JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 204.217.130.202

204.217.130.202 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 13%: ?

13%

ISP	Aventice LLC
Usage Type	Fixed Line ISP
ASN	AS11572
Domain Name	aventice.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 204.217.130.202

Whois 204.217.130.202

IP Abuse Reports for 204.217.130.202:

This IP address has been reported a total of 19 times from 9 distinct sources. 204.217.130.202 was first reported on November 22nd 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Steve	2026-06-29 13:04:03 (6 days ago)	Forum Spam	Web Spam
🇱🇻 garmtech.com	2026-06-20 17:06:31 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-06.204.217.130.202.web-spam ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-06.204.217.130.202.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-04-19 16:11:12 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-11.204.217.130.202.web-spam ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-11.204.217.130.202.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-14 06:25:48 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 204.217.130.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 204.217.130.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 02:25:41.290552 2026] [security2:error] [pid 1952269:tid 1952269] [client 204.217.130.202:44617] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.holgerfeld.com:80\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.holgerfeld.com"] [uri "/mailto:[email protected]"] [unique_id "ad3d5W6jI5m_hPgzH-XMkwAAAAU"], referer: http://www.holgerfeld.com show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-03-26 06:18:52 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-18.204.217.130.202.web-spam ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-18.204.217.130.202.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 MAGIC	2026-03-14 00:09:40 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇭 backslash	2026-02-20 10:09:08 (4 months ago)		SQL Injection
🇺🇸 TPI-Abuse	2026-01-26 09:22:38 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 204.217.130.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 204.217.130.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 04:22:34.866613 2026] [security2:error] [pid 8966:tid 8966] [client 204.217.130.202:41769] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|holgerfeld.com:80\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "holgerfeld.com"] [uri "/mailto:[email protected]"] [unique_id "aXcyWojmBq5UbNsJrapi8QAAABE"], referer: http://holgerfeld.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-07 07:59:17 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 204.217.130.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 204.217.130.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 07 02:59:09.691806 2026] [security2:error] [pid 29090:tid 29090] [client 204.217.130.202:37911] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.capitalswisscorp.com:80\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.capitalswisscorp.com"] [uri "/mailto:[email protected]"] [unique_id "aV4STa_KYLcLMqE4dutPfQAAAAY"], referer: http://www.capitalswisscorp.com show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-12-22 08:13:52 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-13.204.217.130.202.web-spam ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-13.204.217.130.202.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2025-11-25 13:36:45 (7 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-36.204.217.130.202.web-spam ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-36.204.217.130.202.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇨🇭 backslash	2025-10-06 03:15:16 (9 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇩🇪 kranem	2025-10-01 18:00:19 (9 months ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 174 (COGENT-174) Protocol: HTTP/1.1 (HEAD ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 174 (COGENT-174) Protocol: HTTP/1.1 (HEAD method) Endpoint: / Timestamp: 2025-10-01T16:43:36Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-08-26 20:36:03 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 204.217.130.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 204.217.130.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 26 16:35:58.072060 2025] [security2:error] [pid 1848:tid 1865] [client 204.217.130.202:38077] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|woofnrose.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "woofnrose.com"] [uri "/mailto:[email protected]"] [unique_id "aK4arrnMdT1wiDpX4hkDSwAAAEk"], referer: https://woofnrose.com show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-04-04 03:59:45 (1 year ago)	WP Login Scan Activities	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇶 185.166.25.150

🇵🇱 176.53.159.198

🇺🇸 107.167.34.125

🇱🇹 45.227.254.170

🇺🇸 45.33.64.50

🇧🇷 45.5.222.112

🇨🇳 218.75.165.74

🇺🇸 185.223.152.93

🇭🇰 118.193.39.117

🇰🇷 20.194.34.72

🇮🇩 208.76.40.121

🇭🇰 112.119.50.159

🇨🇳 106.12.22.213

🇲🇾 60.53.39.69

🇺🇸 47.251.179.35

🇧🇷 186.206.144.70

🇳🇱 185.226.197.65

🇫🇷 185.55.240.251

🇲🇽 170.239.148.142

🇺🇸 99.92.204.98