JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.180.237.189

194.180.237.189 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.180.237.189

Whois 194.180.237.189

IP Abuse Reports for 194.180.237.189:

This IP address has been reported a total of 13 times from 10 distinct sources. 194.180.237.189 was first reported on June 3rd 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-21 17:20:47 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.180.237.189 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 194.180.237.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 13:20:39.148101 2026] [security2:error] [pid 9453:tid 9453] [client 194.180.237.189:21449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigheartskitchen.net"] [uri "/wp-config.php.dist"] [unique_id "ag8-5wK2uvLATJdDfnxhNQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 15:34:21 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.180.237.189 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 194.180.237.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 11:34:16.737428 2026] [security2:error] [pid 3555:tid 3555] [client 194.180.237.189:9209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "site.ablogisticsgroup.com"] [uri "/wp-config.php.bak"] [unique_id "ag3UeIMUY73tb4peDg_JbwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-13 00:19:53 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.180.237.189 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 194.180.237.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 20:19:47.518513 2026] [security2:error] [pid 20705:tid 20705] [client 194.180.237.189:24393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arapi.org"] [uri "/wp-config.txt"] [unique_id "agPDo2RbhCZmLlb5W2CE9QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-04 08:24:36 (2 months ago)	194.180.237.189 - - [04/May/2026:16:24:35 +0800] "POST /xmlrpc.php HTTP/1.1" 200 7463 "-" "Mozilla/5 ... show more 194.180.237.189 - - [04/May/2026:16:24:35 +0800] "POST /xmlrpc.php HTTP/1.1" 200 7463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-01-18 17:15:21 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.18 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-15 05:51:30 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 194.180.237.189 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 194.180.237.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 00:51:23.539409 2025] [security2:error] [pid 23980:tid 23980] [client 194.180.237.189:11933] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|heinzmail.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "heinzmail.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aT-h2yb50qTbiNh6qukj0gAAAA4"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-09 17:58:25 (6 months ago)	194.180.237.189 - - [09/Dec/2025:18:58:20 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.g ... show more 194.180.237.189 - - [09/Dec/2025:18:58:20 +0100] "GET /wp-login.php HTTP/1.1" 301 162 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 octageeks.com	2025-11-19 05:09:26 (7 months ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 Carsten	2025-11-19 00:16:59 (7 months ago)	GET [wp-login.php]	Port Scan
🇨🇭 backslash	2025-11-11 17:05:08 (7 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 fbarela	2025-11-06 22:00:31 (7 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇩🇪 hbrks	2025-10-23 22:46:02 (8 months ago)	1 attack(s) detected, such as these: {"event":"nginx_block","ip":"194.180.237.189","host":"marche-be ... show more 1 attack(s) detected, such as these: {"event":"nginx_block","ip":"194.180.237.189","host":"marche-be.com","request":"GET /wp-login.php HTTP/1.1","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36","reason":"service:unknow","timestamp":"2025-10-23T22:46:02 00:00","logentry":"marche-be.com 194.180.237.189 - - [23/Oct/2025:22:46:02 0000] GET /wp-login.php HTTP/1.1 444 0 http://marche-be.com/wp-login.php Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 - matched:service:unknow"} * Report Details : https://p4u.xyz/GPIU25VLXLT/1 IP Details *: https://p4u.xyz/GPIU25VLXLT/2 show less	Web Spam Hacking Bad Web Bot
Anonymous	2025-06-03 17:56:00 (1 year ago)	Message meets Alert condition The following critical firewall event was detected: SSL VPN login fai ... show more Message meets Alert condition The following critical firewall event was detected: SSL VPN login fail. date=2025-06-03 time=12:36:08 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1748972168914536140 tz="-0500" logid="0101039426" type="event" subtype="vpn" level="alert" vd="root" logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=194.180.237.189 srccountry="United States" user="ap" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in" show less	VPN IP

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.220.100.243

🇳🇱 185.89.249.3

🇧🇷 181.225.157.226

🇫🇷 158.220.111.161

🇴🇲 145.224.121.40

🇮🇩 103.78.105.218

🇦🇹 93.111.200.189

🇲🇾 49.124.151.59

🇪🇸 46.24.47.94

🇮🇳 2404:7c80:6e:a0eb:5ce1:a88b:9d6a:220f

🇵🇰 223.123.73.153

🇰🇬 213.109.66.53

🇨🇳 183.239.20.236

🇨🇳 180.76.202.69

🇮🇩 160.25.212.27

🇿🇦 102.219.25.195

🇲🇾 49.124.150.247

🇳🇱 45.148.10.147

🇺🇸 45.79.190.216

🇨🇴 200.6.180.251