This IP address has been reported a total of
10
times from
8 distinct
sources.
204.217.129.190 was first reported on
April 4th 2025 , and the most recent report was
1 day ago France
with 1
report;
Italy
with 1
report;
Netherlands
with 1
report.
The most common categories in these recent reports were:
Web App Attack
3
times;
Bad Web Bot
2
times;
Exploited Host
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇹
Progetto1
2026-10-09 22:10:07
(1 day ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇫🇷
regishoussin
2026-10-05 07:59:05
(6 days ago)
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of ...
show more
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-05 07:59 UTC.
show less
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-09-20 02:32:59
(3 weeks ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇫🇷
claude CALVET
2026-08-04 00:35:09
(2 months ago)
gee-12 : Block return, carriage return, ... characters=>/index.php?id=9&modjemcal_id=113&mod ...
show more
gee-12 : Block return, carriage return, ... characters=>/index.php?id=9&modjemcal_id=113&modjemcal_month=03&modjemcal_year=2026&view=category&view=%27(')
show less
Hacking
🇳🇱
Savvii
2026-07-22 03:44:19
(2 months ago)
20 attempts against mh-misbehave-ban on pavo
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 14:04:36
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 204.217.129.190 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 204.217.129.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 10:04:26.200913 2026] [security2:error] [pid 2786:tid 2786] [client 204.217.129.190:60093] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kingstoneproperties.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kingstoneproperties.com"] [uri "/[email protected] "] [unique_id "ajFX6hWGtPVebXoC_vh7pQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 05:52:01
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 204.217.129.190 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 204.217.129.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 00:51:55.336041 2025] [security2:error] [pid 24381:tid 24381] [client 204.217.129.190:36935] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kingstoneproperties.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kingstoneproperties.com"] [uri "/[email protected] "] [unique_id "aTz--9jYw7tKAcbn3tG0fAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-06-07 21:25:05
(1 year ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇮🇩
BPS-StatisticsIndonesia
2025-04-05 15:19:46
(1 year ago)
WP Login Scan Activities
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-04-04 09:03:17
(1 year ago)
WP Login Scan Activities
Web App Attack
Showing 1 to
10
of 10 reports
