JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.20.212.34

178.20.212.34 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 22%: ?

22%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.20.212.34

Whois 178.20.212.34

IP Abuse Reports for 178.20.212.34:

This IP address has been reported a total of 14 times from 11 distinct sources. 178.20.212.34 was first reported on June 10th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-06-09 17:42:00 (1 week ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇮🇩 Burayot	2026-06-03 00:56:23 (1 week ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 178.20.212.34 (SC/Seychelles/-): 1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 178.20.212.34 (SC/Seychelles/-): 1 in the last 3600 secs show less	Web App Attack
🇫🇷 tilellit.pro	2026-05-19 14:41:34 (4 weeks ago)	Fail2Ban banned 178.20.212.34 for security violations in jail wp-armour. Log: 2026/05/19 14:41:33 [e ... show more Fail2Ban banned 178.20.212.34 for security violations in jail wp-armour. Log: 2026/05/19 14:41:33 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 178.20.212.34 \| Target: wplogin" , client: 178.20.212.34, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇱🇻 garmtech.com	2026-05-16 16:04:08 (1 month ago)	Attempted access to sensitive endpoint (/wp-login.php) detected. Automated scan or unauthorized prob ... show more Attempted access to sensitive endpoint (/wp-login.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-16 02:42:47 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 178.20.212.34 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 178.20.212.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 22:42:40.414314 2026] [security2:error] [pid 2323155:tid 2323155] [client 178.20.212.34:13915] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Danbury II/Stetson Coffee/originals/Thumbs.db"] [unique_id "aeBMoFCkIrfS7f6vHKV3JgAAABQ"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Danbury%20II/Stetson%20Coffee/originals/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-03-11 13:18:00 (3 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇩🇪 london2038.com	2026-02-13 15:14:43 (4 months ago)	Detected by WP fail2ban 2026-02-13T16:14:42.360527+01:00 wordpress: Authentication attempt from 178. ... show more Detected by WP fail2ban 2026-02-13T16:14:42.360527+01:00 wordpress: Authentication attempt from 178.20.212.34 show less	Brute-Force Web App Attack
🇩🇪 HandyTreff.de	2025-11-29 05:36:40 (6 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -23.998 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -23.998 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.2609.5 show less	Bad Web Bot Web App Attack
Anonymous	2025-10-21 23:09:41 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.21 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.21 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-10-15 21:40:01 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 178.20.212.34 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 178.20.212.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 17:39:57.115706 2025] [security2:error] [pid 10729:tid 10729] [client 178.20.212.34:51673] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|agribrokers.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agribrokers.net"] [uri "/"] [unique_id "aPAUrVN0J-fEwhM0poNGTAAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-21 22:37:54 (9 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-08-20 00:36:57 (9 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇦 wil.com	2024-09-24 03:14:25 (1 year ago)	GlobalProtect login attempts with user asafir.	VPN IP Brute-Force
🇩🇪 Admins@FBN	2024-06-10 17:39:48 (2 years ago)	VPN Logon Failed: AAA user authentication Rejected user = <print>	Brute-Force Exploited Host

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.231.89.213

🇮🇳 206.183.111.36

🇧🇪 198.235.24.252

🇩🇪 194.59.206.2

🇨🇳 182.242.169.56

🇷🇺 94.230.136.33

🇻🇪 45.168.175.106

🇳🇱 45.153.34.87

🇬🇧 35.203.210.213

🇹🇷 212.68.58.7

🇺🇸 191.102.179.95

🇺🇸 154.217.253.190

🇨🇳 139.9.191.197

🇯🇵 126.8.253.206

🇨🇳 101.35.98.159

🇳🇱 93.174.93.12

🇺🇸 85.121.242.79

🇳🇱 81.19.216.120

🇧🇬 79.124.40.178

🇳🇱 45.148.10.157