JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

212.18.113.193

Recent Activity

Abuse Confidence Score

18% Caution

35 reports

15 reporters · latest 14 hours ago

ISP: FINE GROUP SERVERS SOLUTIONS LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS46475
Domain Name: finegroupservers.com
Country: 🇫🇷 France
City: Paris, Ile-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

35 from 15 distinct reporters

First reported

August 24th 2024

Most recent report

14 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 3 🇨🇿 Czechia 1 🇸🇮 Slovenia 1

Most common categories Brute-Force 5 Bad Web Bot 4 Web App Attack 4 Port Scan 1 Email Spam 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-06 21:11:36 UTC · (14 hours ago)	(mod_security) mod_security (id:210350) triggered by 212.18.113.193 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 16:11:31.637913 2026] [security2:error] [pid 4938:tid 4938] [client 212.18.113.193:33377] M ... show more (mod_security) mod_security (id:210350) triggered by 212.18.113.193 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 16:11:31.637913 2026] [security2:error] [pid 4938:tid 4938] [client 212.18.113.193:33377] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|asiabeef.network\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "asiabeef.network"] [uri "/symposium-presentations.html"] [unique_id "au5Cg4kvp6AVbmILFDH05QAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-05 14:53:38 UTC · (1 day ago)	(mod_security) mod_security (id:210350) triggered by 212.18.113.193 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 09:53:35.840966 2026] [security2:error] [pid 8291:tid 8291] [client 212.18.113.193:19987] M ... show more (mod_security) mod_security (id:210350) triggered by 212.18.113.193 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 09:53:35.840966 2026] [security2:error] [pid 8291:tid 8291] [client 212.18.113.193:19987] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.inquiryroom.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.inquiryroom.com"] [uri "/Joseh_Bellamy_And_Duty_Faith.html"] [unique_id "auyYb8JKdtxpNR08tBjEbAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-26 20:03:00 UTC · (1 week ago)	(mod_security) mod_security (id:210350) triggered by 212.18.113.193 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 16:02:56.143084 2026] [security2:error] [pid 11921:tid 11921] [client 212.18.113.193:36577] ... show more (mod_security) mod_security (id:210350) triggered by 212.18.113.193 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 16:02:56.143084 2026] [security2:error] [pid 11921:tid 11921] [client 212.18.113.193:36577] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|salernospizza.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "salernospizza.com"] [uri "/what-is-antipasto/"] [unique_id "at-x8F-RC7bi5U0ERZhiygAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇮 administrator	2026-10-22 22:05:49 UTC · (2 weeks ago)	2026-10-19 11:35:02,595 fail2ban.actions [1165]: NOTICE [apache-fakegooglebot] Ban 212.18.113.193 2026-10-19 11:35:02,595 fail2ban.actions [1165]: NOTICE [apache-fakegooglebot] Ban 212.18.113.193 2026-10-19 11:35:02,595 fail2ban.actio ... show more 2026-10-19 11:35:02,595 fail2ban.actions [1165]: NOTICE [apache-fakegooglebot] Ban 212.18.113.193 2026-10-19 11:35:02,595 fail2ban.actions [1165]: NOTICE [apache-fakegooglebot] Ban 212.18.113.193 2026-10-19 11:35:02,595 fail2ban.actions [1165]: NOTICE [apache-fakegooglebot] Ban 212.18.113.193 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇨🇿 Countryman	2026-09-12 00:10:01 UTC · (1 month ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇦🇺 oncord	2026-08-29 00:59:05 UTC · (2 months ago)	Form spam	Web Spam
🇨🇭 backslash	2026-08-12 10:33:00 UTC · (2 months ago)		Web Spam
🇯🇵 VXG-NET	2026-08-07 16:23:51 UTC · (2 months ago)	port=80, indicator_type=code-execution	Hacking
Anonymous	2026-07-21 11:30:07 UTC · (3 months ago)	SQL Injection.	SQL Injection
🇦🇹 neo72	2026-07-03 08:15:22 UTC · (4 months ago)	Detected malicious activity - bulk block	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-05-30 18:51:38 UTC · (5 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TRoden	2026-04-16 15:27:32 UTC · (6 months ago)	Geo Block Plugin: Escalation flag(s): rce_attempt	Hacking
🇺🇸 TPI-Abuse	2026-02-04 19:02:55 UTC · (9 months ago)	(mod_security) mod_security (id:225170) triggered by 212.18.113.193 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 14:02:48.548271 2026] [security2:error] [pid 13690:tid 13690] [client 212.18.113.193:23241] ... show more (mod_security) mod_security (id:225170) triggered by 212.18.113.193 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 14:02:48.548271 2026] [security2:error] [pid 13690:tid 13690] [client 212.18.113.193:23241] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gonzalez.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYOX2Py6szeaKb9tRV-L3QAAACI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Psycho Solutions LLC	2026-01-24 02:06:07 UTC · (9 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 1/24/2026 2:06 am (UTC-6)	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 nationaleventpros.com	2025-05-15 01:28:17 UTC · (1 year ago)	web form spam (Nilsimsa: 6sEFPIvTIdrDVgQZ2AIoKkAIY16Ww4cV8a7E3DmZ0C8)	Web Spam

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2620:ce:e001::4d3:0:0

🇩🇪 213.209.159.238

🇮🇹 185.55.211.135

🇺🇸 162.216.149.190

🇻🇳 118.69.65.12

🇸🇬 85.203.23.82

🇳🇱 45.148.10.233

🇳🇱 45.148.10.152

🇧🇪 35.206.181.209

🇺🇸 162.216.149.145

🇺🇸 162.216.149.74

🇹🇼 111.70.3.156

🇹🇼 111.70.2.191

🇨🇦 85.217.149.20

🇨🇦 85.217.149.10

🇺🇸 76.143.18.67

🇹🇳 41.226.212.48

🇳🇱 31.14.32.7

🇻🇪 186.14.225.33

🇺🇸 176.46.130.127