JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.99.25.131

194.99.25.131 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 2%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.99.25.131

Whois 194.99.25.131

IP Abuse Reports for 194.99.25.131:

This IP address has been reported a total of 36 times from 19 distinct sources. 194.99.25.131 was first reported on December 2nd 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-07 17:42:16 (1 week ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2026-04-16 01:54:11 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 194.99.25.131 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 194.99.25.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 21:54:06.311807 2026] [security2:error] [pid 2252889:tid 2252889] [client 194.99.25.131:32055] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Apex II/Thumbs.db"] [unique_id "aeBBPtDs4M5N82fZaRNo0gAAAA4"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Apex%20II/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 12:08:08 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 194.99.25.131 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 194.99.25.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 08:07:55.216174 2026] [security2:error] [pid 16875:tid 16875] [client 194.99.25.131:19155] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Briarwood II/Stetson Coffee/originals/Thumbs.db"] [unique_id "abVPm_VmSkhlROCdb9Dv0AAAAA0"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Briarwood%20II/Stetson%20Coffee/originals/ show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 Mugen	2026-02-17 20:41:22 (3 months ago)	Unauthorized VPN login attempts	Brute-Force
🇧🇷 diego	2026-02-15 04:35:19 (4 months ago)	[probe-168-134] 2026-02-15 04:15:21, Client: 194.99.25.131, Protocol: 6, Unauthorized activity to HT ... show more [probe-168-134] 2026-02-15 04:15:21, Client: 194.99.25.131, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇩🇪 HandyTreff.de	2026-01-22 23:39:28 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -41.889 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -41.889 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.921.49 show less	Bad Web Bot Web App Attack
Anonymous	2025-12-08 22:42:44 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.08 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.08 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 fbarela	2025-11-28 13:00:43 (6 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇨🇭 backslash	2025-05-10 04:56:41 (1 year ago)		Bad Web Bot
🇺🇸 TPI-Abuse	2025-05-06 05:28:59 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 194.99.25.131 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 194.99.25.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 01:28:51.656661 2025] [security2:error] [pid 632534:tid 632534] [client 194.99.25.131:56633] [client 194.99.25.131] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Lectern II/Lectern II/Savannah Whiskey/originals/Thumbs.db"] [unique_id "aBmeE4iC3X6ezI1bj26NrQAAAAY"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Lectern%20II/Lectern%20II/Savannah%20Whiskey/originals/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-03-22 02:31:06 (1 year ago)	(From [email protected]) We have a significant number of BTC in cold storage , and we happen t ... show more (From [email protected]) We have a significant number of BTC in cold storage , and we happen to be part of a group of investors who were granted exclusive contracts for the United States Federal Bitcoin Reserve. Go to this page to track how policy developments stand https://bitcoinreservemonitor.com We're looking for claim holders to assist us in operations carry out our portion of the contract. We have a limited amount Bitcoin acquired several years earlier. . .therefore, only a few claims are available. Stake sizes are available in one hundred dollars or one thousand dollars. The first claim stays for 10 days , after which your payout will be $200 or $2,000 - withdraw anytime you choose and for any amount later on. You're able to continue growing that yield every ten days for a maximum of 90 days. Take action quickly, because we are eliminating any associated fees and taxes while absorbing taxes and charges on our end. Contact us to start. Nate +1 (602) 551-6607 Text and WhatsApp nathan.unge show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-03-21 00:04:43 (1 year ago)	(From [email protected]) We have a large amount of BTC secured offline , and we happen to ... show more (From [email protected]) We have a large amount of BTC secured offline , and we happen to be one among several participants that got awarded government-backed deals through the United States Strategic