JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.101.21.149

185.101.21.149 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 9%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.101.21.149

Whois 185.101.21.149

IP Abuse Reports for 185.101.21.149:

This IP address has been reported a total of 31 times from 18 distinct sources. 185.101.21.149 was first reported on August 22nd 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-07-17 00:11:03 (1 week ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-05-31 11:16:13 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 185.101.21.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.101.21.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 07:15:43.993116 2026] [security2:error] [pid 11515:tid 11515] [client 185.101.21.149:40609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.evolute.io"] [uri "/wp-config.php.3"] [unique_id "ahwYXwwcV7Y8SSeC6BApBQAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-30 08:02:05 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 185.101.21.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 185.101.21.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 04:01:59.932505 2026] [security2:error] [pid 30598:tid 30598] [client 185.101.21.149:24747] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|talkingmess.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "talkingmess.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahqZd116hNr2fp8joLcH8QAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-02 21:41:32 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 185.101.21.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 185.101.21.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 17:41:29.096107 2026] [security2:error] [pid 8288:tid 8288] [client 185.101.21.149:9377] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ejnes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ejnes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afZviQAr2VbwDn4-vJVfMwAAAAU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nationaleventpros.com	2026-03-31 08:37:45 (3 months ago)	WordPress login attempt	Brute-Force
🇺🇸 ambor	2026-03-27 11:54:45 (4 months ago)	Honeypot access: WordPress admin access attempt. Path: /wp-login.php	Brute-Force Web App Attack
🇨🇿 lp	2025-08-01 19:50:43 (11 months ago)	Unauthorized VPN login attempts: 3 attempts were recorded from 185.101.21.149 2025-08-01T20:58:14+02 ... show more Unauthorized VPN login attempts: 3 attempts were recorded from 185.101.21.149 2025-08-01T20:58:14+02:00 vpn Access-Reject 'kwalker' station: 185.101.21.149 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-08-01T21:04:18+02:00 vpn Access-Reject 'amartin' station: 185.101.21.149 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-08-01T21:15:08+02:00 vpn Access-Reject 'pbrown' station: 185.101.21.149 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-23 15:20:46 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.101.21.149 2025-07-23T16:14:13+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.101.21.149 2025-07-23T16:14:13+02:00 vpn Access-Reject 'Scotland' station: 185.101.21.149 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-23 00:21:06 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.101.21.149 2025-07-23T02:00:03+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.101.21.149 2025-07-23T02:00:03+02:00 vpn Access-Reject 'cg' station: 185.101.21.149 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-19 10:50:28 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.101.21.149 2025-07-19T12:03:25+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.101.21.149 2025-07-19T12:03:25+02:00 vpn Access-Reject 'ROSA' station: 185.101.21.149 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-18 16:50:04 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.101.21.149 2025-07-18T17:34:38+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.101.21.149 2025-07-18T17:34:38+02:00 vpn Access-Reject 'administrator' station: 185.101.21.149 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-15 01:50:29 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.101.21.149 2025-07-15T02:41:20+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.101.21.149 2025-07-15T02:41:20+02:00 vpn Access-Reject 'MegaScribe' station: 185.101.21.149 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-14 01:50:16 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.101.21.149 2025-07-14T03:33:28+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.101.21.149 2025-07-14T03:33:28+02:00 vpn Access-Reject 'dehumidifier' station: 185.101.21.149 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-08 22:50:25 (1 year ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 185.101.21.149 2025-07-08T23:37:55+02 ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 185.101.21.149 2025-07-08T23:37:55+02:00 vpn Access-Reject 'racetracks' station: 185.101.21.149 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-07-08T23:45:44+02:00 vpn Access-Reject 'stalls' station: 185.101.21.149 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-06-10 17:49:54 (1 year ago)	WP Login Scan Activities	Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.241.250.102

🇨🇴 181.79.88.196

🇺🇸 162.216.150.32

🇮🇹 151.50.230.117

🇺🇸 97.93.43.157

🇩🇪 46.232.235.4

🇬🇧 2a06:4882:1000::25

🇮🇳 202.62.88.25

🇺🇸 173.211.70.38

🇺🇸 173.49.212.241

🇨🇳 115.213.174.107

🇹🇼 111.70.38.124

🇩🇪 62.54.176.203

🇨🇳 60.182.98.153

🇺🇸 54.221.161.150

🇮🇪 51.199.26.230

🇨🇴 190.67.197.33

🇲🇽 189.167.213.193

🇸🇬 188.166.216.188

🇰🇷 121.179.95.98