JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.99.25.75

194.99.25.75 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.99.25.75

Whois 194.99.25.75

IP Abuse Reports for 194.99.25.75:

This IP address has been reported a total of 22 times from 16 distinct sources. 194.99.25.75 was first reported on December 29th 2022, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mind5t0rm	2026-02-07 00:15:25 (3 months ago)	(XMLRPC) WP XMLPRC Attack 194.99.25.75 (US/United States/-): 3 in the last 3600 secs; Ports: ; Dire ... show more (XMLRPC) WP XMLPRC Attack 194.99.25.75 (US/United States/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 194.99.25.75 - - [07/Feb/2026:07:15:17 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "curl/8.6.0" 194.99.25.75 - - [07/Feb/2026:07:15:19 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Wget/1.21.4" 194.99.25.75 - - [07/Feb/2026:07:15:20 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Wget/1.21.4" show less	Port Scan
🇩🇪 london2038.com	2026-01-21 20:40:24 (4 months ago)	Detected by WP fail2ban 2026-01-21T21:40:23.954139+01:00 wordpress: Authentication attempt from 194. ... show more Detected by WP fail2ban 2026-01-21T21:40:23.954139+01:00 wordpress: Authentication attempt from 194.99.25.75 show less	Brute-Force Web App Attack
🇱🇻 garmtech.com	2025-12-22 04:18:44 (5 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 fbarela	2025-11-12 22:00:30 (6 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇨🇭 backslash	2025-11-10 20:15:04 (6 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇩🇪 kranem	2025-11-05 00:01:26 (7 months ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 26548 (PUREVOLTAGE-INC) Protocol: HTTP/1. ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 26548 (PUREVOLTAGE-INC) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2025-11-04T22:26:56Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.93 Safari/537.36 show less	Bad Web Bot
Anonymous	2024-12-22 02:23:23 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2024.12.22 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2024.12.22 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2024-12-20 02:12:25 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force
🇨🇭 backslash	2024-10-31 20:25:05 (1 year ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇨🇦 wil.com	2024-09-24 01:18:49 (1 year ago)	GlobalProtect login attempts with user tblack.	VPN IP Brute-Force
🇺🇸 ChamberofCommerce.com	2024-08-13 20:16:07 (1 year ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
Anonymous	2024-05-17 06:41:34 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-02-16 01:59:54 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 194.99.25.75 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 194.99.25.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 15 20:59:47.827084 2024] [security2:error] [pid 23990] [client 194.99.25.75:9825] [client 194.99.25.75] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|portalvasco.com\|F\|2"] [data ".treehugger.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "portalvasco.com"] [uri "/blog/2014/05/ocho-pautas-contribuir-desarrollo-urbano-adaptado-nuevas-necesidades/www.treehugger.com"] [unique_id "Zc7BkyFMs55YsqnNJ_I-kwAAAAU"], referer: https://portalvasco.com/blog/2014/05/ocho-pautas-contribuir-desarrollo-urbano-adaptado-nuevas-necesidades/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-09 05:46:18 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 194.99.25.75 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 194.99.25.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 09 00:46:12.255894 2024] [security2:error] [pid 23513] [client 194.99.25.75:62217] [client 194.99.25.75] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Power Chairs/Alante Jr/Thumbs.db"] [unique_id "ZcW8JBFpk75IdRrPqccn1wAAAAY"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Golden%20Technologies%202009%20Marketing%20CD/Power%20Chairs/Alante%20Jr/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Roderic	2023-12-18 00:35:50 (2 years ago)	(apache-bow-document) Failed apache-bow-scanners trigger with match [redacted] from 194.99.25.75 (US ... show more (apache-bow-document) Failed apache-bow-scanners trigger with match [redacted] from 194.99.25.75 (US/United States/-) show less	Hacking

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.181

🇩🇪 116.203.138.135

🇺🇸 104.152.52.130

🇺🇸 104.152.52.129

🇺🇸 66.132.172.112

🇬🇧 35.203.211.135

🇸🇬 2404:6800:4003:c26::122

🇨🇳 222.240.3.66

🇮🇳 210.212.136.3

🇺🇸 184.105.247.216

🇵🇭 180.191.23.59

🇺🇸 173.239.218.244

🇨🇦 167.114.139.130

🇺🇬 129.205.2.18

🇨🇳 117.34.85.185

🇩🇪 109.71.252.97

🇮🇩 103.186.1.150

🇵🇱 91.196.110.170

🇺🇸 64.94.159.250

🇩🇪 46.249.99.46