JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.18.113.206

212.18.113.206 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 28%: ?

28%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.18.113.206

Whois 212.18.113.206

IP Abuse Reports for 212.18.113.206:

This IP address has been reported a total of 17 times from 10 distinct sources. 212.18.113.206 was first reported on May 31st 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-08-27 00:00:28 (1 day ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇮🇩 sockominfo	2026-08-26 23:00:09 (1 day ago)	Active Response: IP 212.18.113.206 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Re ... show more Active Response: IP 212.18.113.206 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
Anonymous	2026-08-25 18:55:29 (2 days ago)	AGERADE WEBFORM SPAM 212.18.113.206 (212.18.113.206)	Web Spam
🇮🇩 sockominfo	2026-08-25 04:00:28 (3 days ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇺🇸 TPI-Abuse	2026-08-24 02:38:16 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 212.18.113.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 212.18.113.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 22:38:09.335048 2026] [security2:error] [pid 13676:tid 13676] [client 212.18.113.206:62625] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|primacomm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "primacomm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aouukbj8wE267-36DtT3lQAAAAw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-08-07 22:17:50 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-17.212.18.113.206.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-17.212.18.113.206.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-22 07:15:07 (3 months ago)	(mod_security) mod_security (id:211030) triggered by 212.18.113.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:211030) triggered by 212.18.113.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 03:15:02.509050 2026] [security2:error] [pid 30263:tid 30263] [client 212.18.113.206:38963] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack\|\|www.skipspsaexchange.com\|F\|2"] [data "Matched Data: ('~'\|\|( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.skipspsaexchange.com"] [uri "/index.php"] [unique_id "ahACdtJQ9N0qqJCehJYMQgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-25 11:30:06 (6 months ago)	VPN password spraying	Brute-Force
🇬🇧 Steve	2026-02-22 03:08:21 (6 months ago)	Repeated attempts against wordpress site	Brute-Force Web App Attack
🇫🇷 Tilellit.PRO	2026-02-12 00:11:34 (6 months ago)	Fail2Ban banned 212.18.113.206 for security violations in jail wp-armour. Log: 2026/02/12 00:11:34 [ ... show more Fail2Ban banned 212.18.113.206 for security violations in jail wp-armour. Log: 2026/02/12 00:11:34 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 212.18.113.206 \| Target: wplogin" , client: 212.18.113.206, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇨🇿 lp	2025-08-01 21:22:07 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 212.18.113.206 2025-08-01T21:57:52+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 212.18.113.206 2025-08-01T21:57:52+02:00 vpn Access-Reject 'chernandez' station: 212.18.113.206 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-16 21:21:19 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 212.18.113.206 2025-07-16T23:13:59+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 212.18.113.206 2025-07-16T23:13:59+02:00 vpn Access-Reject 'alphasphere' station: 212.18.113.206 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-15 01:51:20 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 212.18.113.206 2025-07-15T02:52:12+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 212.18.113.206 2025-07-15T02:52:12+02:00 vpn Access-Reject 'DroneCyto' station: 212.18.113.206 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇷🇺 sms.ru	2024-09-27 19:10:06 (1 year ago)	SMS pumping attack from foreign country	DDoS Attack
🇩🇪 NxtGenIT	2024-06-09 20:00:36 (2 years ago)	212.18.113.206 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Atte ... show more 212.18.113.206 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 74.48.45.140

🇮🇩 36.80.190.112

🇺🇸 13.89.124.81

🇨🇦 4.205.62.107

🇮🇪 2a05:d018:1d9d:e702:5703:f4f5:7d5f:ec1c

🇺🇸 162.0.229.50

🇺🇸 73.251.79.73

🇺🇸 66.67.128.21

🇺🇸 65.49.1.162

🇺🇸 20.171.12.247

🇺🇸 2001:470:1:c84::207

🇦🇷 186.148.138.243

🇻🇳 180.93.35.43

🇫🇮 147.185.133.56

🇺🇸 147.185.132.149

🇨🇳 117.188.182.246

🇨🇦 104.251.42.207

🇷🇺 95.108.213.88

🇺🇦 91.215.146.86

🇳🇱 89.248.165.203