JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.119.47.59

212.119.47.59 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 12%: ?

12%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.119.47.59

Whois 212.119.47.59

IP Abuse Reports for 212.119.47.59:

This IP address has been reported a total of 18 times from 10 distinct sources. 212.119.47.59 was first reported on February 4th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-08 22:00:28 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-07. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-05-11 10:00:13 (4 weeks ago)	(mod_security) mod_security (id:210350) triggered by 212.119.47.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 212.119.47.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 06:00:05.041156 2026] [security2:error] [pid 20190:tid 20190] [client 212.119.47.59:37787] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|restlesseye.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "restlesseye.com"] [uri "/"] [unique_id "agGopf8aIO735hwa4dGxEgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-15 20:24:35 (6 months ago)	(From [email protected]) Hi there, here is a video which shows you how to get $10K month ... show more (From [email protected]) Hi there, here is a video which shows you how to get $10K monthly in free advertising credits on Google Ads. View the YouTube video here: http://10k-youtubevideo.xyz If you're interested or have any questions private email me at: [email protected] Much Success! Ivan Ramirez http://10k-ad-accounts.xyz If you would like to opt-out of communication with us, visit:https://bit.ly/websiteoptout show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-10-05 02:26:07 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 212.119.47.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 212.119.47.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 22:25:59.231400 2025] [security2:error] [pid 22221:tid 22238] [client 212.119.47.59:52461] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|rainbowbb.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rainbowbb.com"] [uri "/"] [unique_id "aOHXN5G1FHcqJw-RVHsI3wAAAA4"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-03 03:28:46 (8 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-06-11 10:17:58 (11 months ago)	Ports: 80,443; Direction: 1; Trigger: LF_CXS	Brute-Force SSH
🇨🇿 lp	2025-02-27 14:49:50 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 212.119.47.59 2025-02-27T14:20:18+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 212.119.47.59 2025-02-27T14:20:18+01:00 vpn Access-Reject 'reorganization' station: 212.119.47.59 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2025-02-07 09:46:02 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇨🇿 lp	2025-01-30 01:21:59 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 212.119.47.59 2025-01-30T01:35:57+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 212.119.47.59 2025-01-30T01:35:57+01:00 vpn Access-Reject 'Industrial ' station: 212.119.47.59 auth-type: - realm: - nas: <redacted> called: <redacted> => address-pool: - msg: 'Rejected: User-Name contains whitespace' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2025-01-27 21:08:17 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇸🇪 OnTheEdge	2025-01-27 21:08:17 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇨🇿 lp	2025-01-22 20:50:21 (1 year ago)	Unauthorized VPN login attempts: 3 attempts were recorded from 212.119.47.59 2025-01-22T21:10:06+01: ... show more Unauthorized VPN login attempts: 3 attempts were recorded from 212.119.47.59 2025-01-22T21:10:06+01:00 vpn Access-Reject 'nonmanufactured' station: 212.119.47.59 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-01-22T21:11:12+01:00 vpn Access-Reject 'metalaw' station: 212.119.47.59 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-01-22T21:14:12+01:00 vpn Access-Reject 'faldstool' station: 212.119.47.59 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
Anonymous	2024-11-28 10:08:48 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2023-11-24 05:17:27 (2 years ago)	opencart admin attack from fail2ban ...	DDoS Attack Brute-Force SSH
🇵🇱 TI	2023-11-01 00:02:05 (2 years ago)	Scrapping website, using diffrent useragents, not wait for response, #botnet20231026	DDoS Attack Bad Web Bot

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.96.139.175

🇸🇬 194.5.82.143

🇧🇷 170.80.65.140

🇨🇳 106.13.10.111

🇬🇧 101.36.97.74

🇷🇺 78.36.41.213

🇳🇱 34.91.82.12

🇨🇦 20.104.72.147

🇷🇴 2.57.121.25

🇦🇪 195.229.76.26

🇲🇾 182.62.24.202

🇩🇪 176.65.132.22

🇦🇷 168.197.250.14

🇻🇳 103.195.236.35

🇨🇳 59.52.178.11

🇭🇰 223.197.186.7

🇪🇸 172.233.96.208

🇮🇳 152.59.36.193

🇮🇪 109.77.21.5

🇸🇬 101.47.156.170