JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.232.122.225

213.232.122.225 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 16%: ?

16%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.232.122.225

Whois 213.232.122.225

IP Abuse Reports for 213.232.122.225:

This IP address has been reported a total of 27 times from 18 distinct sources. 213.232.122.225 was first reported on March 25th 2023, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 zXero	2026-07-09 10:59:21 (6 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇨🇦 zXero	2026-07-07 12:52:55 (1 week ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇨🇦 zXero	2026-06-30 13:08:25 (2 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇨🇦 1gz	2026-06-19 02:10:29 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from FI. Action taken: CHALLENGE Protocol: HTTP/1.1 (POST ... show more Triggered Cloudflare WAF (firewallCustom) from FI. Action taken: CHALLENGE Protocol: HTTP/1.1 (POST method) Endpoint: /xmlrpc.php UA: Apache-HttpClient/4.5.13 (Java/11.0.31) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 zXero	2026-06-18 08:39:37 (3 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇪🇸 librebit	2026-06-13 09:14:37 (1 month ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-06-11 12:21:18 (1 month ago)	RDWeb scan	Web App Attack
🇨🇭 backslash	2026-04-01 23:33:01 (3 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-10 16:00:19 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 213.232.122.225 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 213.232.122.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 12:00:05.330485 2026] [security2:error] [pid 7973:tid 7973] [client 213.232.122.225:50097] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|vonkugelgen.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vonkugelgen.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abBABdmWNPQ1t8VrM5ZuNwAAAAg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-03 19:32:12 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 213.232.122.225 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 213.232.122.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 03 14:31:58.306617 2026] [security2:error] [pid 10456:tid 10456] [client 213.232.122.225:30341] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|digifonics.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "digifonics.com"] [uri "/"] [unique_id "aVlurmLZqv_hswfquLQbsgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-03 16:06:57 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 213.232.122.225 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 213.232.122.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 03 11:06:41.085956 2026] [security2:error] [pid 20956:tid 21063] [client 213.232.122.225:33825] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|leadingedgesupply.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "leadingedgesupply.com"] [uri "/"] [unique_id "aVk-kUoSEODcF2Ll2dlGhAAAAJE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-15 14:49:03 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-04-27 01:54:18 (1 year ago)	ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/213.232.122.225 2025 ... show more ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/213.232.122.225 2025-04-26 07:19:13 /+CSCOE+/logon.html show less	Web App Attack
Anonymous	2025-04-12 14:42:21 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.12 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.12 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-04-01 10:52:46 (1 year ago)	GlobalProtect login attempts with user LEANNB.	VPN IP Brute-Force

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.108.19.41

🇧🇷 2804:14c:b525:8042:a919:77e1:82e1:a5e7

🇩🇪 162.158.111.10

🇩🇪 94.219.3.248

🇨🇦 85.217.149.74

🇨🇦 85.217.149.48

🇨🇦 85.217.149.40

🇺🇸 66.132.186.239

🇫🇷 13.37.234.187

🇫🇷 194.163.128.113

🇦🇷 190.181.101.253

🇫🇷 185.144.24.198

🇮🇶 169.224.21.162

🇳🇱 160.119.69.16

🇨🇳 101.126.88.251

🇺🇸 100.49.117.77

🇨🇦 85.217.149.41

🇧🇷 2a09:bac1:1100:b0::61:2ae

🇰🇷 219.250.188.143

🇺🇸 199.195.251.168