JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

185.212.111.4

Neutral Activity

Abuse confidence score ?

0% Low Risk

19 reports

17 reporters · latest 1 year ago

ISP	Globalhost d.o.o. - Dediceted Servers
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200698
Domain Name	global.ba
Country	🇧🇦 Bosnia and Herzegovina
City	Novi Travnik, Federation of B&H

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

185.212.111.4 has been reported 19 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 185.212.111.4

This IP address has been reported a total of 19 times from 17 distinct sources. 185.212.111.4 was first reported on August 8th 2021, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 oonux.net	2025-08-05 19:26:40 (1 year ago)	Botnet HTTPS DDoS zombie, agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show more Botnet HTTPS DDoS zombie, agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0 show less	DDoS Attack Exploited Host Web App Attack
🇺🇸 rcsb	2024-07-20 23:06:33 (2 years ago)	Spam Post In Forums	Web Spam
🇺🇸 rcsb	2024-07-20 23:06:33 (2 years ago)	Spam Post In Forums	Web Spam
🇺🇸 rcsb	2024-07-20 23:06:33 (2 years ago)	Spam Post In Forums	Web Spam
🇬🇧 hcsystems	2022-10-07 02:15:41 (3 years ago)	Remote file inclusion attempted	Hacking SQL Injection
🇦🇺 oncord	2022-10-06 02:49:42 (3 years ago)	Form spam	Web Spam
🇬🇧 Joe-Mark	2021-08-14 10:34:28 (5 years ago)	Blocked by Sophos UTM Network Protection / proto=6 . srcport=63199 . dstport=80 HTTP . (14 ... show more Blocked by Sophos UTM Network Protection / proto=6 . srcport=63199 . dstport=80 HTTP . (1490) show less	Hacking Brute-Force
🇩🇪 barbarella	2021-08-14 02:31:59 (5 years ago)	Multiple (2) times attack on https port 443: Configuration snooping in .env file (GET /.env) 22:32 ... show more Multiple (2) times attack on https port 443: Configuration snooping in .env file (GET /.env) 22:32:02 Configuration snooping in .env file (GET /.env) show less	Hacking Web App Attack
🇨🇿 Linux-Tech	2021-08-14 02:03:43 (5 years ago)	185.212.111.4 - - [14/Aug/2021:08:03:39 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; ... show more 185.212.111.4 - - [14/Aug/2021:08:03:39 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 185.212.111.4 - - [14/Aug/2021:08:03:42 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" show less	Port Scan Hacking Bad Web Bot Web App Attack
🇮🇪 RoboSOC	2021-08-13 06:04:10 (5 years ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: server1.privateinternetaccess.com.	Port Scan
🇧🇪 Erik	2021-08-13 02:23:25 (5 years ago)	String match "python-requests" at REQUEST_HEADERS:User-Agent	Web App Attack
🇷🇺 PetrHu	2021-08-11 13:09:29 (5 years ago)	185.212.111.4 - - [11/Aug/2021:20:09:28 +0300] "GET /.env HTTP/1.1" 404 117 "-" "Mozilla/5.0 (Linux; ... show more 185.212.111.4 - - [11/Aug/2021:20:09:28 +0300] "GET /.env HTTP/1.1" 404 117 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" show less	Bad Web Bot Web App Attack
🇺🇸 brocklen.ga	2021-08-11 06:02:45 (5 years ago)	{"time": "2021-08-11T19:02:43+09:00","remote_addr": "185.212.111.4", "connection": "16679", "connect ... show more {"time": "2021-08-11T19:02:43+09:00","remote_addr": "185.212.111.4", "connection": "16679", "connection_requests": 1, "pipe": ".", "body_bytes_sent": 146, "request_length": 298, "request_time": 0.000, "response_status": 404, "request": "GET /.env HTTP/1.1", "request_method": "GET", "uri": "/.env","host": "35.208.246.227", "upstream_cache_status": "", "upstream_addr": "", "http_x_forwarded_for": "", "http_referrer": "", "http_user_agent": "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30", "http_version": "HTTP/1.1", "remote_user": "", "http_x_forwarded_proto": "", "upstream_response_time": "", "request_body": "", "nginx_access": true} {"time": "2021-08-11T19:02:43+09:00","remote_addr": "185.212.111.4", "connection": "16680", "connection_requests": 1, "pipe": ".", "body_bytes_sent": 146, "request_length": 364, "request_time": 0.000, "response_status": 404, "request" ... show less	Brute-Force Web App Attack
🇺🇸 FireballDWF	2021-08-11 04:50:16 (5 years ago)	404 NOT FOUND	Web App Attack
🇪🇸 bullhost.es	2021-08-10 03:02:20 (5 years ago)	Time: Tue Aug 10 07:25:48 2021 +0200 IP: 185.212.111.4 (BA/Bosnia and Herzegovina/server1 ... show more Time: Tue Aug 10 07:25:48 2021 +0200 IP: 185.212.111.4 (BA/Bosnia and Herzegovina/server1.privateinternetaccess.com) Failures: 5 (mod_security) Interval: 3600 seconds Blocked: Permanent Block [LF_MODSEC show less	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 2.57.122.209

🇻🇳 221.133.3.83

🇺🇸 194.187.179.221

🇹🇼 188.253.7.4

🇮🇳 168.144.115.97

🇨🇳 121.11.96.13

🇧🇩 103.87.215.161

🇿🇦 102.212.64.41

🇳🇱 94.154.43.69

🇺🇦 93.183.192.70

🇨🇳 58.19.81.100

🇩🇪 45.140.42.24

🇺🇸 34.186.78.252

🇺🇸 216.25.89.105

🇰🇷 211.106.133.202

🇺🇦 188.163.44.4

🇩🇪 185.30.32.71

🇺🇸 130.131.161.248

🇮🇳 103.86.180.10

🇫🇷 85.204.70.116