JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.237.119.119

212.237.119.119 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 22%: ?

22%

ISP	Kurdistan Net Company for Computer and Internet Ltd.
Usage Type	Fixed Line ISP
ASN	AS206206
Domain Name	knet-telecom.com
Country	🇮🇶 Iraq
City	Dihok, Duhok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.237.119.119

Whois 212.237.119.119

IP Abuse Reports for 212.237.119.119:

This IP address has been reported a total of 29 times from 20 distinct sources. 212.237.119.119 was first reported on June 7th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-07-22 05:56:34 (2 days ago)	Brute force	Brute-Force
🇺🇸 gui-ying233	2026-07-11 00:02:38 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-07-01 00:09:01 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
Anonymous	2026-06-28 13:48:55 (3 weeks ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Heavy query parameter abuse: /brands/revolabs.html?dir=asc&limit=40&mode=grid&order=revenue \| UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 gui-ying233	2026-06-14 00:08:41 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-05-31 15:07:40 (1 month ago)	Unauthorized VPN login attempts	Hacking Brute-Force
🇷🇴 INTEQ	2026-04-18 15:45:29 (3 months ago)	Web attack from 212.237.119.119	Web App Attack
🇩🇪 big-cloud.nl	2026-04-11 13:26:25 (3 months ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 kosada.com	2026-03-11 17:01:31 (4 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 matt	2026-03-04 02:35:03 (4 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack
Anonymous	2026-02-18 21:36:15 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.02.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.02.18 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 filstal.org	2026-02-11 13:13:32 (5 months ago)	CrowdSec-Report: crowdsecurity/dovecot-spam	Email Spam Brute-Force
🇺🇸 gui-ying233	2026-01-31 00:14:31 (5 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-23 11:27:19 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 212.237.119.119 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 212.237.119.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 23 06:27:13.407031 2026] [security2:error] [pid 21459:tid 21459] [client 212.237.119.119:3872] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.raintechgutters.com\|F\|2"] [data ".raintechgutters.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.raintechgutters.com"] [uri "/gutter-system-contractors-orlando/www.raintechgutters.com"] [unique_id "aXNbEcELGJiVw2_f8o8RWQAAAAA"], referer: http://www.raintechgutters.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇵🇹 Subnet Shadow Specter	2025-12-20 13:52:14 (7 months ago)	Abusive crawling/scraping. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/5 ... show more Abusive crawling/scraping. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36. Auto blocked and Banned. show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2600:1f18:3796:6f00:7926:36dc:a925:d99d

🇩🇪 167.94.146.73

🇭🇰 150.5.169.176

🇫🇮 147.185.133.97

🇺🇸 147.182.138.29

🇩🇪 118.193.59.15

🇺🇸 47.251.80.97

🇲🇾 47.250.193.165

🇺🇸 13.90.206.6

🇩🇪 2.26.99.220

🇵🇱 2400:cb00:906:1000:f1c3:ec54:926d:cb21

🇳🇱 185.229.227.199

🇦🇷 181.94.26.136

🇵🇱 176.53.159.197

🇫🇷 173.249.16.176

🇩🇪 167.94.146.47

🇺🇸 165.154.163.160

🇮🇷 152.89.12.101

🇨🇳 150.255.27.68

🇮🇳 143.110.191.140