JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.99.26.50

194.99.26.50 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Vantaa, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.99.26.50

Whois 194.99.26.50

IP Abuse Reports for 194.99.26.50:

This IP address has been reported a total of 19 times from 9 distinct sources. 194.99.26.50 was first reported on January 5th 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-04-11 05:56:50 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 194.99.26.50 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 194.99.26.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 01:56:44.897152 2026] [security2:error] [pid 2353993:tid 2353993] [client 194.99.26.50:59975] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|wildcomaui.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wildcomaui.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adninFimUWZDFyYpZH9TkwAAAAk"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-10 00:55:19 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 194.99.26.50 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 194.99.26.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 20:55:12.245655 2026] [security2:error] [pid 1415408:tid 1415408] [client 194.99.26.50:40959] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|winterspring.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "winterspring.net"] [uri "/wp-json/wp/v2/users"] [unique_id "adhKcKdb_P1iNOWRYbo7hgAAABY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-10 00:04:49 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 194.99.26.50 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 194.99.26.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 20:04:45.024286 2026] [security2:error] [pid 1120081:tid 1120081] [client 194.99.26.50:42033] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adg-nd3b7DJ6W5RNUil42AAAAA0"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 Asimar	2026-03-30 12:40:45 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 194.99.26.50 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 194.99.26.50 (US/United States/-): (CF_ENABLE) show less	Bad Web Bot
🇨🇿 lp	2025-09-08 10:55:00 (8 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2025-09-08T11:36:33+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2025-09-08T11:36:33+02:00 vpn Access-Reject 'server' station: 194.99.26.50 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-08-14 10:51:46 (9 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2025-08-14T11:59:14+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2025-08-14T11:59:14+02:00 vpn Access-Reject 'hglassmann' station: 194.99.26.50 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2025-08-08 22:54:01 (9 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/194.99.26.50 2025-08-08 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/194.99.26.50 2025-08-08 07:15:26 /static/favicon.ico show less	Web App Attack
🇺🇸 TPI-Abuse	2025-04-12 19:15:49 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 194.99.26.50 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 194.99.26.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 12 15:15:42.472553 2025] [security2:error] [pid 10558:tid 10558] [client 194.99.26.50:41383] [client 194.99.26.50] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rodzillacharters.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rodzillacharters.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_q73jcTRBck5oFRU-2FuAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2025-01-31 23:50:23 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2025-02-01T00:27:29+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2025-02-01T00:27:29+01:00 vpn Access-Reject 'corkmaking' station: 194.99.26.50 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-12-27 04:20:58 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2024-12-27T03:49:43+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2024-12-27T03:49:43+01:00 vpn Access-Reject 'mitchell' station: 194.99.26.50 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-12-25 14:49:34 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2024-12-25T14:19:37+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2024-12-25T14:19:37+01:00 vpn Access-Reject 'fisher' station: 194.99.26.50 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 octageeks.com	2024-12-18 05:06:47 (1 year ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇨🇿 lp	2024-12-08 01:26:34 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2024-12-08T01:41:46+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2024-12-08T01:41:46+01:00 vpn Access-Reject 'lucky' station: 194.99.26.50 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-12-07 14:51:49 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2024-12-07T14:48:47+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2024-12-07T14:48:47+01:00 vpn Access-Reject 'd.clemons' station: 194.99.26.50 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-12-07 05:52:55 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2024-12-07T05:34:37+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 194.99.26.50 2024-12-07T05:34:37+01:00 vpn Access-Reject 'a.christian' station: 194.99.26.50 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 176.36.139.231

🇺🇸 156.67.71.203

🇩🇪 37.46.18.151

🇬🇧 31.14.254.13

🇧🇪 2a00:1450:400c:c1d::12b

🇱🇰 220.247.224.226

🇨🇭 209.99.186.114

🇩🇪 139.162.143.196

🇮🇳 103.16.31.204

🇨🇳 14.103.245.58

🇩🇪 217.160.224.99

🇮🇩 139.0.23.124

🇨🇳 120.27.136.38

🇰🇭 116.212.133.42

🇰🇷 112.216.129.27

🇷🇴 109.103.66.60

🇸🇬 103.134.154.36

🇺🇸 96.127.152.236

🇳🇱 77.167.80.185

🇳🇱 31.56.209.34