JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.229.121.232

2.229.121.232 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 0%: ?

ISP	Fastweb SpA
Usage Type	Fixed Line ISP
ASN	AS12874
Hostname(s)	2-229-121-232.ip196.fastwebnet.it
Domain Name	fastweb.it
Country	🇮🇹 Italy
City	Brescia, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.229.121.232

Whois 2.229.121.232

IP Abuse Reports for 2.229.121.232:

This IP address has been reported a total of 59 times from 51 distinct sources. 2.229.121.232 was first reported on June 11th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Starburst SysOp Team	2024-07-09 08:28:00 (1 year ago)	[Tue Jul 09 08:27:33.082114 2024] [:error] [pid 2530153:tid 139724991743744] [client 2.229.121.232:2 ... show more [Tue Jul 09 08:27:33.082114 2024] [:error] [pid 2530153:tid 139724991743744] [client 2.229.121.232:23524] [client 2.229.121.232] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\w+\\\\/[\\\\w\\\\-\\\\.]+)(?:;(?:charset=[\\\\w\\\\-]{1,18}\|boundary=[\\\\w\\\\-]+)?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)\|\|-\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "-"] [uri "/"] [unique_id "Zoz0dd2SZI1JQ6ivhg76XAAAARc"] show less	Hacking Brute-Force Web App Attack
🇺🇸 Starburst SysOp Team	2024-07-09 08:04:00 (1 year ago)	[Tue Jul 09 08:04:31.380286 2024] [:error] [pid 1214404:tid 1214455] [client 2.229.121.232:44452] [c ... show more [Tue Jul 09 08:04:31.380286 2024] [:error] [pid 1214404:tid 1214455] [client 2.229.121.232:44452] [client 2.229.121.232] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\w+\\\\/[\\\\w\\\\-\\\\.]+)(?:;(?:charset=[\\\\w\\\\-]{1,18}\|boundary=[\\\\w\\\\-]+)?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)\|\|-\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "-"] [uri "/"] [unique_id "ZozvD9HqFeFUITAeGffgagAAAdg"] show less	Hacking Brute-Force Web App Attack
Anonymous	2024-07-08 03:49:40 (1 year ago)		Web App Attack
🇸🇪 webbfabriken	2024-07-08 00:35:49 (1 year ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbf ... show more spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI show less	Web Spam
🇵🇱 dzpk	2024-07-08 00:11:44 (1 year ago)	[08/Jul/2024:02:11:42 +0200] 172039750228.533541 2.229.121.232 9102 HOST 80 [08/Jul/2024:02:11:43 +0 ... show more [08/Jul/2024:02:11:42 +0200] 172039750228.533541 2.229.121.232 9102 HOST 80 [08/Jul/2024:02:11:43 +0200] 172039750314.176896 2.229.121.232 9445 HOST 80 [08/Jul/2024:02:11:44 +0200] 172039750469.392090 2.229.121.232 9926 HOST 80 show less	Web App Attack
🇩🇪 DEV-DNS	2024-07-07 03:17:10 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇭🇺 DumaNet	2024-07-07 01:23:00 (1 year ago)	Web app attack attempts, scanning for vulnerability. Date: 2024 Jul 06. 08:24:28 Source IP: 2.229. ... show more Web app attack attempts, scanning for vulnerability. Date: 2024 Jul 06. 08:24:28 Source IP: 2.229.121.232 Portion of the log(s): 2.229.121.232 - [06/Jul/2024:08:24:23 +0200] "POST /login.action HTTP/1.1" 404 153 "-" "python-requests/2.12.4" 2.229.121.232 - [06/Jul/2024:08:24:20 +0200] "POST /index.action HTTP/1.1" 404 153 "-" "python-requests/2.12.4" 2.229.121.232 - [06/Jul/2024:08:24:18 +0200] "GET /indexAction.action HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36" 2.229.121.232 - [06/Jul/2024:08:24:17 +0200] "GET /login/indexAction.action HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36" 2.229.121.232 - [06/Jul/2024:08:24:16 +0200] "GET /login/login.jsp HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36" .... show less	Web App Attack
🇩🇪 Ba-Yu	2024-07-06 22:23:13 (1 year ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇳🇱 IP Analyzer	2024-07-06 17:15:32 (1 year ago)	Unauthorized connection attempt from IP address 2.229.121.232 on Port 80(HTTP)	Brute-Force
🇳🇱 ATV	2024-07-06 03:14:17 (1 year ago)	Unsolicited connection attempts to ports 80, 8080	Hacking
🇷🇺 Limtech	2024-07-05 04:14:53 (1 year ago)	Fri, 05 Jul 2024 04:14:52 GMT. proxy(tcp/8080) scan from 2.229.121.232	Port Scan
🇳🇱 ATV	2024-07-05 03:02:14 (1 year ago)	Unsolicited connection attempts to ports 80, 8080	Hacking
Anonymous	2024-07-05 00:30:10 (1 year ago)	Automatic report - Vulnerability scan /register.jsp	Web App Attack
🇳🇱 Linuxmalwarehuntingnl	2024-07-04 07:21:48 (1 year ago)	Unauthorized connection attempt	Brute-Force
🇦🇹 begou.dev	2024-07-04 04:30:17 (1 year ago)	[Threat Intelligence] FrozenThreat: Port Scanning and/or Unauthorized access -> HoneyPots:PORT/80	Port Scan

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 103.131.214.79

🇺🇸 44.221.116.76

🇸🇬 4.194.144.6

🇧🇪 198.235.24.199

🇵🇱 176.53.159.197

🇸🇬 172.188.89.41

🇸🇪 172.160.248.186

🇦🇺 168.144.171.234

🇲🇦 105.156.191.158

🇺🇦 91.207.244.97

🇫🇮 62.220.236.203

🇨🇳 2409:8c20:8ab1:54::19

🇩🇪 213.209.159.242

🇷🇺 89.189.181.54

🇬🇧 86.183.162.19

🇸🇬 43.156.108.243

🇯🇵 34.146.217.105

🇯🇵 212.135.208.32

🇷🇺 188.32.30.69

🇺🇸 172.253.214.118