JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.119.40.199

212.119.40.199 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 17%: ?

17%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.119.40.199

Whois 212.119.40.199

IP Abuse Reports for 212.119.40.199:

This IP address has been reported a total of 34 times from 18 distinct sources. 212.119.40.199 was first reported on September 19th 2023, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-09 01:00:15 (3 days ago)	Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Rate limit bad ... show more Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Rate limit bad session: 3 in 2s \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| (Magento Site) show less	DDoS Attack Bad Web Bot
Anonymous	2026-06-02 22:31:18 (1 week ago)	Forum/form spam	Web Spam
🇸🇬 mypatricks	2026-05-03 19:06:19 (1 month ago)	212.119.40.199 \| Port: 13536 \| DNS: 212.119.40.199 2026-05-04T03:06:18+08:00 America/New_York \| IPs ... show more 212.119.40.199 \| Port: 13536 \| DNS: 212.119.40.199 2026-05-04T03:06:18+08:00 America/New_York \| IPs Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.6495.76 Safari/537.36 OPR/147.0.6495.76 HTTP/1.1 443 GET \| URL: /cart/?c828cbfa00a88a4d0fc6cf242305f868=1776625454b \| Ref: - \| Country: US/United States/-08:00 IP City: New York City 9f618ac6ee530cae-EWR/Newark, NJ, United States 1 hits/0 secs Robots 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇺🇸 TPI-Abuse	2025-12-24 03:21:40 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 212.119.40.199 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 212.119.40.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 22:21:35.953286 2025] [security2:error] [pid 3253:tid 3253] [client 212.119.40.199:17749] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|labelrecord.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "labelrecord.com"] [uri "/"] [unique_id "aUtcP8qeYT_TOTlGsmIYRQAAABQ"], referer: https://www.facebook.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-11-17 16:50:26 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-11-07 00:20:34 (7 months ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-09-11 10:12:07 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 212.119.40.199 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 212.119.40.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 06:12:00.098665 2025] [security2:error] [pid 17597:tid 17597] [client 212.119.40.199:17671] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.mitchellamazing.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mitchellamazing.com"] [uri "/"] [unique_id "aMKgcCUZslCehf5GuYdZTgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-06 20:29:46 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 212.119.40.199 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 212.119.40.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 16:29:39.143518 2025] [security2:error] [pid 22186:tid 22186] [client 212.119.40.199:22589] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Longhorn II/Thumbs.db"] [unique_id "aLyZs4x3gSJCew26FsPTMwAAAAs"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Longhorn%20II/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 JCB	2025-07-25 15:33:00 (10 months ago)	212.119.40.199 - - [25/Jul/2025:17:01:34 +0300] "GET /my.policy HTTP/1.1" 404 416 "-" "Mozilla/5.0 ( ... show more 212.119.40.199 - - [25/Jul/2025:17:01:34 +0300] "GET /my.policy HTTP/1.1" 404 416 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" 212.119.40.199 - - [25/Jul/2025:17:01:35 +0300] "GET /owa/auth/logon.aspx HTTP/1.1" 404 416 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" ... show less	Hacking Web App Attack
🇨🇭 backslash	2025-05-23 22:25:06 (1 year ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 nowyouknow	2025-03-19 19:43:14 (1 year ago)	(From [email protected]) Place Your Bets at the Casino of Love! Take a Chance on Lov ... show more (From [email protected]) Place Your Bets at the Casino of Love! Take a Chance on Love – Your Jackpot Awaits! Love is the ultimate game of chance—but with the right odds, you could win big! At https://online-888.casino We’re not just about cards and chips; we’re about luscious women looking for a date. + Match with someone special + Exciting conversations & real chemistry + A fun & thrilling way to find romance Are you ready to roll the dice on love? Your perfect match might be just one click away! ++ Start Matching Now: https://online-888.casino Don’t miss your chance to hit the jackpot in love! https://online-888.casino Where Love is Always in Play... show less	Phishing Web Spam
🇺🇸 oncord	2025-03-18 06:37:14 (1 year ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2025-03-17 14:23:23 (1 year ago)	(From [email protected]) Our exclusive welcome offer: a 200% bonus up to €7,500 on your first ... show more (From [email protected]) Our exclusive welcome offer: a 200% bonus up to €7,500 on your first deposit! https://online-888.casino But that's not all. As a valued player, you'll also enjoy a 10% weekly cashback on your net losses, credited every Monday at 06:00 UTC—wager-free! Why choose Instant Casino? - Instant Withdrawals: Say goodbye to waiting—your winnings are processed instantly. - High Betting Limits: Elevate your gaming with bigger bets for bigger wins. - Over 3,000 Games: From slots to live casino, find your next favorite game. Don't miss out on this opportunity to boost your play and potential winnings. Click the link below to sign up and claim your bonus today! Start earning now: https://online-888.casino show less	Phishing Web Spam
🇦🇺 oncord	2025-03-13 17:17:49 (1 year ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2025-03-12 13:42:26 (1 year ago)	(From [email protected]) Our exclusive welcome offer: a 200% bonus up to €7,500 on your first d ... show more (From [email protected]) Our exclusive welcome offer: a 200% bonus up to €7,500 on your first deposit! https://online-888.casino But that's not all. As a valued player, you'll also enjoy a 10% weekly cashback on your net losses, credited every Monday at 06:00 UTC—wager-free! Why choose Instant Casino? - Instant Withdrawals: Say goodbye to waiting—your winnings are processed instantly. - High Betting Limits: Elevate your gaming with bigger bets for bigger wins. - Over 3,000 Games: From slots to live casino, find your next favorite game. Don't miss out on this opportunity to boost your play and potential winnings. Click the link below to sign up and claim your bonus today! Start earning now: https://online-888.casino show less	Phishing Web Spam

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.121

🇧🇷 168.181.30.216

🇩🇪 141.11.250.239

🇨🇳 123.165.81.163

🇨🇳 112.102.87.20

🇺🇸 35.222.117.243

🇰🇷 14.55.144.22

🇻🇪 200.90.8.90

🇲🇽 189.179.7.155

🇺🇸 173.10.13.21

🇺🇸 130.131.220.154

🇺🇸 75.101.184.59

🇳🇱 5.61.209.224

🇨🇱 186.189.96.169

🇺🇦 178.150.142.226

🇰🇷 175.126.37.156

🇰🇷 175.119.225.68

🇺🇸 162.216.149.161

🇳🇱 141.11.32.173

🇮🇳 136.232.11.10