JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 211.249.46.156

211.249.46.156 was found in our database!

This IP was reported 135 times. Confidence of Abuse is 19%: ?

19%

ISP	NHN-NET
Usage Type	Data Center/Web Hosting/Transit
ASN	AS23576
Hostname(s)	crawl.211-249-46-156.web.naver.com
Domain Name	navercorp.com
Country	🇰🇷 Korea (the Republic of)
City	Incheon, Incheon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 211.249.46.156

Whois 211.249.46.156

IP Abuse Reports for 211.249.46.156:

This IP address has been reported a total of 135 times from 19 distinct sources. 211.249.46.156 was first reported on May 27th 2021, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Mediashaker	2026-08-14 01:23:25 (2 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 211.249.46.156 (KR/S ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 211.249.46.156 (KR/South Korea/crawl.211-249-46-156.web.naver.com) show less	Bad Web Bot
🇩🇪 rh24	2026-08-08 09:01:05 (3 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 211.249.46.156 (KR/S ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 211.249.46.156 (KR/South Korea/crawl.211-249-46-156.web.naver.com) show less	Bad Web Bot
🇮🇹 Progetto1	2026-07-27 18:20:07 (1 month ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇹🇼 kk_it_man	2026-07-26 03:43:04 (1 month ago)	ET SCAN Naver Webcrawler User-Agent (Naver.me)	Port Scan
Anonymous	2026-06-19 09:10:22 (2 months ago)	Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10. ... show more Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Yeti/1.1; +https://naver.me/spd) Ch" show less	Bad Web Bot Web App Attack
🇹🇼 kk_it_man	2026-05-28 05:43:18 (3 months ago)	ET SCAN Naver Webcrawler User-Agent (Naver.me)	Port Scan
🇹🇼 kk_it_man	2026-05-06 04:23:03 (3 months ago)	ET SCAN Naver Webcrawler User-Agent (Naver.me)	Port Scan
🇺🇸 TPI-Abuse	2026-04-24 23:50:49 (4 months ago)	(mod_security) mod_security (id:217200) triggered by 211.249.46.156 (crawl.211-249-46-156.web.naver. ... show more (mod_security) mod_security (id:217200) triggered by 211.249.46.156 (crawl.211-249-46-156.web.naver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 19:50:43.029100 2026] [security2:error] [pid 10972:tid 10972] [client 211.249.46.156:53237] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|carolinafootprints.com\|F\|2"] [data "/scenes-from-the-elliot-coues-nature-trail/comment-page-1/"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "carolinafootprints.com"] [uri "/scenes-from-the-elliot-coues-nature-trail/comment-page-1/"] [unique_id "aewB0yKAl9Q8jHxzq7TsOAAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-24 20:57:12 (4 months ago)	(mod_security) mod_security (id:217200) triggered by 211.249.46.156 (crawl.211-249-46-156.web.naver. ... show more (mod_security) mod_security (id:217200) triggered by 211.249.46.156 (crawl.211-249-46-156.web.naver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 16:57:06.690783 2026] [security2:error] [pid 1303604:tid 1303604] [client 211.249.46.156:38410] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|insidemilb.com\|F\|2"] [data "/from-draft-to-payday-how-baseball-players-get-paid/"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "insidemilb.com"] [uri "/from-draft-to-payday-how-baseball-players-get-paid/"] [unique_id "aevZIo76GzgIOPsdDkqW0wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-24 11:01:20 (4 months ago)	(mod_security) mod_security (id:217200) triggered by 211.249.46.156 (crawl.211-249-46-156.web.naver. ... show more (mod_security) mod_security (id:217200) triggered by 211.249.46.156 (crawl.211-249-46-156.web.naver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 07:01:11.991167 2026] [security2:error] [pid 31619:tid 31619] [client 211.249.46.156:53844] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|www.arthuryeung.net\|F\|2"] [data "/uncategorized/hello-world/"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.arthuryeung.net"] [uri "/uncategorized/hello-world/"] [unique_id "aetNdwmVhVaIklNupzUlYgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇼 kk_it_man	2026-04-13 18:43:04 (4 months ago)	ET SCAN Naver Webcrawler User-Agent (Naver.me)	Port Scan
🇹🇼 kk_it_man	2026-03-28 12:13:05 (5 months ago)	ET SCAN Naver Webcrawler User-Agent (Naver.me)	Port Scan
🇨🇦 Mediashaker	2026-03-20 21:02:10 (5 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 211.249.46.156 (KR/S ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 211.249.46.156 (KR/South Korea/crawl.211-249-46-156.web.naver.com) show less	Bad Web Bot
🇹🇼 kk_it_man	2026-02-27 17:43:02 (6 months ago)	ET SCAN Naver Webcrawler User-Agent (Naver.me)	Port Scan
🇹🇼 kk_it_man	2026-02-02 09:53:09 (6 months ago)	ET SCAN Naver Webcrawler User-Agent (Naver.me)	Port Scan

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.176

🇬🇧 109.180.95.249

🇺🇸 107.150.109.73

🇳🇱 91.92.42.80

🇩🇪 45.135.193.198

🇺🇸 40.124.114.163

🇧🇷 190.120.40.18

🇺🇸 147.182.211.219

🇸🇦 145.82.42.61

🇺🇸 131.153.221.142

🇷🇴 92.118.39.50

🇺🇸 75.127.6.2

🇺🇸 71.19.192.247

🇻🇳 61.14.232.145

🇵🇱 45.141.233.16

🇨🇳 43.138.29.234

🇨🇳 27.18.4.191

🇧🇷 205.210.31.177

🇰🇿 185.22.67.86

🇺🇸 159.223.123.239