JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.96.37.93

185.96.37.93 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 28%: ?

28%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.96.37.93

Whois 185.96.37.93

IP Abuse Reports for 185.96.37.93:

This IP address has been reported a total of 25 times from 9 distinct sources. 185.96.37.93 was first reported on August 14th 2024, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-07-07 22:55:29 (9 hours ago)	[WedJul0800:55:27.2460882026][security2:error][pid1932720:tid1932830][client185.96.37.93:0]ModSecuri ... show more [WedJul0800:55:27.2460882026][security2:error][pid1932720:tid1932830][client185.96.37.93:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"titrasloco.com\"][uri\"/robots.txt\"][unique_id\"ak2D3xmRY0aOsF6T9t3wyAAAAQc\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 rh24	2026-07-07 11:22:47 (21 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 185.96.37.93 (RU/Rus ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 185.96.37.93 (RU/Russia/-) show less	Bad Web Bot
🇨🇭 Origon	2026-07-02 15:16:04 (5 days ago)	http-bad-user-agent - IP: 185.96.37.93 - time="2026-07-02T17:16:03+02:00" level=info msg="(555f66b4 ... show more http-bad-user-agent - IP: 185.96.37.93 - time="2026-07-02T17:16:03+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 185.96.37.93 (RU/35830) : 4h ban on Ip 185.96.37.93" module=db show less	Bad Web Bot
Anonymous	2026-06-21 23:02:16 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 4server	2026-05-12 16:48:09 (1 month ago)	[TueMay1218:48:03.1158562026][security2:error][pid320250:tid320385][client185.96.37.93:0]ModSecurity ... show more [TueMay1218:48:03.1158562026][security2:error][pid320250:tid320385][client185.96.37.93:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"sisuconsulting.net\"][uri\"/\"][unique_id\"agNZwwyEzt4T01BrTocgaAAAARg\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 rh24	2026-05-08 01:43:35 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 185.96.37.93 (RU/Rus ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 185.96.37.93 (RU/Russia/-) show less	Bad Web Bot
🇮🇹 alessio loto	2026-03-18 15:42:41 (3 months ago)	WAF Detection: Security_Scanner_Blocked. AI Confirmed Attack Payload.	Bad Web Bot
🇩🇪 MusicLibrary	2026-03-18 01:43:37 (3 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-03 06:54:47 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 185.96.37.93 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 185.96.37.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 03 01:54:41.095500 2026] [security2:error] [pid 23432:tid 23432] [client 185.96.37.93:45659] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.soudertonbigred.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.soudertonbigred.org"] [uri "/qatest/wp-json/wp/v2/users/"] [unique_id "aVi9MX4Ypy4avv8cNOE2PQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-28 16:07:44 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 185.96.37.93 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 185.96.37.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 11:07:41.124829 2025] [security2:error] [pid 6864:tid 6864] [client 185.96.37.93:25695] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ralphharris.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ralphharris.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVFVzfN6xzIluVweSLcAqQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Tripwire	2025-12-21 19:04:51 (6 months ago)	Wordpress login attempts	Brute-Force Web App Attack
🇨🇿 lp	2025-10-30 08:52:36 (8 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.96.37.93 2025-10-30T08:46:32+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.96.37.93 2025-10-30T08:46:32+01:00 vpn Access-Reject 'shahriar' station: 185.96.37.93 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-10-26 11:50:25 (8 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.96.37.93 2025-10-26T11:31:58+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.96.37.93 2025-10-26T11:31:58+01:00 vpn Access-Reject 'admin' station: 185.96.37.93 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-10-20 16:51:32 (8 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.96.37.93 2025-10-20T17:23:32+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.96.37.93 2025-10-20T17:23:32+02:00 vpn Access-Reject 'administrator' station: 185.96.37.93 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-10-11 21:25:01 (8 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.96.37.93 2025-10-11T22:04:53+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.96.37.93 2025-10-11T22:04:53+02:00 vpn Access-Reject 'vpn28' station: 185.96.37.93 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 105.154.27.161

🇺🇸 74.125.113.146

🇺🇸 64.62.156.145

🇧🇪 34.156.93.245

🇺🇸 18.116.101.220

🇰🇷 14.33.48.192

🇺🇸 184.105.247.232

🇺🇸 136.67.10.133

🇻🇳 125.212.235.194

🇮🇳 116.68.76.154

🇺🇸 66.132.195.151

🇺🇸 66.132.195.19

🇮🇩 36.68.140.180

🇺🇸 23.94.92.98

🇨🇭 13.105.186.18

🇺🇸 2603:3026:431:9900:25ab:7402:e60a:45a8

🇨🇳 121.204.171.7

🇺🇸 109.105.210.55

🇫🇷 91.231.89.239

🇺🇸 34.182.203.143