wp-login.php" "194.180.236.119" "Mozilla ... show more WP Login Scan Activities: "2026-07-29T22:30:47.696+07:00" "/wp-login.php" "194.180.236.119" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇩 Burayot	2026-07-23 06:28:40 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 194.180.236.119 (US/United States/- ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 194.180.236.119 (US/United States/-): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 island-freaks.com	2026-07-22 22:12:01 (1 month ago)	Attack Type: WordPress Exploit Bot attempt on /wp-json/wp/v2/users \| DNS 194.180.236.119 \| Agent: Mo ... show more Attack Type: WordPress Exploit Bot attempt on /wp-json/wp/v2/users \| DNS 194.180.236.119 \| Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 show less	Port Scan Hacking Bad Web Bot Exploited Host Web App Attack
🇺🇸 oralunal	2026-03-24 18:31:45 (5 months ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-07 07:24:43 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 194.180.236.119 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 194.180.236.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 07 02:24:37.382348 2025] [security2:error] [pid 14829:tid 14829] [client 194.180.236.119:45467] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bernsteinip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQ2etev_CN-d5-oWqIYK0wAAAAk"], referer: https://bernsteinip.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-23 04:44:29 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 194.180.236.119 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 194.180.236.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 00:44:21.792642 2025] [security2:error] [pid 20397:tid 20397] [client 194.180.236.119:43883] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|barigby.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barigby.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aPmypaPdDVNUnNmnKQJspwAAABI"], referer: https://barigby.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-09 20:35:16 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 194.180.236.119 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210740) triggered by 194.180.236.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 09 16:35:09.310437 2025] [security2:error] [pid 1031148:tid 1031148] [client 194.180.236.119:18921] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.transparentforest.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.transparentforest.com"] [uri "/modules.php"] [unique_id "aEdFfbxbsgJHXHFIh6W8vQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 157.245.34.56

🇺🇸 152.163.188.232

🇺🇸 107.174.188.218

🇮🇳 27.121.100.173

🇺🇸 2604:a880:400:d1:0:4:e8ec:8001

🇨🇳 222.141.24.212

🇨🇳 222.139.245.137

🇺🇸 195.184.76.104

🇨🇭 172.253.12.27

🇻🇳 171.243.148.195

🇬🇧 107.155.122.15

🇨🇦 85.217.149.62

🇺🇸 64.62.156.210

🇳🇱 45.148.10.157

🇰🇷 1.212.225.99

🇰🇭 202.57.209.100

🇺🇸 173.255.223.62

🇺🇸 172.174.5.146

🇩🇪 142.93.104.231

🇻🇳 103.200.23.107