JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.232.121.142

213.232.121.142 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 27%: ?

27%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.232.121.142

Whois 213.232.121.142

IP Abuse Reports for 213.232.121.142:

This IP address has been reported a total of 11 times from 7 distinct sources. 213.232.121.142 was first reported on December 7th 2020, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 securejdprop	2026-07-02 21:38:01 (19 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 213.232.121.142 pe ... show more This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 213.232.121.142 performed 'crowdsecurity/http-bad-user-agent' (2 events over 2.137404163s) at 2026-07-02 21:37:52.837279444 +0000 UTC show less	Hacking Web App Attack Bad Web Bot
🇨🇭 Origon	2026-07-02 19:26:19 (21 hours ago)	http-bad-user-agent - IP: 213.232.121.142 - time="2026-07-02T21:26:19+02:00" level=info msg="(555f6 ... show more http-bad-user-agent - IP: 213.232.121.142 - time="2026-07-02T21:26:19+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 213.232.121.142 (RU/35830) : 4h ban on Ip 213.232.121.142" module=db show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-06 06:00:37 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 213.232.121.142 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 213.232.121.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 02:00:19.506225 2026] [security2:error] [pid 10961:tid 10961] [client 213.232.121.142:19177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|otfes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "otfes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiO3c4OcNfjc2D9myTtocgAAAAg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-06-02 02:19:08 (1 month ago)	[TueJun0204:19:00.2303882026][security2:error][pid3745436:tid3745882][client213.232.121.142:0]ModSec ... show more [TueJun0204:19:00.2303882026][security2:error][pid3745436:tid3745882][client213.232.121.142:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"server6.hostingedominio.ch\"][uri\"/xmlrpc.php\"][unique_id\"ah49lG6I5XTRXmeIEmoEugAAAMc\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-05-21 11:19:31 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 213.232.121.142 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 213.232.121.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 07:19:13.830796 2026] [security2:error] [pid 21600:tid 21600] [client 213.232.121.142:38069] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ohnosound.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ohnosound.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag7qMZlK1S0Y_Y0SRKhFmQAAABE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-17 22:50:10 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 213.232.121.142 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 213.232.121.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 18:49:53.898722 2026] [security2:error] [pid 31243:tid 31243] [client 213.232.121.142:52397] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|visitcampbellford.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "visitcampbellford.com"] [uri "/visitcampbellford.com"] [unique_id "agpGERYqeW31yQP-4VBIqgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-05-12 10:41:56 (1 month ago)	http-bad-user-agent - IP: 213.232.121.142 - time="2026-05-12T12:41:56+02:00" level=info msg="(555f6 ... show more http-bad-user-agent - IP: 213.232.121.142 - time="2026-05-12T12:41:56+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 213.232.121.142 (RU/35830) : 4h ban on Ip 213.232.121.142" module=db show less	Bad Web Bot
🇩🇪 rh24	2026-05-12 03:04:01 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 213.232.121.142 (RU/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 213.232.121.142 (RU/Russia/-) show less	Bad Web Bot
Anonymous	2021-05-28 15:45:00 (5 years ago)	Credential Stuffing	Brute-Force
Anonymous	2020-12-07 03:58:18 (5 years ago)	botnet web app atack	Web App Attack
Anonymous	2020-12-07 03:58:18 (5 years ago)	botnet web app atack	Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 59.179.31.237

🇺🇸 205.210.31.90

🇺🇸 198.199.94.79

🇰🇷 112.164.240.110

🇰🇷 59.15.58.148

🇧🇷 170.0.62.246

🇲🇴 125.31.2.160

🇺🇸 74.7.175.187

🇩🇪 62.133.60.87

🇭🇰 58.152.42.174

🇺🇸 20.64.106.140

🇹🇼 1.173.49.41

🇨🇭 209.99.187.20

🇧🇷 205.210.31.199

🇨🇱 186.10.86.130

🇸🇪 171.25.158.70

🇵🇰 154.208.41.95

🇮🇳 150.107.232.194

🇺🇸 108.205.162.250

🇳🇱 91.92.40.176