JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.47.134.250

212.47.134.250 was found in our database!

This IP was reported 3 times. Confidence of Abuse is 11%: ?

11%

ISP	Aztelekom LLC
Usage Type	Fixed Line ISP
ASN	AS8814
Domain Name	aztelekom.az
Country	🇦🇿 Azerbaijan
City	Khirdalan, Abseron

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.47.134.250

Whois 212.47.134.250

IP Abuse Reports for 212.47.134.250:

This IP address has been reported a total of 3 times from 3 distinct sources. 212.47.134.250 was first reported on June 14th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Tsumugi Kotobuki	2026-08-22 11:02:37 (5 hours ago)	Port Scan on Honeypot \| Ports: 22/SSH \| Proto: TCP(1) \| Flags: all SYN \| TTL: 54 \| Len: 60B \| Win: 6 ... show more Port Scan on Honeypot \| Ports: 22/SSH \| Proto: TCP(1) \| Flags: all SYN \| TTL: 54 \| Len: 60B \| Win: 65535(1) \| F2B/ufw-honeypot@2026-08-22T11:02:37Z show less	Port Scan Hacking
🇯🇵 demonsword	2026-06-28 11:59:31 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: t.me:443 show less	Open Proxy Port Scan
🇺🇸 TPI-Abuse	2026-06-14 17:43:16 (2 months ago)	(mod_security) mod_security (id:217210) triggered by 212.47.134.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217210) triggered by 212.47.134.250 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 13:43:11.208832 2026] [security2:error] [pid 8114:tid 8114] [client 212.47.134.250:3334] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|moon7simplys.top\|F\|4"] [data "GET http://moon7simplys.top HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "moon7simplys.top"] [uri "/"] [unique_id "ai7oL8OZLgG1txvokn85RwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 3 of 3 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 54.242.155.65

🇰🇷 220.116.113.35

🇩🇪 213.209.159.226

🇧🇪 198.235.24.207

🇲🇿 197.219.228.250

🇬🇧 194.213.3.117

🇵🇱 176.53.159.198

🇬🇧 154.16.44.81

🇦🇷 152.231.22.212

🇨🇳 116.171.27.248

🇭🇰 104.208.99.163

🇦🇹 94.16.18.54

🇳🇱 91.92.40.29

🇱🇹 77.90.185.20

🇳🇱 45.148.10.157

🇺🇸 43.173.123.43

🇺🇸 34.72.128.7

🇮🇳 2405:201:8003:6080:6586:9160:b332:d019

🇧🇪 198.235.24.186

🇸🇬 188.239.11.23