JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.119.41.97

212.119.41.97 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 2%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.119.41.97

Whois 212.119.41.97

IP Abuse Reports for 212.119.41.97:

This IP address has been reported a total of 13 times from 9 distinct sources. 212.119.41.97 was first reported on September 15th 2021, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-05-18 08:51:03 (2 weeks ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇨🇭 backslash	2026-04-16 14:12:01 (1 month ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-11 12:27:56 (4 months ago)	(mod_security) mod_security (id:210350) triggered by 212.119.41.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 212.119.41.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 11 07:27:49.363905 2026] [security2:error] [pid 31193:tid 31193] [client 212.119.41.97:39559] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|marionenv.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "marionenv.com"] [uri "/"] [unique_id "aWOXRaLhKCigx0MoKwXuGgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-12-22 01:27:44 (5 months ago)	(From [email protected]) Hi, Your website is losing customers. People don’t “browse” ... show more (From [email protected]) Hi, Your website is losing customers. People don’t “browse” anymore — they ask. And if your homepage can’t answer instantly, they leave. Add a FREE AI voice & chat agent to your site in 2 minutes. Let visitors ask questions — and convert them before they bounce. Modern websites talk. Old ones lose. Install your free agent: https://www.olleh.ai Need help? Contact [email protected] Best Regards, Wilmer Zylstra If at any point you no longer want to receive further communications from our side, feel free to fill the form at bit. ly/fillunsubform with your domain address (URL). Rankestra?E 52, Kensington, CA, USA, 95824 show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-12-03 06:37:34 (6 months ago)	(From [email protected]) Hey there, We are a financial services and advisory firm mand ... show more (From [email protected]) Hey there, We are a financial services and advisory firm mandated by our investors to seek business opportunities and projects for possible funding and debt capital financing. Please note that our investors are from the Gulf region. They intend to invest in viable business ventures or projects that you are currently executing or plan to embark upon as a means of expanding your (their) global portfolio. We are eager to have more discussions on this subject in any way you believe suitable. Please get in touch with me at my direct email: [email protected] Looking forward to working with you. Cheers, Mr. Nassar Jaralla Al-Marri Financial Advisor Dejla Consulting LLC Please Reply to: [email protected] Let's turn your ideas into reality! show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-11-10 23:48:59 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 212.119.41.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 212.119.41.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 18:48:52.438595 2025] [security2:error] [pid 22922:tid 22922] [client 212.119.41.97:45415] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|morninginc.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "morninginc.com"] [uri "/"] [unique_id "aRJ55LaqKzeGPEUPZtfnywAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2025-11-07 20:51:46 (6 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-10-28 12:27:32 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 212.119.41.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.119.41.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 08:27:27.453593 2025] [security2:error] [pid 6435:tid 6435] [client 212.119.41.97:23567] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|staben.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staben.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQC2r_GPRL4cxSk0gsMsDgAAAAk"], referer: https://staben.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-28 01:02:11 (9 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇷🇺 sms.ru	2024-09-25 16:25:03 (1 year ago)	SMS pumping attack from foreign country	DDoS Attack
🇨🇦 wil.com	2024-09-25 00:27:42 (1 year ago)	GlobalProtect login attempts with user cTucker.	VPN IP Brute-Force
🇺🇸 hostseries	2024-08-31 11:35:40 (1 year ago)	Trigger: LF_DISTATTACK	Brute-Force
🇮🇪 RoboSOC	2021-09-15 19:42:21 (4 years ago)	HTTP SQL Injection Attempt , PTR: PTR record not found	SQL Injection

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇫🇷 173.249.52.138

🇷🇺 84.201.243.44

🇭🇰 47.243.222.203

🇫🇮 147.185.133.169

🇨🇳 112.123.17.134

🇬🇷 83.235.16.111

🇧🇬 78.128.113.46

🇺🇸 66.132.172.185

🇷🇺 37.110.113.113

🇮🇳 20.197.49.178

🇨🇭 209.99.184.143

🇹🇭 203.154.158.195

🇮🇳 182.18.180.44

🇯🇵 118.193.61.170

🇺🇸 85.208.96.212

🇺🇦 77.87.40.114

🇺🇸 66.132.172.218

🇺🇸 2607:f8b0:4001:c5f::12b

🇹🇼 198.235.24.39