JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 204.217.129.21

204.217.129.21 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 24%: ?

24%

ISP	Aventice LLC
Usage Type	Fixed Line ISP
ASN	AS11572
Domain Name	aventice.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 204.217.129.21

Whois 204.217.129.21

IP Abuse Reports for 204.217.129.21:

This IP address has been reported a total of 19 times from 12 distinct sources. 204.217.129.21 was first reported on May 12th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-20 20:11:54 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 204.217.129.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 204.217.129.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 16:11:48.384373 2026] [security2:error] [pid 9445:tid 9445] [client 204.217.129.21:49289] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|CapitalSwissCorp.com:80\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/mailto:[email protected]"] [unique_id "atfLBILwAJBtbVtjSvxmiQAAAAA"], referer: http://CapitalSwissCorp.com show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-10-19 21:59:31 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-18. show less	Web App Attack SSH Hacking
🇭🇷 bubausluge	2026-09-22 10:21:09 (1 month ago)	Blocked by https://aegis.hr — [Sigma] XSS Attack Pattern in URL - (MITRE T1189), 2 attempts, Period: ... show more Blocked by https://aegis.hr — [Sigma] XSS Attack Pattern in URL - (MITRE T1189), 2 attempts, Period: 2026-09-22 09:50:02 to 2026-09-22 09:50:02 show less	Web App Attack Hacking
🇨🇦 Anytech	2026-09-17 04:55:51 (1 month ago)	Blocked by ConnMonitor	Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 02:55:28 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 204.217.129.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 204.217.129.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 22:55:22.281010 2026] [security2:error] [pid 19109:tid 19119] [client 204.217.129.21:54367] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.ethicmark.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ethicmark.org"] [uri "/mailto:[email protected]"] [unique_id "aqNtmuhiAmuQzzemMMXvPQAAAEc"], referer: https://www.ethicmark.org show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-05 10:25:40 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 204.217.129.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 204.217.129.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 06:25:32.452998 2026] [security2:error] [pid 18892:tid 18892] [client 204.217.129.21:54777] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|holgerfeld.com:80\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "holgerfeld.com"] [uri "/mailto:[email protected]"] [unique_id "apvuHBUeXv7u0mTqDAzbsAAAABU"], referer: http://holgerfeld.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 10:19:35 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 204.217.129.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 204.217.129.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 06:19:28.661758 2026] [security2:error] [pid 28524:tid 28524] [client 204.217.129.21:54697] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|capitalswisscorp.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/mailto:[email protected]"] [unique_id "apf4MOrsf-i6A52e8Kl73QAAAAg"], referer: http://CapitalSwissCorp.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 09:51:02 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 204.217.129.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 204.217.129.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 05:50:57.969314 2026] [security2:error] [pid 24699:tid 24699] [client 204.217.129.21:35657] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.cayman-islands-real-estate.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.cayman-islands-real-estate.com"] [uri "/mailto:[email protected]"] [unique_id "aobOAdBm2o_DrwOqse5WwQAAAAE"], referer: https://www.cayman-islands-real-estate.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-04 11:35:48 (2 months ago)	FortiWeb WAF: 26 attacks detected. Threat Score: 10547755. Types: Client Management(13), Signature D ... show more FortiWeb WAF: 26 attacks detected. Threat Score: 10547755. Types: Client Management(13), Signature Detection(13). Origin: United States. show less	Web App Attack
Anonymous	2026-07-21 23:48:20 (3 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2026-06-18 09:29:14 (4 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:12-29.204.217.129.21	Web App Attack
Anonymous	2026-04-19 07:26:45 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-26.204.217.129.21.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-26.204.217.129.21.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-16 06:44:03 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 204.217.129.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 204.217.129.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 02:43:55.944964 2026] [security2:error] [pid 292348:tid 292348] [client 204.217.129.21:30593] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.holgerfeld.com:80\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.holgerfeld.com"] [uri "/mailto:[email protected]"] [unique_id "aeCFK_QGAZIam1PYoSFGQAAAABk"], referer: http://www.holgerfeld.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-02 14:11:37 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 204.217.129.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 204.217.129.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 09:11:31.982059 2026] [security2:error] [pid 14914:tid 14914] [client 204.217.129.21:35851] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|capitalswisscorp.com:80\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/mailto:[email protected]"] [unique_id "aVfSE7DKzxegZsHCGaNbSgAAACI"], referer: http://capitalswisscorp.com show less	Brute-Force Bad Web Bot Web App Attack
🇪🇨 icp77	2025-12-20 18:08:00 (10 months ago)	Abuse DDoS	DDoS Attack FTP Brute-Force Port Scan Hacking SQL Injection Brute-Force Exploited Host Web App Attack SSH

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.177.179.24

🇨🇳 115.231.50.242

🇫🇷 91.134.142.222

🇺🇸 20.118.27.165

🇰🇷 211.43.100.92

🇸🇬 194.164.107.6

🇧🇷 190.115.84.25

🇮🇳 182.70.63.221

🇻🇳 160.250.132.238

🇸🇬 152.42.180.197

🇭🇰 103.210.21.178

🇮🇩 103.149.203.56

🇺🇸 98.174.61.78

🇺🇸 50.84.211.204

🇫🇷 45.90.163.37

🇳🇿 202.180.79.103

🇩🇪 167.94.146.39

🇧🇬 62.60.134.210

🇺🇸 34.138.189.80

🇷🇴 2.57.122.238