JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 199.21.149.131

199.21.149.131 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 0%: ?

ISP	Netminders Server Hosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS7040
Domain Name	net-minders.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 199.21.149.131

Whois 199.21.149.131

IP Abuse Reports for 199.21.149.131:

This IP address has been reported a total of 12 times from 11 distinct sources. 199.21.149.131 was first reported on September 7th 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-08-28 22:47:47 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 199.21.149.131 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 199.21.149.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 28 18:47:39.185059 2024] [security2:error] [pid 10941:tid 10941] [client 199.21.149.131:59987] [client 199.21.149.131] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|learningbyshipping.com\|F\|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "learningbyshipping.com"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "Zs-pC6XInctn3grCbbwfWgAAAA4"], referer: https://www.s.com show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-08-14 10:03:15 (1 year ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 Manuel Cutillas	2024-08-13 06:56:07 (1 year ago)		Web App Attack
🇩🇪 Alejandro Docasar	2024-08-13 03:20:43 (1 year ago)		Web App Attack
🇺🇸 TPI-Abuse	2024-08-10 19:02:45 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 199.21.149.131 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 199.21.149.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 10 15:02:41.374032 2024] [security2:error] [pid 13972:tid 13972] [client 199.21.149.131:65186] [client 199.21.149.131] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.n3fjp.com\|F\|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.n3fjp.com"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "Zre5UXTF5q6mOuPtR3f6-QAAAAI"], referer: https://www.s.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-06 00:36:14 (1 year ago)		Web App Attack
🇺🇸 NXTwoThou	2023-09-07 20:13:20 (2 years ago)	Spam	Email Spam
🇸🇮 dsmidge	2023-09-07 15:13:30 (2 years ago)	Sep 7 17:13:29 server postfix/smtpd[2601994]: connect from unknown[199.21.149.131] Sep 7 17:13:30 ... show more Sep 7 17:13:29 server postfix/smtpd[2601994]: connect from unknown[199.21.149.131] Sep 7 17:13:30 server postfix/smtpd[2601994]: NOQUEUE: reject: RCPT from unknown[199.21.149.131]: 554 5.7.1 Service unavailable; Client host [199.21.149.131] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<gg.gg.tcyp.net> ... show less	Email Spam
Anonymous	2023-09-07 06:58:15 (2 years ago)	Sep 7 08:58:15 ns3130050 postfix/smtpd[23975]: NOQUEUE: reject: RCPT from unknown[199.21.149.131]: ... show more Sep 7 08:58:15 ns3130050 postfix/smtpd[23975]: NOQUEUE: reject: RCPT from unknown[199.21.149.131]: 554 5.7.1 Service unavailable; Client host [199.21.149.131] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<gg.gg.tcyp.net> ... show less	Brute-Force Web App Attack
🇫🇷 Bensay	2023-09-07 06:22:18 (2 years ago)	2023-09-07T08:22:17.218515+02:00 bzhbenjouille postfix/smtpd[4163616]: NOQUEUE: reject: RCPT from un ... show more 2023-09-07T08:22:17.218515+02:00 bzhbenjouille postfix/smtpd[4163616]: NOQUEUE: reject: RCPT from unknown[199.21.149.131]: 554 5.7.1 Service unavailable; Client host [199.21.149.131] blocked using ix.dnsbl.manitu.net; Your e-mail service was detected by spam.over.port25.me (NiX Spam) as spamming at Thu, 07 Sep 2023 03:25:36 +0200. Your admin should visit https://www.nixspam.net/lookup.php?value=199.21.149.131; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<gg.gg.tcyp.net> ... show less	Email Spam Port Scan Brute-Force Exploited Host
🇷🇸 Smel	2023-09-07 05:34:29 (2 years ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇳🇱 wlt-blocker	2023-09-07 04:21:02 (2 years ago)	Spam with a high level and/or caught by honeypot detected	Email Spam

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 130.12.182.143

🇮🇳 203.193.168.136

🇸🇳 154.125.225.152

🇻🇳 113.161.48.164

🇺🇸 107.173.146.37

🇲🇦 105.155.193.105

🇺🇸 47.254.32.206

🇳🇱 45.198.224.96

🇧🇾 37.212.50.156

🇸🇪 31.59.160.12

🇺🇸 20.65.194.54

🇸🇬 2620:171:f4:f0:9999::245

🇯🇴 176.29.249.157

🇮🇩 128.14.232.254

🇮🇳 106.206.194.61

🇮🇳 49.204.235.212

🇩🇪 45.135.141.23

🇷🇺 5.140.212.144

🇲🇽 177.249.8.237

🇺🇸 134.209.120.216