JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.119.41.94

212.119.41.94 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 1%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.119.41.94

Whois 212.119.41.94

IP Abuse Reports for 212.119.41.94:

This IP address has been reported a total of 18 times from 11 distinct sources. 212.119.41.94 was first reported on November 24th 2021, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-02 21:51:25 (2 weeks ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2026-04-16 01:38:25 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 212.119.41.94 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 212.119.41.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 21:38:20.801971 2026] [security2:error] [pid 2247802:tid 2247802] [client 212.119.41.94:63869] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Cooper/Thumbs.db"] [unique_id "aeA9jApz48lB4XQ2JZRZxgAAAAo"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Cooper/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2026-04-10 09:27:40 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -55.488 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -55.488 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.2545.9 show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-17 00:29:18 (3 months ago)	(mod_security) mod_security (id:210350) triggered by 212.119.41.94 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 212.119.41.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 20:29:13.628382 2026] [security2:error] [pid 31188:tid 31197] [client 212.119.41.94:29325] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|coloradospringsdermatology.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "coloradospringsdermatology.com"] [uri "/"] [unique_id "abigWXS32YvJsoUb9MKEiwAAAUQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2025-12-04 10:23:33 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 212.119.41.94 2025-12-04T09:49:05+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 212.119.41.94 2025-12-04T09:49:05+01:00 vpn Access-Reject 'user03' station: 212.119.41.94 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-12-04 01:23:03 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 212.119.41.94 2025-12-04T00:45:52+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 212.119.41.94 2025-12-04T00:45:52+01:00 vpn Access-Reject 'test' station: 212.119.41.94 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
Anonymous	2025-12-02 03:54:41 (6 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.02 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.02 is noted in report timestamp show less	Hacking Brute-Force
🇨🇭 backslash	2025-11-19 12:10:05 (7 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-01 08:41:57 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 212.119.41.94 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 212.119.41.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 04:41:53.419516 2025] [security2:error] [pid 17384:tid 17384] [client 212.119.41.94:27463] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.talamancareserve.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.talamancareserve.com"] [uri "/"] [unique_id "aQXH0TyY_ZjS2O7uQUkUywAAAA0"], referer: https://www.facebook.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neogenius	2025-10-23 12:33:03 (7 months ago)	Web App Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-09-13 21:32:10 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 212.119.41.94 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 212.119.41.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 17:32:05.253119 2025] [security2:error] [pid 24145:tid 24145] [client 212.119.41.94:51095] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|studioarts.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "studioarts.net"] [uri "/"] [unique_id "aMXi1UK-6AkrzeTl2xb_LwAAAAM"], referer: https://www.facebook.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-03-22 02:31:04 (1 year ago)	(From [email protected]) We have a significant number of BTC in cold storage , and we happen t ... show more (From [email protected]) We have a significant number of BTC in cold storage , and we happen to be part of a group of investors who were granted exclusive contracts for the United States Federal Bitcoin Reserve. Go to this page to track how policy developments stand https://bitcoinreservemonitor.com We're looking for claim holders to assist us in operations carry out our portion of the contract. We have a limited amount Bitcoin acquired several years earlier. . .therefore, only a few claims are available. Stake sizes are available in one hundred dollars or one thousand dollars. The first claim stays for 10 days , after which your payout will be $200 or $2,000 - withdraw anytime you choose and for any amount later on. You're able to continue growing that yield every ten days for a maximum of 90 days. Take action quickly, because we are eliminating any associated fees and taxes while absorbing taxes and charges on our end. Contact us to start. Nate +1 (602) 551-6607 Text and WhatsApp nathan.unge show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-03-19 04:50:51 (1 year ago)	(From [email protected]) We have a significant number of BTC secured offline , and we happen ... show more (From [email protected]) We have a significant number of BTC secured offline , and we happen to be one of many investors that got awarded government-backed deals for the U.S. Federal Bitcoin Reserve. Go to this page to follow where policy developments stand https://bitcoinreservemonitor.com We require claim holders to help us operationally fulfill our share of the contract. We own a limited amount BTC bought a long time back. . .therefore, only a few claims are available. Claims are in units of $100 or $1,000. Your first stake remains for a period of ten days , after which your return is $200 or $2000 — take profits whenever you wish and whatever sum you prefer beyond that. You have the option to reinvest that yield each 10-day period up to three months. Act now, as we are waiving all advisory taxes and fees and covering taxes and fees ourselves. Reach out to us to begin. Nate +1 (602) 551-6607 Text and WhatsApp [email protected] Unger Cleaning Products \| Cleaning Tools for Pr show less	Phishing Web Spam
🇨🇦 wil.com	2024-09-24 10:22:56 (1 year ago)	GlobalProtect login attempts with user thughes.	VPN IP Brute-Force
🇷🇺 sms.ru	2024-09-22 11:05:05 (1 year ago)	SMS pumping attack from foreign country	DDoS Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.253

🇳🇱 192.253.248.56

🇨🇳 182.43.28.149

🇨🇳 122.225.202.130

🇻🇳 113.160.173.164

🇻🇳 113.23.49.90

🇮🇱 109.226.27.227

🇳🇱 80.82.77.48

🇮🇳 49.47.135.67

🇧🇪 34.78.29.97

🇮🇳 27.116.20.44

🇪🇹 196.188.93.169

🇺🇸 188.213.202.4

🇺🇸 156.232.13.218

🇱🇹 141.98.11.83

🇨🇦 85.217.149.21

🇨🇦 85.217.149.10

🇺🇸 68.129.68.171

🇭🇰 118.26.39.178

🇮🇳 49.36.9.105