JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.47.249.219

212.47.249.219 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 0%: ?

ISP	Scaleway fr-par-1
Usage Type	Data Center/Web Hosting/Transit
ASN	AS12876
Hostname(s)	sw-16.links.ls.007ac9.net
Domain Name	scaleway.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.47.249.219

Whois 212.47.249.219

IP Abuse Reports for 212.47.249.219:

This IP address has been reported a total of 54 times from 18 distinct sources. 212.47.249.219 was first reported on January 2nd 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-05-28 05:57:02 (1 month ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇮🇹 A000Z	2026-04-10 07:26:13 (3 months ago)	Fail2Ban: 212.47.249.219 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 212.47.249.219 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (compatible; SeekportBot; +https://bot.seekport.com) show less	Bad Web Bot
🇳🇱 Roderic	2026-01-29 09:33:42 (5 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇿🇦 Tokolosh Hunters	2025-09-21 18:54:46 (9 months ago)	AutoBlockWindow-Known bad useragent query-2025-09-21 18:54:46	Bad Web Bot
🇦🇺 MAGIC	2025-09-08 03:12:55 (10 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-08-19 23:00:36 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 212.47.249.219 (sw-16.links.ls.007ac9.net): 1 i ... show more (mod_security) mod_security (id:210730) triggered by 212.47.249.219 (sw-16.links.ls.007ac9.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 19 19:00:27.657474 2025] [security2:error] [pid 10477:tid 10512] [client 212.47.249.219:59906] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.michaelrandon.com\|F\|2"] [data ".ethermania.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.michaelrandon.com"] [uri "/netduino-plus-2/www.ethermania.com"] [unique_id "aKUCC7uVmm_X3-IlL9q-PwAAAVY"], referer: https://www.michaelrandon.com/netduino-plus-2/ show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-08-12 01:05:00 (11 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 LRob	2025-08-10 06:00:21 (11 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2025-07-27 22:13:27 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 212.47.249.219 (219.1-24.249.47.212.in-addr.arp ... show more (mod_security) mod_security (id:210730) triggered by 212.47.249.219 (219.1-24.249.47.212.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 27 18:13:19.945904 2025] [security2:error] [pid 31655:tid 31655] [client 212.47.249.219:42878] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|borzois.com\|F\|2"] [data ".borzois.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "borzois.com"] [uri "/www.borzois.com"] [unique_id "aIakf5xTvPW07aRu3owKGAAAAA8"], referer: http://borzois.com/afanasii-pic-page-sorted.html show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2025-07-24 10:39:44 (11 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "seekport" at REQUEST_HEADERS:User-Agent. (1100000-1 ... show more BAD BOT - Detected and Blocked.. Matched phrase "seekport" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇫🇷 X13	2025-06-04 10:12:00 (1 year ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-03-06 10:03:36 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 212.47.249.219 (219.1-24.249.47.212.in-addr.arp ... show more (mod_security) mod_security (id:210730) triggered by 212.47.249.219 (219.1-24.249.47.212.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 06 05:03:30.991767 2025] [security2:error] [pid 13526:tid 13526] [client 212.47.249.219:55806] [client 212.47.249.219] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.scoutinsignia.com\|F\|2"] [data ".ebay.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.scoutinsignia.com"] [uri "/www.ebay.com"] [unique_id "Z8ly8o3dSDQQ07_5-nMgWwAAAA0"], referer: http://www.scoutinsignia.com/hats.htm show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-22 10:35:59 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇳🇱 Roderic	2024-11-22 18:17:24 (1 year ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 212.47.249.219 (FR/F ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 212.47.249.219 (FR/France/sw-16.links.ls.007ac9.net) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2024-11-16 06:31:38 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 212.47.249.219 (219.1-24.249.47.212.in-addr.arp ... show more (mod_security) mod_security (id:210730) triggered by 212.47.249.219 (219.1-24.249.47.212.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 16 01:31:34.173701 2024] [security2:error] [pid 17459:tid 17459] [client 212.47.249.219:45586] [client 212.47.249.219] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nlc-calumet.org\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nlc-calumet.org"] [uri "/SON/pics/Thumbs.db"] [unique_id "Zzg8RmxMcRSoYNW0CIe3IAAAAAE"], referer: http://www.nlc-calumet.org/SON/pics/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.242.3.195

🇩🇪 8.211.39.215

🇦🇪 2.50.239.81

🇺🇸 216.180.246.213

🇨🇳 180.153.236.113

🇺🇸 165.154.163.65

🇫🇷 144.91.91.205

🇺🇸 54.153.41.157

🇺🇸 50.116.72.11

🇰🇷 1.237.74.84

🇧🇷 2800:3f0:4001:c03::126

🇵🇱 176.53.159.197

🇻🇳 171.244.143.209

🇹🇭 124.156.246.92

🇺🇸 64.62.156.108

🇳🇱 45.148.10.151

🇺🇸 40.112.183.29

🇺🇸 18.97.5.61

🇺🇸 16.58.56.214

🇲🇽 189.215.120.68