JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.76.49.133

217.76.49.133 was found in our database!

This IP was reported 160 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3273839.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 217.76.49.133

Whois 217.76.49.133

IP Abuse Reports for 217.76.49.133:

This IP address has been reported a total of 160 times from 65 distinct sources. 217.76.49.133 was first reported on April 21st 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2025-12-25 13:07:41 (6 months ago)	http-bad-user-agent - IP: 217.76.49.133 - time="2025-12-25T14:07:41+01:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 217.76.49.133 - time="2025-12-25T14:07:41+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 217.76.49.133 (FR/51167) : 4h ban on Ip 217.76.49.133" module=db show less	Bad Web Bot
🇦🇺 Asimar	2025-12-25 02:38:09 (6 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 217.76.49.133 (FR/Fr ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 217.76.49.133 (FR/France/vmi2231170.contaboserver.net): (CF_ENABLE) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-24 22:01:02 (6 months ago)	(mod_security) mod_security (id:217291) triggered by 217.76.49.133 (vmi2231170.contaboserver.net): 1 ... show more (mod_security) mod_security (id:217291) triggered by 217.76.49.133 (vmi2231170.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 17:00:56.012579 2025] [security2:error] [pid 26898:tid 26898] [client 217.76.49.133:51552] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\nfromwhere. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|killeramps.com\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cnfromwhere: \\x0d\\x0afromwhere"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "killeramps.com"] [uri "/g12aboutsite.php"] [unique_id "aUximAduzK14MlCqAV9tggAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 polido	2025-12-24 21:17:30 (6 months ago)	Unauthorized connection attempt to port 443 from 217.76.49.133	Port Scan
🇦🇺 MAGIC	2025-12-21 03:17:29 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 antlac1	2025-12-18 11:20:46 (7 months ago)	crowdsecurity/http-bad-user-agent	Brute-Force Web App Attack
🇳🇱 Roderic	2025-12-16 19:49:26 (7 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇩🇪 strzonnek	2025-12-14 08:39:09 (7 months ago)	attack on webform	Brute-Force Web App Attack
🇨🇭 Origon	2025-12-10 09:24:43 (7 months ago)	http-bad-user-agent - IP: 217.76.49.133 - time="2025-12-10T10:24:43+01:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 217.76.49.133 - time="2025-12-10T10:24:43+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 217.76.49.133 (FR/51167) : 4h ban on Ip 217.76.49.133" module=db show less	Bad Web Bot
🇸🇮 extremevital	2025-11-30 22:52:12 (7 months ago)	217.76.49.133 [30/Nov/2025:23:52:10 +0100] LOCAL: "GET /en/cycling/road-rims-c-2_83_126.html?cpath=' ... show more 217.76.49.133 [30/Nov/2025:23:52:10 +0100] LOCAL: "GET /en/cycling/road-rims-c-2_83_126.html?cpath='nvOpzp;%20AND%201=1%20OR%20(%3C'%22%3EiKO)),''' HTTP/1.1" 200 40760 0.129 "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Bad Web Bot
🇬🇧 Mendip_Defender	2025-11-29 07:23:41 (7 months ago)	217.76.49.133 - - [29/Nov/2025:07:23:31 +0000] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 ( ... show more 217.76.49.133 - - [29/Nov/2025:07:23:31 +0000] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Bad Web Bot
🇳🇱 Site.eu	2025-11-27 20:42:49 (7 months ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Skyrider	2025-11-24 12:37:30 (7 months ago)	217.76.49.133 - - [24/Nov/2025:13:37:14 +0100] "GET /robots.txt HTTP/2.0" 404 162 "-" "Mozilla/5.0 ( ... show more 217.76.49.133 - - [24/Nov/2025:13:37:14 +0100] "GET /robots.txt HTTP/2.0" 404 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 217.76.49.133 - - [24/Nov/2025:13:37:19 +0100] "GET /de/blog/wie-kann-ich-meine-speisekarte-selbst-gestalten-153 HTTP/2.0" 403 5401 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 217.76.49.133 - - [24/Nov/2025:13:37:23 +0100] "GET /de/s/gastronomie/pachten/von/privat HTTP/2.0" 403 5401 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 217.76.49.133 - - [24/Nov/2025:13:37:26 +0100] "GET /fr/proprietes/horeca-a-louer-bruxelles-ville-1224 HTTP/2.0" 403 5401 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 217.76.49.133 - - [24/Nov/2025:13:37:29 +0100] "GET /it/partner/allekleinanzeigen-ch-7 HTTP/2.0" 403 5401 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" show less	Bad Web Bot Web App Attack
🇩🇪 LRob	2025-11-22 21:45:22 (7 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇩🇪 rh24	2025-11-22 20:59:12 (7 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 217.76.49.133 (FR/Fr ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 217.76.49.133 (FR/France/vmi2231170.contaboserver.net) show less	Bad Web Bot

Showing 1 to 15 of 160 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.247.137.133

🇳🇴 185.181.61.201

🇺🇸 162.214.5.224

🇨🇦 85.217.149.20

🇮🇩 43.157.248.241

🇩🇪 4.184.121.217

🇺🇸 191.101.33.225

🇬🇧 185.247.137.143

🇨🇳 125.124.226.217

🇮🇩 103.82.92.171

🇳🇱 81.19.216.82

🇺🇸 31.59.40.94

🇲🇿 197.219.208.38

🇸🇬 152.42.194.49

🇨🇦 74.125.19.187

🇺🇸 64.62.197.235

🇰🇷 20.214.106.237

🇻🇳 14.225.253.26

🇷🇴 92.118.39.77

🇹🇷 85.105.24.58