JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.102.112.104

185.102.112.104 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 25%: ?

25%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.102.112.104

Whois 185.102.112.104

IP Abuse Reports for 185.102.112.104:

This IP address has been reported a total of 13 times from 10 distinct sources. 185.102.112.104 was first reported on January 15th 2024, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇾 maxdcy	2026-07-07 08:00:30 (19 hours ago)	Blocked by IPFire firewall/IPS: 4 hostile probe/scan attempts to public HTTPS/HTTP on Jul 7. Listed ... show more Blocked by IPFire firewall/IPS: 4 hostile probe/scan attempts to public HTTPS/HTTP on Jul 7. Listed on threat-intel feeds (Spamhaus/Dshield/CINS). Origin: AS35830 - Fast Servers (Pty) Ltd. show less	Port Scan Hacking
🇫🇷 vtchost.com	2026-07-07 01:57:42 (1 day ago)	vtchost.com:80 185.102.112.104 - - [07/Jul/2026:03:57:42 +0200] "GET / HTTP/1.1" 418 233 "-" "Mozill ... show more vtchost.com:80 185.102.112.104 - - [07/Jul/2026:03:57:42 +0200] "GET / HTTP/1.1" 418 233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36/Nutch-1.21-SNAPSHOT" ... show less	Bad Web Bot
🇨🇭 Origon	2026-07-01 22:15:20 (6 days ago)	http-bad-user-agent - IP: 185.102.112.104 - time="2026-07-02T00:15:19+02:00" level=info msg="(555f6 ... show more http-bad-user-agent - IP: 185.102.112.104 - time="2026-07-02T00:15:19+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 185.102.112.104 (RU/35830) : 4h ban on Ip 185.102.112.104" module=db show less	Bad Web Bot
🇨🇭 backslash	2026-07-01 13:36:00 (6 days ago)	block ruleset 7B8FD6B12C4E12B6F0DAE02E53C0597FBEDDF5BC	Bad Web Bot
🇨🇭 Origon	2026-05-25 10:41:46 (1 month ago)	http-bad-user-agent - IP: 185.102.112.104 - time="2026-05-25T12:41:46+02:00" level=info msg="(555f6 ... show more http-bad-user-agent - IP: 185.102.112.104 - time="2026-05-25T12:41:46+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 185.102.112.104 (RU/35830) : 4h ban on Ip 185.102.112.104" module=db show less	Bad Web Bot
🇨🇭 Origon	2026-05-19 18:38:42 (1 month ago)	http-bad-user-agent - IP: 185.102.112.104 - time="2026-05-19T20:38:42+02:00" level=info msg="(555f6 ... show more http-bad-user-agent - IP: 185.102.112.104 - time="2026-05-19T20:38:42+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 185.102.112.104 (RU/35830) : 4h ban on Ip 185.102.112.104" module=db show less	Bad Web Bot
🇩🇪 Lino Project	2026-04-11 15:14:40 (2 months ago)	185.102.112.104 - - [11/Apr/2026:17:14:39 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3978 "-" "Mozilla/5 ... show more 185.102.112.104 - - [11/Apr/2026:17:14:39 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3978 "-" "Mozilla/5.0 (Linux; Android 9; Mi 9T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Mobile Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-10-17 04:25:15 (8 months ago)	IM360 WAF: Request Indicates a Security Scanner Scanned the Site MV:sqlmap/1.9.10#stable (https://sq ... show more IM360 WAF: Request Indicates a Security Scanner Scanned the Site MV:sqlmap/1.9.10#stable (https://sqlmap.org) show less	Port Scan
🇺🇸 TPI-Abuse	2025-03-03 19:35:26 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 185.102.112.104 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.102.112.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 14:35:23.028461 2025] [security2:error] [pid 501187:tid 501187] [client 185.102.112.104:26111] [client 185.102.112.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hendersonhomes.com"] [uri "/.env"] [unique_id "Z8YEe5ikpXsbs9HY3B5h5QAAAAk"], referer: https://tasamm.com/about/ggg88.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-01 23:34:53 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 185.102.112.104 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.102.112.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 01 18:34:49.495521 2025] [security2:error] [pid 32675:tid 32675] [client 185.102.112.104:60693] [client 185.102.112.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "employers.carpenterssw.org"] [uri "/.env"] [unique_id "Z8OZmbEKMEvaJ0bTWDQA8AAAAAc"], referer: https://tasamm.com/about/eee28.html show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2024-08-06 09:50:42 (1 year ago)	WP Login Scan Activities	Web App Attack
Anonymous	2024-05-29 02:14:02 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇬🇧 Swiptly	2024-01-15 22:13:07 (2 years ago)	WordPress xmlrpc spam or enumeration ...	Web Spam Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.124.162

🇩🇪 213.209.159.25

🇺🇸 192.52.166.112

🇫🇷 163.172.143.147

🇪🇬 156.207.66.123

🇫🇮 147.185.133.188

🇰🇷 121.190.191.160

🇨🇳 45.126.120.53

🇺🇸 20.14.79.76

🇰🇷 221.150.46.130

🇧🇷 205.210.31.205

🇳🇱 193.176.31.220

🇧🇷 186.248.197.77

🇺🇸 166.62.102.109

🇨🇳 123.156.69.220

🇻🇳 116.110.9.98

🇱🇹 77.90.185.79

🇩🇪 64.89.163.132

🇬🇧 35.203.211.184

🇺🇸 20.169.48.59