JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.21.17.234

129.21.17.234 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 100%: ?

100%

ISP	Rochester Institute of Technology
Usage Type	University/College/School
ASN	AS4385
Hostname(s)	banjo.rit.edu
Domain Name	rit.edu
Country	🇺🇸 United States of America
City	Rochester, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.21.17.234

Whois 129.21.17.234

IP Abuse Reports for 129.21.17.234:

This IP address has been reported a total of 58 times from 23 distinct sources. 129.21.17.234 was first reported on October 11th 2026, and the most recent report was 46 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-10-22 14:33:57 (46 minutes ago)	cloudlinux2 fail2ban: 2026-10-22 16:30:34,132 fail2ban.filter [1488]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-10-22 16:30:34,132 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 129.21.17.234 - 2026-10-22 16:30:33cloudlinux2 fail2ban: 2026-10-22 16:30:33,421 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 129.21.17.234 - 2026-10-22 16:30:33cloudlinux2 fail2ban: 2026-10-22 16:31:29,127 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 172.98.32.224 - 2026-10-22 16:31:28cloudlinux2 fail2ban: 2026-10-22 16:31:29,341 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 45.132.227.246 - 2026-10-22 16:31:28cloudlinux2 fail2ban: 2026-10-22 16:31:29,255 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 136.144.42.6 - 2026-10-22 16:31:28cloudlinux2 fail2ban: 2026-10-22 16:31:29,332 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 136.144.42.2 - 2026-10-22 16:31:28cloudlinux2 fail2ban: 2026-10-22 16:32:20,995 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 35.203.44.166 - 2026-10-22 16:32:20clou show less	Web App Attack
🇺🇸 mnsf	2026-10-22 12:05:57 (3 hours ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 11:51:26 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 129.21.17.234 (banjo.rit.edu): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 129.21.17.234 (banjo.rit.edu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 07:51:22.289318 2026] [security2:error] [pid 29875:tid 29875] [client 129.21.17.234:36260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "siouxfallslimos.com"] [uri "/sftp-config.json"] [unique_id "atn4uiURyoFMXx0xALVNTgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 11:29:47 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 129.21.17.234 (banjo.rit.edu): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 129.21.17.234 (banjo.rit.edu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 07:29:41.357852 2026] [security2:error] [pid 11445:tid 11445] [client 129.21.17.234:57436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sinko-intl.com"] [uri "/sftp-config.json"] [unique_id "atnzpS38ejDtdb_Ndy1SxQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rip	2026-10-22 11:11:35 (4 hours ago)	Spoofed, Forged or malicious User-Agent detected.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 10:15:06 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 129.21.17.234 (banjo.rit.edu): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 129.21.17.234 (banjo.rit.edu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 06:14:58.955054 2026] [security2:error] [pid 26447:tid 26447] [client 129.21.17.234:59466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sixsensehealing.com"] [uri "/sftp-config.json"] [unique_id "atniIsg9UnBCjeUEbxHxMQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 CentiDevOps	2026-10-22 08:06:07 (7 hours ago)	Web app scan: 14 requests in 0 s across 2 domains (301/404). Paths: /.vscode/sftp.json, /sftp-config ... show more Web app scan: 14 requests in 0 s across 2 domains (301/404). Paths: /.vscode/sftp.json, /sftp-config.json. Sample: 2026-10-22T08:06:07Z "GET /.vscode/sftp.json" 404 show less	Hacking Web App Attack
🇩🇪 thesimonmanuel	2026-10-22 07:09:53 (8 hours ago)	129.21.17.234 - - [22/Oct/2026:12:39:52 +0530] "GET /.vscode/sftp.json HTTP/1.1" 404 8192 "-" "Pytho ... show more 129.21.17.234 - - [22/Oct/2026:12:39:52 +0530] "GET /.vscode/sftp.json HTTP/1.1" 404 8192 "-" "Python/3.9 aiohttp/3.13.5" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 05:29:44 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 129.21.17.234 (banjo.rit.edu): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 129.21.17.234 (banjo.rit.edu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 01:29:37.857729 2026] [security2:error] [pid 15433:tid 15433] [client 129.21.17.234:59438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sipkg.com"] [uri "/sftp-config.json"] [unique_id "atmfQTMRLQsBGwMOl2mbUwAAADM"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 robotstxt	2026-10-22 03:19:18 (12 hours ago)	129.21.17.234 - - [22/Oct/2026:03:18:38 +0000] "GET /.ftpconfig HTTP/1.1" 403 15983 "-" "Python/3.9 ... show more 129.21.17.234 - - [22/Oct/2026:03:18:38 +0000] "GET /.ftpconfig HTTP/1.1" 403 15983 "-" "Python/3.9 aiohttp/3.13.5" "-" edge="129.21.17.234" 129.21.17.234 - - [22/Oct/2026:03:18:39 +0000] "GET /ftp_config.json HTTP/1.1" 403 15983 "-" "Python/3.9 aiohttp/3.13.5" "-" edge="129.21.17.234" 129.21.17.234 - - [22/Oct/2026:03:18:39 +0000] "GET /.vscode/sftp.json HTTP/1.1" 403 15983 "-" "Python/3.9 aiohttp/3.13.5" "-" edge="129.21.17.234" 129.21.17.234 - - [22/Oct/2026:03:18:41 +0000] "GET /.ftpconfig HTTP/1.1" 403 15983 "-" "Python/3.9 aiohttp/3.13.5" "-" edge="129.21.17.234" 129.21.17.234 - - [22/Oct/2026:03:18:42 +0000] "GET /ftp_config.json HTTP/1.1" 403 15983 "-" "Python/3.9 aiohttp/3.13.5" "-" edge="129.21.17.234" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 00:48:35 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 129.21.17.234 (banjo.rit.edu): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 129.21.17.234 (banjo.rit.edu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 20:48:28.247053 2026] [security2:error] [pid 25477:tid 25477] [client 129.21.17.234:39622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "silsby.com"] [uri "/sftp-config.json"] [unique_id "atldXKElxh0BhBz1oH6oJAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 paissangroup	2026-10-22 00:31:14 (14 hours ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-10-21 23:34:27 (15 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-10-20 17:17:42 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-10-19 05:35:21 (3 days ago)	PAD: Bad_Web_Bot_D detected	Bad Web Bot

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇦 195.222.59.154

🇺🇸 23.142.248.53

🇰🇭 175.100.59.23

🇧🇷 168.196.28.139

🇺🇸 157.245.84.42

🇦🇫 149.54.62.54

🇨🇳 123.122.38.100

🇫🇷 85.217.140.39

🇨🇳 60.175.7.22

🇫🇷 2001:41d0:33d:9200::40e

🇻🇳 222.254.35.6

🇨🇳 222.186.140.82

🇧🇷 205.210.31.158

🇹🇷 201.7.31.43

🇵🇪 200.10.68.19

🇺🇸 187.40.234.171

🇧🇷 186.250.160.255

🇵🇱 185.78.134.167

🇹🇭 180.180.156.53

🇸🇳 179.64.79.59