JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.184.95.85

197.184.95.85 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 17%: ?

17%

ISP	RAIN GROUP HOLDINGS (PTY) LTD
Usage Type	Fixed Line ISP
ASN	AS37105
Hostname(s)	rain-197-184-95-85.rain.network
Domain Name	rain.co.za
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.184.95.85

Whois 197.184.95.85

IP Abuse Reports for 197.184.95.85:

This IP address has been reported a total of 5 times from 5 distinct sources. 197.184.95.85 was first reported on January 18th 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-20 14:25:37 (12 hours ago)	(mod_security) mod_security (id:210350) triggered by 197.184.95.85 (rain-197-184-95-85.rain.network) ... show more (mod_security) mod_security (id:210350) triggered by 197.184.95.85 (rain-197-184-95-85.rain.network): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:25:32.689953 2026] [security2:error] [pid 6075:tid 6075] [client 197.184.95.85:60744] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|bigholegolf.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bigholegolf.com"] [uri "/fastball"] [unique_id "aq_s3PIB0ZZ13qk9L_j6LwAAAAE"], referer: https://bigholegolf.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Zkillu	2026-08-19 21:42:24 (1 month ago)	UDP flood (DDoS) vs AS215599: 1148 pkts / 1.64 MB to UDP 80/8443 across 382 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 1148 pkts / 1.64 MB to UDP 80/8443 across 382 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:42:24 (1 month ago)	UDP flood (DDoS) vs AS215599: 1148 pkts / 1.64 MB to UDP 80/8443 across 382 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 1148 pkts / 1.64 MB to UDP 80/8443 across 382 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
Anonymous	2025-11-18 05:54:20 (10 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-01-18 05:08:36 (1 year ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 157.245.254.3

🇰🇿 89.218.69.66

🇮🇷 85.198.19.241

🇹🇼 61.222.211.114

🇬🇧 45.89.242.36

🇬🇧 193.163.125.123

🇩🇪 172.121.16.109

🇺🇸 172.81.61.132

🇺🇸 107.0.200.227

🇷🇺 81.28.167.30

🇺🇸 20.15.166.16

🇭🇺 195.199.210.194

🇺🇸 172.234.218.245

🇺🇸 136.0.39.68

🇺🇸 130.131.220.95

🇺🇸 129.121.139.106

🇮🇷 78.39.48.166

🇮🇷 78.38.84.140

🇧🇪 66.249.93.233

🇦🇺 45.133.6.98