JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.180.236.146

194.180.236.146 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 18%: ?

18%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.180.236.146

Whois 194.180.236.146

IP Abuse Reports for 194.180.236.146:

This IP address has been reported a total of 10 times from 8 distinct sources. 194.180.236.146 was first reported on November 16th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 polido	2026-06-28 20:27:48 (2 days ago)	Unauthorized connection attempt to port 443 from 194.180.236.146	Port Scan
🇩🇪 HandyTreff.de	2026-06-06 13:46:45 (3 weeks ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -56.302 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -56.302 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.4107.2 show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-03 09:00:56 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 194.180.236.146 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 194.180.236.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 05:00:50.069873 2026] [security2:error] [pid 22075:tid 22075] [client 194.180.236.146:26261] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Churchill II Recliner/Double Fudge/originals/Thumbs.db"] [unique_id "ah_tQupuXWJB0fx_A3CAMQAAAAo"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Churchill%20II%20Recliner/Double%20Fudge/originals/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-04-17 02:27:00 (2 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-16 19:51:04 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 194.180.236.146 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 194.180.236.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 15:50:56.974458 2026] [security2:error] [pid 3580667:tid 3580667] [client 194.180.236.146:15871] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.backstore.com\|F\|2"] [data ".losangelesseating.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.backstore.com"] [uri "/www.losangelesseating.com"] [unique_id "aeE9oKL_JsSG3m3KnSJ-ggAAAAk"], referer: http://www.backstore.com/Web-Sites.htm show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-01-31 07:40:02 (4 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇳🇱 oisecnet	2026-01-29 22:01:39 (5 months ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-01-29. 2 requests from this I ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-01-29. 2 requests from this IP. show less	Brute-Force Web App Attack SSH
Anonymous	2025-12-04 08:20:02 (6 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.12.04 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.12.04 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-11-17 16:50:54 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇬🇧 relianoid.com	2025-11-16 00:51:17 (7 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.109.189.255

🇭🇰 199.45.154.187

🇧🇪 198.235.24.251

🇩🇪 185.133.250.243

🇹🇭 171.7.12.43

🇧🇷 168.195.141.73

🇱🇾 154.127.69.29

🇨🇦 85.217.149.14

🇪🇸 79.116.38.6

🇨🇳 47.95.209.196

🇺🇸 43.162.124.208

🇨🇳 36.18.192.94

🇳🇱 2a00:1450:4013:c1a::121

🇮🇳 2401:4900:8f4f:2c0f:58c8:15d2:c859:7cf3

🇧🇬 185.253.160.7

🇧🇷 179.189.199.133

🇺🇸 162.216.149.184

🇧🇷 138.121.247.207

🇧🇷 138.121.246.148

🇧🇷 138.121.244.213