AbuseIPDB » 212.119.41.15
212.119.41.15
This IP was reported 9 times. Confidence of
Abuse
is 0% : ?
ISP
FINE GROUP SERVERS SOLUTIONS LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS35830
Domain Name
finegroupservers.com
Country
🇺🇸
United States of America
City
New York City, New York
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 212.119.41.15 :
This IP address has been reported a total of
9
times from
8 distinct
sources.
212.119.41.15 was first reported on
September 6th 2023 , and the most recent report was
4 months ago
Old Reports:
The most recent abuse report for this IP address is from
4 months ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇲🇹
Malta
2026-01-22 21:28:46
(4 months ago)
212.119.41.15 - - [22/Jan/2026:22:28:46 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ...
show more
212.119.41.15 - - [22/Jan/2026:22:28:46 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
VPN IP
Hacking
Web App Attack
🇮🇩
Burayot
2025-12-21 07:04:29
(5 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 212.119.41.15 (IL/Israel/-): 1 in t ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 212.119.41.15 (IL/Israel/-): 1 in the last 3600 secs
show less
Web App Attack
🇨🇦
wil.com
2024-09-24 07:30:26
(1 year ago)
GlobalProtect login attempts with user smaldonado.
VPN IP
Brute-Force
🇺🇸
TPI-Abuse
2023-12-29 13:06:30
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 212.119.41.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 212.119.41.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 29 08:06:24.280911 2023] [security2:error] [pid 15099] [client 212.119.41.15:10061] [client 212.119.41.15] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||portalvasco.com|F|2"] [data ".barracuda.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "portalvasco.com"] [uri "/blog/2013/04/dns-publicos-opendns-vs-norton-dns/www.barracuda.com"] [unique_id "ZY7EULIjJU98dfKUseyIpAAAAAU"], referer: https://portalvasco.com/blog/?p=7362
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Roderic
2023-12-17 23:03:05
(2 years ago)
(apache-bow-document) Failed apache-bow-scanners trigger with match [redacted] from 212.119.41.15 (I ...
show more
(apache-bow-document) Failed apache-bow-scanners trigger with match [redacted] from 212.119.41.15 (IL/Israel/-)
show less
Hacking
🇺🇸
ChamberofCommerce.com
2023-12-14 01:25:06
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot
🇨🇭
backslash
2023-10-06 23:55:07
(2 years ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
2023-09-08 10:04:02
(2 years ago)
Malicious activity detected
Hacking
Web App Attack
🇨🇭
backslash
2023-09-06 12:06:21
(2 years ago)
honeypot
Bad Web Bot
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: