JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.119.41.170

212.119.41.170 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 11%: ?

11%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.119.41.170

Whois 212.119.41.170

IP Abuse Reports for 212.119.41.170:

This IP address has been reported a total of 13 times from 7 distinct sources. 212.119.41.170 was first reported on October 21st 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-13 03:20:59 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 212.119.41.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 212.119.41.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 23:20:55.112879 2026] [security2:error] [pid 28609:tid 28609] [client 212.119.41.170:57393] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|watersideaccommodation.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "watersideaccommodation.com"] [uri "/"] [unique_id "aizMlzDXok28Vlm-tMl0LgAAAAg"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Oakley	2026-05-16 05:19:38 (1 month ago)	(mod_security) mod_security (id:900178) triggered by 212.119.41.170 (IL/Israel/-): 5 in the last 900 ... show more (mod_security) mod_security (id:900178) triggered by 212.119.41.170 (IL/Israel/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-04-19 02:13:23 (2 months ago)	(mod_security) mod_security (id:210350) triggered by 212.119.41.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 212.119.41.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 22:13:17.017897 2026] [security2:error] [pid 1273882:tid 1273882] [client 212.119.41.170:29023] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|handcraftedparquet.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "handcraftedparquet.com"] [uri "/"] [unique_id "aeQ6PQ1NLc3Rg3v7tYb1dQAAAAE"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-27 21:19:38 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 212.119.41.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 212.119.41.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 16:19:35.363935 2026] [security2:error] [pid 9465:tid 9465] [client 212.119.41.170:57849] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rustyog.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rustyog.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aaIKZ4GJsHpqn5gPfOayvgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 EchoGuard	2026-02-15 14:57:41 (4 months ago)	FortiGate SSL VPN login failures	VPN IP Brute-Force
🇺🇸 fbarela	2026-02-13 10:00:05 (4 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-08-12 16:34:21 (10 months ago)	(mod_security) mod_security (id:210831) triggered by 212.119.41.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 212.119.41.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 12 12:34:12.888510 2025] [security2:error] [pid 29155:tid 29155] [client 212.119.41.170:60753] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/webalizer/usage_202508.html"] [unique_id "aJttBFdK-aaZtmx1FzZ9BAAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-05-03 05:35:09 (1 year ago)	block ruleset 486D2EE5E731CC049D1E480D68D04DFFE28AADF1	Bad Web Bot
🇺🇸 nowyouknow	2025-04-17 22:31:41 (1 year ago)	(From [email protected]) Hi, Your brand deserves to stand out, and we’re here to help. At ... show more (From [email protected]) Hi, Your brand deserves to stand out, and we’re here to help. At Global Wide PR, we specialize in connecting businesses with top media platforms to increase visibility and credibility. As a gesture to get started, we’re offering a free article on Digital Journal—a great way to showcase your business to a wider audience. For those looking to maximize exposure, we can also feature your brand on affiliates of FOX, NBC, CBS, ABC, and 300+ other sites for just $297. These placements can help you build trust and attract new customers. To take advantage of this opportunity, click the link below to sign up on our site, and we’ll get back to you ASAP: https://bit.ly/gwidepressrelease Looking forward to helping your brand shine! Best regards, Claudine Global Wide PR We respect that our emails may not always be relevant. To stop receiving communications from us, please submit the unsubscribe form with your website address: bit. ly/unsubscribemeurl show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-04-15 21:35:13 (1 year ago)	(From [email protected]) Hi, Your brand deserves to stand out, and we’re here to help. At ... show more (From [email protected]) Hi, Your brand deserves to stand out, and we’re here to help. At Global Wide PR, we specialize in connecting businesses with top media platforms to increase visibility and credibility. As a gesture to get started, we’re offering a free article on Digital Journal—a great way to showcase your business to a wider audience. For those looking to maximize exposure, we can also feature your brand on affiliates of FOX, NBC, CBS, ABC, and 300+ other sites for just $297. These placements can help you build trust and attract new customers. To take advantage of this opportunity, click the link below to sign up on our site, and we’ll get back to you ASAP: https://bit.ly/gwidepressrelease Looking forward to helping your brand shine! Best regards, Claudine Global Wide PR We understand that you may wish to unsubscribe. To opt out of our emails, please submit the unsubscribe form with your website address: bit. ly/unsubscribemeurl show less	Phishing Web Spam
Anonymous	2025-04-15 00:38:46 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 nowyouknow	2025-04-13 01:51:46 (1 year ago)	(From [email protected]) Hi, Your brand deserves to stand out, and we’re here to help. At ... show more (From [email protected]) Hi, Your brand deserves to stand out, and we’re here to help. At Global Wide PR, we specialize in connecting businesses with top media platforms to increase visibility and credibility. As a gesture to get started, we’re offering a free article on Digital Journal—a great way to showcase your business to a wider audience. For those looking to maximize exposure, we can also feature your brand on affiliates of FOX, NBC, CBS, ABC, and 300+ other sites for just $297. These placements can help you build trust and attract new customers. To take advantage of this opportunity, click the link below to sign up on our site, and we’ll get back to you ASAP: https://bit.ly/gwidepressrelease Looking forward to helping your brand shine! Best regards, Claudine Global Wide PR We value your preferences and understand that our emails may not always be relevant. To unsubscribe from our list, please complete the form here with your website address: bit. ly/unsubscribemeurl show less	Phishing Web Spam
🇨🇭 backslash	2021-10-21 23:42:22 (4 years ago)		SQL Injection

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 216.73.162.135

🇨🇭 209.99.190.113

🇮🇳 206.1.62.191

🇺🇸 205.210.31.55

🇮🇹 194.60.212.202

🇲🇽 189.168.8.157

🇩🇪 148.153.140.123

🇺🇸 45.79.114.248

🇨🇳 36.106.167.83

🇮🇳 13.71.92.229

🇨🇳 1.71.15.127

🇧🇷 177.54.62.68

🇺🇸 156.232.13.161

🇮🇷 78.39.48.166

🇧🇷 45.166.119.204

🇩🇪 31.97.33.35

🇪🇸 2a05:d011:d07:5801:cd80:adaf:941c:8696

🇹🇭 203.150.107.244

🇯🇵 92.113.142.203

🇲🇾 47.250.122.117