JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.102.113.212

185.102.113.212 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 11%: ?

11%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.102.113.212

Whois 185.102.113.212

IP Abuse Reports for 185.102.113.212:

This IP address has been reported a total of 13 times from 6 distinct sources. 185.102.113.212 was first reported on October 28th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-01 05:43:45 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 185.102.113.212 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 185.102.113.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 01:43:41.081938 2026] [security2:error] [pid 8152:tid 8152] [client 185.102.113.212:23767] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|shinynew.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "shinynew.com"] [uri "/s3cmd.ini"] [unique_id "afQ9jUPkcnR4AIJfjXiU3QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-28 19:57:08 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 185.102.113.212 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 185.102.113.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 15:57:03.552850 2026] [security2:error] [pid 7869:tid 7869] [client 185.102.113.212:60245] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.frightlibrary.org\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.frightlibrary.org"] [uri "/s3cmd.ini"] [unique_id "afERD9R8-kMYkSXoL1_1WQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 JCG	2026-04-28 06:58:00 (1 month ago)	brute-force	Brute-Force
🇳🇿 Tripwire	2026-04-27 03:23:15 (1 month ago)	Scanning for exploits - /.aws/credentials	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-26 19:51:09 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 185.102.113.212 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 185.102.113.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 15:51:05.840076 2026] [security2:error] [pid 2720:tid 2720] [client 185.102.113.212:14673] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.aktkaro.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.aktkaro.com"] [uri "/s3cmd.ini"] [unique_id "ae5sqRiFljB5865KC3lBJwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-03 01:38:06 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 185.102.113.212 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.102.113.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 02 20:37:59.098908 2025] [security2:error] [pid 19535:tid 19535] [client 185.102.113.212:33823] [client 185.102.113.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "graduationnapkins.com"] [uri "/.env"] [unique_id "Z8UH9zlCg47BIMPX9o0uhgAAABs"], referer: https://tasamm.com/about/ggg31.html show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-24 05:57:18 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇿 lp	2024-11-16 17:52:31 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.102.113.212 2024-11-16T18:43:24+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.102.113.212 2024-11-16T18:43:24+01:00 vpn Access-Reject 'phabricator' station: 185.102.113.212 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-11-07 20:57:41 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.102.113.212 2024-11-07T19:36:50+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.102.113.212 2024-11-07T19:36:50+01:00 vpn Access-Reject 'garden' station: 185.102.113.212 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-11-07 11:57:05 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.102.113.212 2024-11-07T11:52:20+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.102.113.212 2024-11-07T11:52:20+01:00 vpn Access-Reject 'schwab' station: 185.102.113.212 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-11-07 01:28:35 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.102.113.212 2024-11-07T01:22:46+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.102.113.212 2024-11-07T01:22:46+01:00 vpn Access-Reject 'bio-path' station: 185.102.113.212 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-11-06 19:26:43 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.102.113.212 2024-11-06T20:21:03+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.102.113.212 2024-11-06T20:21:03+01:00 vpn Access-Reject 'blackrock' station: 185.102.113.212 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇵🇱 rafix	2023-10-28 10:20:14 (2 years ago)	Scrapping website, using diffrent useragents, not wait for response, #botnet20231026	DDoS Attack Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.41.227.29

🇫🇷 85.217.140.49

🇰🇷 218.145.181.48

🇺🇸 198.41.227.82

🇷🇺 194.190.153.226

🇮🇶 176.241.83.187

🇸🇬 172.253.211.88

🇺🇸 147.185.132.243

🇰🇷 110.14.190.221

🇹🇳 102.152.213.72

🇯🇵 54.199.178.31

🇸🇬 47.84.132.182

🇺🇸 44.230.80.254

🇧🇪 44.11.74.69

🇸🇬 43.173.176.115

🇵🇰 39.34.142.69

🇻🇪 38.51.122.9

🇬🇧 2a06:4880:4000::

🇦🇪 217.165.14.23

🇩🇪 202.71.141.170