JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.107.27.247

212.107.27.247

Recent Activity

15 reports found in our database

3% ▲ ▲ ▲ Caution

Abuse confidence score ?

ISP

ExSyst Group Ltd.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS19318

Domain Name

exsyst-group.biz

Country

🇺🇸 United States of America

City

New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 212.107.27.247:

This IP address has been reported a total of 15 times from 10 distinct sources. 212.107.27.247 was first reported on August 10th 2021, and the most recent report was 4 days ago. In the last 60 days, the only reporter location was: Greece with 1 report. The most common categories in these recent reports were: Bad Web Bot 1 time; Hacking 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 Staging	2026-09-10 06:31:00 (4 days ago)	bots, scrapers and hacking tools	Bad Web Bot Hacking
🇺🇸 TPI-Abuse	2026-02-18 06:13:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 212.107.27.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 212.107.27.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 01:13:17.369321 2026] [security2:error] [pid 13644:tid 13644] [client 212.107.27.247:10733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cynthiabaxter.com"] [uri "/.env"] [unique_id "aZVYfWmpiYwIW7USpIoLLgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-02-12 09:22:46 (7 months ago)	(mod_security) mod_security (id:949110) triggered by 212.107.27.247 (DE/Germany/-): N in the last X ... show more (mod_security) mod_security (id:949110) triggered by 212.107.27.247 (DE/Germany/-): N in the last X secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-04 21:38:33 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 212.107.27.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 212.107.27.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 16:38:26.495509 2026] [security2:error] [pid 12946:tid 12946] [client 212.107.27.247:17881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frightlibrary.org"] [uri "/.env"] [unique_id "aYO8UnsC1sPOvevbypXW2wAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-04 15:18:17 (1 year ago)	Botnet - login attempts with leaked random user/pass lists	Hacking Brute-Force Web App Attack
Anonymous	2025-05-07 11:13:54 (1 year ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 Yawning Angel	2024-08-05 03:41:00 (2 years ago)	msg=SSL user failed to logged in logdesc=SSL VPN login fail user=xneadmin remip=212.107.27.247 reaso ... show more msg=SSL user failed to logged in logdesc=SSL VPN login fail user=xneadmin remip=212.107.27.247 reason=sslvpn_login_permission_denied show less	Hacking Brute-Force
🇺🇸 Yawning Angel	2024-08-04 09:10:57 (2 years ago)	msg=SSL user failed to logged in logdesc=SSL VPN login fail user=xlnadmin remip=212.107.27.247 group ... show more msg=SSL user failed to logged in logdesc=SSL VPN login fail user=xlnadmin remip=212.107.27.247 group=N/A tunnelid=0 tunneltype=ssl-web dst_host=N/A reason=sslvpn_login_permission_denied show less	Hacking Brute-Force
🇺🇸 Yawning Angel	2024-07-31 20:31:41 (2 years ago)	msg=SSL user failed to logged in logdesc=SSL VPN login fail user=zewadmin reason=sslvpn_login_permis ... show more msg=SSL user failed to logged in logdesc=SSL VPN login fail user=zewadmin reason=sslvpn_login_permission_denied show less	Hacking Brute-Force
Anonymous	2024-03-17 04:42:00 (2 years ago)	"Illegal HTTP status in response,Access from malicious IP address"	Brute-Force
🇺🇸 TheMadBeaker	2024-02-10 13:59:25 (2 years ago)	Fail2Ban Ban Triggered HTTP Fake Web Crawler	Bad Web Bot
🇺🇸 VSM Networks	2023-07-06 02:21:06 (3 years ago)	Credential Stuffing	Brute-Force
🇺🇸 VSM Networks	2023-05-06 02:34:22 (3 years ago)	Credential Stuffing	Brute-Force
🇺🇸 VSM Networks	2023-03-13 17:36:28 (3 years ago)	Credential Stuffing	Brute-Force
🇩🇰 bredelund.dk	2021-08-10 14:08:13 (5 years ago)	Using contact sites and/or guestbooks as personal BBS for advertising garbage,Repeatedly scanning fo ... show more Using contact sites and/or guestbooks as personal BBS for advertising garbage,Repeatedly scanning for vulnerabilities show less	Web Spam Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.73

🇮🇳 183.82.111.224

🇺🇸 2a03:2880:f806:1c::

🇮🇹 172.70.216.20

🇦🇹 152.53.3.237

🇺🇸 62.10.174.7

🇺🇸 34.46.42.95

🇸🇪 217.211.237.213

🇬🇧 193.163.125.54

🇻🇪 190.52.102.176

🇨🇳 112.103.128.218

🇻🇳 103.74.116.219

🇮🇳 103.23.236.2

🇺🇸 99.164.73.85

🇨🇦 85.217.149.69

🇮🇷 85.198.19.242

🇺🇸 52.248.41.236

🇨🇿 37.188.210.48

🇺🇸 20.221.64.154

🇰🇿 2.132.77.38