JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

216.223.222.129

Neutral Activity

Abuse Confidence Score

0% Low Risk

17 reports

8 reporters · latest 2 months ago

ISP: Horry Telephone Cooperative, Inc.
Usage Type: Fixed Line ISP
ASN: AS21565
Hostname(s): 129.216-223-222-net.sccoast.net
Domain Name: htcinc.net
Country: 🇺🇸 United States of America
City: Forestbrook, South Carolina

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

216.223.222.129 has been reported 17 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

17 from 8 distinct reporters

First reported

January 16th 2023

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-07 04:19:48 UTC · (2 months ago)	Web attack	Bad Web Bot Web App Attack
🇳🇱 ChanOrorspuEvladı	2025-12-08 22:40:48 UTC · (11 months ago)	Honeypot detected port_scan on port 80. IP: 216.223.222.129, Evidence: Port scan/exploit on port 80	Port Scan
🇺🇸 TPI-Abuse	2025-02-08 02:56:34 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 216.223.222.129 (129.216-223-222-net.sccoast.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 07 21:56:25.022748 2025] [security2:error] [pid 22600:tid 22618 ... show more (mod_security) mod_security (id:210730) triggered by 216.223.222.129 (129.216-223-222-net.sccoast.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 07 21:56:25.022748 2025] [security2:error] [pid 22600:tid 22618] [client 216.223.222.129:7800] [client 216.223.222.129] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|barstow-station.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "barstow-station.com"] [uri "/ceol.com"] [unique_id "Z6bH2WETvdFwY7LjGrHqMAAAAFA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-12 17:57:59 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 216.223.222.129 (129.216-223-222-net.sccoast.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 12 12:57:48.433757 2025] [security2:error] [pid 1945423:tid 194 ... show more (mod_security) mod_security (id:210730) triggered by 216.223.222.129 (129.216-223-222-net.sccoast.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 12 12:57:48.433757 2025] [security2:error] [pid 1945423:tid 1945435] [client 216.223.222.129:28186] [client 216.223.222.129] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thebiglies.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thebiglies.org"] [uri "/malia97.com"] [unique_id "Z4QCnNAF9D55fsFiZMTFpQAAAUc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-09 20:58:36 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 216.223.222.129 (129.216-223-222-net.sccoast.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 09 15:58:26.918585 2025] [security2:error] [pid 1380:tid 1380] ... show more (mod_security) mod_security (id:210730) triggered by 216.223.222.129 (129.216-223-222-net.sccoast.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 09 15:58:26.918585 2025] [security2:error] [pid 1380:tid 1380] [client 216.223.222.129:13970] [client 216.223.222.129] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|matteozacchino.dev\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "matteozacchino.dev"] [uri "/sultryacademy.com"] [unique_id "Z4A4curfmPnNGTAxUSokqQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-02 19:52:20 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 216.223.222.129 (129.216-223-222-net.sccoast.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 02 14:52:12.548843 2024] [security2:error] [pid 1785235:tid 178 ... show more (mod_security) mod_security (id:210730) triggered by 216.223.222.129 (129.216-223-222-net.sccoast.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 02 14:52:12.548843 2024] [security2:error] [pid 1785235:tid 1785235] [client 216.223.222.129:54193] [client 216.223.222.129] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|franzexpress.com\|F\|2"] [data ".seobefoundlocal.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "franzexpress.com"] [uri "/sites.seobefoundlocal.com"] [unique_id "Z04P7Ag-qKQ8gnCkpmkNrQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-07-25 11:15:18 UTC · (2 years ago)	GET / HTTP/2.0 GET / HTTP/2.0 GET / HTTP/2.0	Bad Web Bot Web App Attack
Anonymous	2024-07-09 23:46:34 UTC · (2 years ago)	GET / HTTP/2.0 GET / HTTP/2.0 GET / HTTP/2.0	Bad Web Bot Web App Attack
🇳🇱 Linuxmalwarehuntingnl	2024-07-03 07:06:50 UTC · (2 years ago)	Unauthorized connection attempt	Brute-Force
Anonymous	2024-01-23 19:16:32 UTC · (2 years ago)	GET / HTTP/2.0 GET / HTTP/2.0 GET / HTTP/2.0	Bad Web Bot Web App Attack
Anonymous	2024-01-05 17:59:13 UTC · (2 years ago)	GET / HTTP/2.0 GET / HTTP/2.0 GET / HTTP/2.0	Bad Web Bot Web App Attack
Anonymous	2024-01-03 17:49:46 UTC · (2 years ago)	GET / HTTP/2.0 GET / HTTP/2.0 GET / HTTP/2.0	Bad Web Bot Web App Attack
Anonymous	2023-07-27 02:59:23 UTC · (3 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
Anonymous	2023-07-22 14:59:10 UTC · (3 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
Anonymous	2023-06-29 18:54:28 UTC · (3 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 194.187.176.74

🇺🇸 172.90.1.117

🇧🇷 164.163.200.209

🇺🇸 161.35.121.0

🇫🇮 155.212.38.57

🇳🇱 109.160.32.170

🇷🇺 89.151.189.224

🇺🇸 66.175.213.4

🇺🇸 65.49.1.125

🇺🇸 64.62.197.63

🇺🇸 40.76.101.196

🇷🇴 2.57.121.112

🇩🇪 2.27.248.82

🇷🇴 193.46.255.86

🇺🇸 158.101.17.60

🇫🇷 153.79.115.200

🇺🇸 136.242.103.229

🇧🇬 79.124.49.146

🇺🇸 64.62.197.214

🇨🇳 49.235.156.121