JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.70.234.136

194.70.234.136 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 19%: ?

19%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.70.234.136

Whois 194.70.234.136

IP Abuse Reports for 194.70.234.136:

This IP address has been reported a total of 16 times from 10 distinct sources. 194.70.234.136 was first reported on August 3rd 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nyt	2026-05-21 18:47:44 (2 weeks ago)	WP Config Probe	Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 21:42:48 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 194.70.234.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 194.70.234.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 17:42:41.525798 2026] [security2:error] [pid 8239:tid 8239] [client 194.70.234.136:60111] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|fattoria-rendena.it\|F\|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fattoria-rendena.it"] [uri "/wp-config.inc"] [unique_id "ag4q0Wy45BNRx1Vprk2GdAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 19:14:55 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 194.70.234.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.70.234.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 15:14:44.753272 2026] [security2:error] [pid 28835:tid 28835] [client 194.70.234.136:23863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iconconstructors.com"] [uri "/wp-config.bak"] [unique_id "ag4IJKJqvExm-uiTDvJhigAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 18:54:17 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 194.70.234.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 194.70.234.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 14:54:10.577069 2026] [security2:error] [pid 31039:tid 31039] [client 194.70.234.136:41649] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|majesticsolutions.co\|F\|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "majesticsolutions.co"] [uri "/wp-config.inc"] [unique_id "ag4DUl2eWAHf7Nnw5ju8TgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 18:09:19 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 194.70.234.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.70.234.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 14:09:15.263463 2026] [security2:error] [pid 13840:tid 13840] [client 194.70.234.136:38651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realclean.net"] [uri "/wp-config.php.save"] [unique_id "ag34y203jw5Vj_3jCufq3AAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 15:36:31 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 194.70.234.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.70.234.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 11:36:23.708602 2026] [security2:error] [pid 3155:tid 3155] [client 194.70.234.136:12803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ronjamestelevision.com"] [uri "/wp-config.php.dist"] [unique_id "ag3U9_HxI0eUrtdAkHcPtwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 12:45:34 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 194.70.234.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 194.70.234.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:45:27.002901 2026] [security2:error] [pid 31656:tid 31656] [client 194.70.234.136:40319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stoneybluff.com"] [uri "/wp-config.bak"] [unique_id "ag2s53N1ZCFFsOobbeTgVgAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-02 14:35:08 (1 month ago)	Aggressive web scan	Web App Attack
🇨🇭 4server	2026-04-30 20:09:53 (1 month ago)	[ThuApr3022:09:50.8357152026][security2:error][pid4107206:tid4107994][client194.70.234.136:0]ModSecu ... show more [ThuApr3022:09:50.8357152026][security2:error][pid4107206:tid4107994][client194.70.234.136:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"mondo-it.ch\"][uri\"/.env.backup\"][unique_id\"afO3DpbaoKfgp5qd3XlNRAAAAFg\"] show less	Hacking Web App Attack
🇧🇪 cmbplf	2026-04-10 04:24:30 (2 months ago)	1.000 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇩🇪 london2038.com	2026-03-04 19:18:59 (3 months ago)	Detected by WP fail2ban 2026-03-04T20:18:58.831143+01:00 wordpress: Authentication attempt from 194. ... show more Detected by WP fail2ban 2026-03-04T20:18:58.831143+01:00 wordpress: Authentication attempt from 194.70.234.136 show less	Brute-Force Web App Attack
🇨🇦 polycoda	2026-01-25 12:45:52 (4 months ago)	📄 Probes for wp-login.php and other inexistent URLs	Hacking Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2026-01-24 16:51:12 (4 months ago)	WP Login Scan Activities	Web App Attack
🇨🇿 lp	2025-05-13 12:22:16 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.70.234.136 2025-05-13T13:12:05+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.70.234.136 2025-05-13T13:12:05+02:00 vpn Access-Reject 'terret' station: 194.70.234.136 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-17 01:23:30 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.70.234.136 2025-03-17T01:41:44+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.70.234.136 2025-03-17T01:41:44+01:00 vpn Access-Reject 'kidego' station: 194.70.234.136 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 103.124.137.202

🇹🇳 102.158.142.113

🇨🇦 216.126.86.80

🇳🇱 176.65.139.130

🇫🇷 91.196.152.209

🇹🇷 91.151.95.146

🇩🇪 45.155.172.34

🇬🇧 45.82.76.119

🇩🇪 34.179.214.253

🇺🇸 23.129.64.209

🇺🇸 200.10.44.151

🇵🇰 182.189.53.133

🇹🇬 156.38.73.89

🇵🇭 136.239.226.124

🇫🇷 91.231.89.42

🇳🇱 81.19.216.85

🇺🇸 66.132.172.204

🇸🇬 51.79.162.26

🇸🇬 47.84.130.19

🇷🇴 2.57.121.25