JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.180.237.244

194.180.237.244 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 16%: ?

16%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.180.237.244

Whois 194.180.237.244

IP Abuse Reports for 194.180.237.244:

This IP address has been reported a total of 10 times from 8 distinct sources. 194.180.237.244 was first reported on August 15th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Oakley	2026-06-07 07:06:43 (2 weeks ago)	(mod_security) mod_security (id:900177) triggered by 194.180.237.244 (US/United States/-): 5 in the ... show more (mod_security) mod_security (id:900177) triggered by 194.180.237.244 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇱🇻 garmtech.com	2026-05-12 05:59:11 (1 month ago)	IM360 WAF: SQL Injection Attack: Common DB Names Detected	SQL Injection
🇫🇷 masterguru	2026-04-27 12:47:27 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 194.180.237.244 (US/United States/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 194.180.237.244 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-04-27 12:33:36 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 194.180.237.244 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 194.180.237.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 08:33:32.417330 2026] [security2:error] [pid 32705:tid 32705] [client 194.180.237.244:39719] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.corepest.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.corepest.com"] [uri "/s3cmd.ini"] [unique_id "ae9XnE8GwiA5Nkc0IksWfQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-04-27 05:51:38 (1 month ago)	HTTP header is restricted by policy (/accept-charset/). String match within "/accept-charset/ /conte ... show more HTTP header is restricted by policy (/accept-charset/). String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. (920450-123) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-26 05:03:06 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 194.180.237.244 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 194.180.237.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 01:03:02.340204 2026] [security2:error] [pid 8378:tid 8378] [client 194.180.237.244:17777] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|swetzer.net\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "swetzer.net"] [uri "/s3cmd.ini"] [unique_id "ae2chh6b0rTG-9L7g17EAgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-20 14:12:44 (2 months ago)	194.180.237.244 - - [20/Apr/2026:14:12:41 +0000] "GET /.git/config HTTP/1.1" 302 733 "-" "Mozilla/5. ... show more 194.180.237.244 - - [20/Apr/2026:14:12:41 +0000] "GET /.git/config HTTP/1.1" 302 733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-01-26 10:00:00 (4 months ago)	Vpn Brute Force	Brute-Force Bad Web Bot
🇺🇸 fbarela	2025-10-07 04:00:43 (8 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇲🇾 syokadmin	2025-08-15 23:39:58 (10 months ago)	(cpanel) Failed cPanel login from 194.180.237.244 (US/United States/-): 1 in the last 3600 secs	Brute-Force Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.181

🇿🇦 169.0.233.175

🇺🇸 147.185.132.106

🇺🇸 138.197.39.208

🇳🇱 89.248.167.131

🇺🇸 44.166.95.86

🇺🇸 205.210.31.90

🇮🇳 203.145.143.163

🇮🇳 182.95.60.146

🇷🇴 141.98.83.240

🇺🇸 137.184.228.138

🇺🇸 100.29.192.76

🇳🇱 91.92.40.5

🇺🇸 62.204.35.140

🇭🇰 58.176.64.176

🇳🇱 45.148.10.230

🇺🇸 44.56.46.36

🇨🇳 223.151.183.148

🇩🇪 188.245.84.238

🇨🇳 180.167.128.203