Bitcoin Reserve. Go to this page to follow where policy developments stand https://bitcoinreservemonitor.com We're looking for claim holders to assist us operationally fulfill our share of this deal. We have a limited amount crypto bought years ago. . .therefore, only a few claims are available. Claims are in units of one hundred dollars or one thousand dollars. Your first stake remains for a period of ten days , after which your payout will be $200 or $2,000 — take profits whenever you wish and any amount afterward. You can choose to reinvest that yield each 10-day period up to three months. Take action quickly, because we are eliminating any associated fees and taxes while absorbing taxes and charges on our end. Contact us to get started. Nate +1 (602) 551-6607 Text and WhatsApp nathan.unge show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-03-19 09:44:26 (1 year ago)	(From [email protected]) We possess a significant number of Bitcoin in cold storage , a ... show more (From [email protected]) We possess a significant number of Bitcoin in cold storage , and we happen to be one of many participants who were awarded exclusive contracts on the USA Strategic Bitcoin Reserve. Visit this link to see where policy developments stand https://bitcoinreservemonitor.com We require participants to work with us in operations execute our part of the contract. We've got a restricted quantity Bitcoin acquired a long time back. . .thus, the claim slots are scarce. Claims are in units of 100 USD or 1000 USD. The initial claim is held for 10 days , upon completion your payout will be $200 or $2,000 — take profits anytime you choose and whatever sum you prefer beyond that. You have the option to reinvest that yield every ten days up to three months. Act now, as we are waiving any associated fees and taxes by handling costs on our side on our end. Send us a message to start. Nate +1 (602) 551-6607 Text and WhatsApp [email protected] Unger Cleaning Products show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-03-19 06:55:44 (1 year ago)	(From [email protected]) We've got a significant number of Bitcoin secured offline and we ar ... show more (From [email protected]) We've got a significant number of Bitcoin secured offline and we are one among several investors that got awarded exclusive contracts on the U.S. Federal Bitcoin Reserve. Go to this page to follow where policy developments stand https://bitcoinreservemonitor.com We're looking for participants to assist us in execution carry out our part of the agreement. We own only a small supply of crypto that we purchased years ago. . .so, the amount of claims are limited. Claims are in units of $100 or $1,000. The initial claim is held for a period of ten days and at that point your payout will be $200 or $2,000 - withdraw at any time and any amount afterward. You have the option to continue growing that yield each 10-day period up to three months. Act now, since we're covering all taxes advisory fees and covering taxes and fees for you. Reach out to us to begin. Nate +1 (602) 551-6607 Text and WhatsApp [email protected] Unger Cleaning Products \| Cleaning Tools fo show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-03-19 00:23:26 (1 year ago)	(From [email protected]) We have hundreds of BTC kept in offline storage , and we happen ... show more (From [email protected]) We have hundreds of BTC kept in offline storage , and we happen to be one among several investors that got granted contract opportunities for the United States Strategic Bitcoin Reserve. Check this site to track how policy developments stand https://bitcoinreservemonitor.com We are in need of participants to help us in execution execute our portion of this deal. We own a limited amount Bitcoin that we purchased a long time back. . .so, the amount of claims are limited. Investment options start at $100 or $1,000. The initial claim is held for ten days , upon completion your return is $200 or $2000 - withdraw at any time and for any amount later on. You're able to continue growing that yield each 10-day period for a maximum of 90 days. Take action quickly, because we are eliminating all taxes advisory fees while absorbing taxes and charges on our end. Send us a message to start. Nate +1 (602) 551-6607 Text and WhatsApp [email protected] Unger Cleani show less	Phishing Web Spam

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.249

🇨🇳 58.19.140.122

🇮🇩 36.82.250.149

🇧🇪 198.235.24.241

🇹🇼 198.235.24.23

🇺🇸 195.184.76.141

🇨🇴 190.99.154.140

🇩🇪 185.242.3.226

🇬🇧 185.216.145.169

🇩🇪 151.243.11.34

🇻🇳 123.25.100.40

🇪🇸 79.150.76.140

🇫🇷 51.158.120.121

🇩🇪 45.157.179.164

🇳🇱 45.142.193.161

🇺🇸 45.56.83.149

🇮🇷 37.202.155.236

🇮🇩 36.67.231.21

🇨🇳 27.21.31.143

🇺🇸 3.145.137.247