JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.20.212.241

178.20.212.241 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.20.212.241

Whois 178.20.212.241

IP Abuse Reports for 178.20.212.241:

This IP address has been reported a total of 24 times from 11 distinct sources. 178.20.212.241 was first reported on February 4th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 sefinek.net	2026-04-08 05:32:11 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Reinhard	2025-07-27 23:49:26 (10 months ago)	Harvesting non-existent pages or unknown malicious BOT.	Bad Web Bot
🇺🇸 webgobe	2025-06-21 02:12:24 (11 months ago)	jow-Joomla User : try to access forms...	Hacking
🇨🇭 backslash	2025-06-18 21:30:06 (11 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 webgobe	2025-06-03 18:51:40 (1 year ago)	jow-Joomla User : try to access forms...	Hacking
🇺🇸 TPI-Abuse	2025-05-16 02:14:22 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 178.20.212.241 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 178.20.212.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 15 22:14:16.624088 2025] [security2:error] [pid 601063:tid 601063] [client 178.20.212.241:46107] [client 178.20.212.241] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|michaelmoorefield.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "michaelmoorefield.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aCafeLd9NC9StxaK8BdsogAAAAE"], referer: https://michaelmoorefield.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2025-05-12 01:00:14 (1 year ago)	WAF: Old style account creation and modification in Joomla! 2- wsit	Email Spam Brute-Force
🇷🇺 sms.ru	2024-09-25 08:55:05 (1 year ago)	SMS pumping attack from foreign country	DDoS Attack
🇻🇳 Xuan Can	2024-09-03 06:26:00 (1 year ago)	(mod_security) mod_security (id:6) triggered by 178.20.212.241 (GB/United Kingdom/-): 1 in the last ... show more (mod_security) mod_security (id:6) triggered by 178.20.212.241 (GB/United Kingdom/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 13:25:53.368272 2024] [security2:error] [pid 32097:tid 32130] [client 178.20.212.241:19943] [client 178.20.212.241] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "sieuthimaychu.vn"] [uri "/wp-login.php"] [unique_id "Ztar8RtYNvcPBPhEtYSfbAAAAQY"] show less	Brute-Force SSH
🇺🇸 hostseries	2024-08-31 12:55:26 (1 year ago)	Trigger: LF_DISTATTACK	Brute-Force
Anonymous	2024-08-12 17:35:08 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇨🇭 backslash	2024-05-23 04:25:02 (2 years ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2024-04-14 09:11:03 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 178.20.212.241 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 178.20.212.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 14 05:10:56.191618 2024] [security2:error] [pid 1675] [client 178.20.212.241:42311] [client 178.20.212.241] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Bermuda/Thumbs.db"] [unique_id "ZhudoNtKF4ECuVYzeTjwnwAAAAg"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Bermuda/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2024-04-11 10:55:02 (2 years ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 hostseries	2024-04-06 16:51:02 (2 years ago)	Trigger: LF_DISTATTACK	Brute-Force

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.109.252.228

🇰🇷 222.108.147.76

🇺🇿 213.230.127.102

🇰🇿 212.96.82.36

🇬🇧 195.206.182.208

🇧🇴 190.129.21.103

🇺🇿 188.113.197.250

🇨🇳 183.210.93.70

🇷🇺 176.15.244.220

🇩🇿 154.255.46.16

🇮🇳 122.161.77.0

🇹🇯 109.75.49.180

🇨🇳 106.12.29.184

🇺🇸 96.126.101.89

🇰🇿 95.182.106.71

🇰🇿 95.82.64.91

🇰🇿 95.59.247.117

🇰🇿 92.55.171.73

🇺🇿 84.54.72.167

🇩🇪 64.226.116.41