JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.99.24.203

194.99.24.203 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 19%: ?

19%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.99.24.203

Whois 194.99.24.203

IP Abuse Reports for 194.99.24.203:

This IP address has been reported a total of 42 times from 11 distinct sources. 194.99.24.203 was first reported on November 1st 2023, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-27 15:40:46 (3 hours ago)	(mod_security) mod_security (id:210350) triggered by 194.99.24.203 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 194.99.24.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 11:40:39.355867 2026] [security2:error] [pid 13591:tid 13591] [client 194.99.24.203:63437] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.astariamusic.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.astariamusic.com"] [uri "/joshuamichael-realm111.html"] [unique_id "auDF91HILRoMmsAftEGUngAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 22:34:22 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 194.99.24.203 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 194.99.24.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 18:34:18.111075 2026] [security2:error] [pid 6994:tid 6994] [client 194.99.24.203:21731] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.johnprimerano.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.johnprimerano.com"] [uri "/recordings.html"] [unique_id "atk96mG1zL8ZFS1GMBtZygAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-20 01:43:35 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 194.99.24.203 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 194.99.24.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 21:43:28.159143 2026] [security2:error] [pid 19269:tid 19269] [client 194.99.24.203:32071] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gonzalez.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atbHQC9WQCKc_Mp1B13pbgAAAA4"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-09 17:20:19 (1 month ago)	IP matched detection query 50 and more bad rqs apache.	Hacking Bad Web Bot Brute-Force Web App Attack
Anonymous	2026-09-09 10:20:18 (1 month ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇳🇱 Savvii	2026-09-09 02:56:30 (1 month ago)	15 attempts against mh-modsecurity-ban on pf221108	Brute-Force Web App Attack
🇳🇱 Savvii	2026-09-09 01:59:35 (1 month ago)	20 attempts against mh-misbehave-ban on pf221108	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-04 18:30:09 (1 month ago)	\| SQL injection attempt.	Web App Attack Hacking SQL Injection
🇧🇪 voormedia	2026-07-03 02:31:50 (3 months ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇨🇭 4server	2026-06-24 23:23:41 (4 months ago)	[ThuJun2501:23:34.8154342026][security2:error][pid1046304:tid1046318][client194.99.24.203:0]ModSecur ... show more [ThuJun2501:23:34.8154342026][security2:error][pid1046304:tid1046318][client194.99.24.203:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"motogiro.com\"][uri\"/xmlrpc.php\"][unique_id\"ajxm9kS9F0U_9P8UjMs5TAAAAAw\"] show less	Hacking Web App Attack
🇫🇷 masterguru	2025-12-06 06:49:09 (10 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 194.99.24.203 (NL/The Netherlands/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 194.99.24.203 (NL/The Netherlands/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2025-11-28 09:26:03 (10 months ago)	(FolderList) Hacking file access attemp in wordpress site from 194.99.24.203 (NL/The Netherlands/-): ... show more (FolderList) Hacking file access attemp in wordpress site from 194.99.24.203 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2025-11-25 16:17:26 (11 months ago)	(FolderList) Hacking file access attemp in wordpress site from 194.99.24.203 (NL/The Netherlands/-): ... show more (FolderList) Hacking file access attemp in wordpress site from 194.99.24.203 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇵🇱 sefinek.net	2025-08-17 14:59:58 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from FI. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from FI. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2025-07-07 22:45:12 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from FI. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from FI. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 130.49.113.31

🇧🇷 192.141.187.53

🇪🇸 178.156.108.92

🇳🇱 174.138.8.229

🇸🇪 165.231.143.109

🇫🇮 147.185.133.224

🇧🇷 138.99.124.1

🇷🇴 92.118.39.209

🇺🇸 73.95.241.48

🇸🇰 46.229.233.132

🇸🇬 20.157.117.15

🇨🇳 8.148.179.48

🇺🇸 3.95.57.61

🇺🇸 205.210.31.75

🇻🇪 201.249.89.102

🇦🇷 190.57.233.133

🇨🇿 185.47.220.86

🇦🇷 181.20.5.200

🇫🇷 178.20.215.22

🇺🇸 166.255.202.195