JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.70.234.111

194.70.234.111 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.70.234.111

Whois 194.70.234.111

IP Abuse Reports for 194.70.234.111:

This IP address has been reported a total of 11 times from 6 distinct sources. 194.70.234.111 was first reported on May 23rd 2024, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Packets-Decreaser.NET	2025-12-10 14:34:37 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇦 wil.com	2025-04-01 10:32:00 (1 year ago)	GlobalProtect login attempts with user ssnyder.	VPN IP Brute-Force
🇺🇸 TPI-Abuse	2025-03-11 22:44:01 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 194.70.234.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.70.234.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 11 18:43:58.364259 2025] [security2:error] [pid 26540:tid 26540] [client 194.70.234.111:25523] [client 194.70.234.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realstorybooks.com"] [uri "/.env"] [unique_id "Z9C8rjwewMPNFEpD-qltvwAAABE"], referer: https://tasamm.com/about/ppp99.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-11 01:19:40 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 194.70.234.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.70.234.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 10 21:19:34.866005 2025] [security2:error] [pid 31885:tid 31885] [client 194.70.234.111:9625] [client 194.70.234.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "odessatexas.us"] [uri "/.env"] [unique_id "Z8-PpnaTZa-Y944fEHS4MQAAAAg"], referer: https://tasamm.com/about/mmm280.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-14 07:30:47 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 194.70.234.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.70.234.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 14 02:30:39.973771 2025] [security2:error] [pid 809:tid 809] [client 194.70.234.111:19219] [client 194.70.234.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "basse.lahamradio.com"] [uri "/.env"] [unique_id "Z67xH8Lp2FJpiA-MRvHeRQAAAAg"], referer: https://tasamm.com/about/bbb18.html show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2024-11-23 08:52:47 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.70.234.111 2024-11-23T08:54:27+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.70.234.111 2024-11-23T08:54:27+01:00 vpn Access-Reject 'yoda' station: 194.70.234.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-11-22 07:26:38 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.70.234.111 2024-11-22T07:41:15+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.70.234.111 2024-11-22T07:41:15+01:00 vpn Access-Reject '366' station: 194.70.234.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-11-21 08:53:40 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.70.234.111 2024-11-21T09:14:01+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.70.234.111 2024-11-21T09:14:01+01:00 vpn Access-Reject '835' station: 194.70.234.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
Anonymous	2024-05-23 21:50:37 (2 years ago)	"Proxies that are used for attacking https://pastebin.com/JZr9dSDT"	Open Proxy
Anonymous	2024-05-23 21:50:37 (2 years ago)	"Proxies that are used for attacking https://pastebin.com/JZr9dSDT"	Open Proxy
🇪🇸 el-brujo	2024-05-23 10:00:37 (2 years ago)	Proxies digitalstress[.]su used for attacking	DDoS Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.190.51.254

🇧🇷 170.79.85.121

🇨🇳 112.94.252.84

🇮🇩 103.99.214.16

🇪🇸 80.36.144.50

🇧🇬 79.124.49.226

🇳🇱 45.148.10.141

🇺🇸 193.56.116.235

🇩🇪 155.117.127.214

🇮🇹 151.115.164.129

🇰🇷 125.142.37.91

🇱🇹 77.90.185.16

🇺🇸 72.63.20.130

🇺🇸 66.132.186.178

🇭🇰 46.247.61.200

🇧🇷 45.160.231.44

🇺🇸 20.150.195.172

🇨🇳 14.29.184.206

🇹🇼 198.235.24.116

🇬🇧 193.163.125.221