JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

92.119.229.21

Neutral Activity

Abuse Confidence Score

0% Low Risk

7 reports

4 reporters · latest 1 year ago

ISP: IT Hostline Ltd
Usage Type: Fixed Line ISP
ASN: AS214238
Domain Name: ithostline.com
Country: 🇩🇪 Germany
City: Witten, North Rhine-Westphalia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

92.119.229.21 has been reported 7 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

7 from 4 distinct reporters

First reported

September 22nd 2024

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-11-05 17:58:44 UTC · (1 year ago)	(mod_security) mod_security (id:210350) triggered by 92.119.229.21 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 12:58:13.730809 2025] [security2:error] [pid 10986:tid 10986] [client 92.119.229.21:64405] M ... show more (mod_security) mod_security (id:210350) triggered by 92.119.229.21 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 12:58:13.730809 2025] [security2:error] [pid 10986:tid 10986] [client 92.119.229.21:64405] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.sutherlandyogastudio.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.sutherlandyogastudio.com"] [uri "/about/"] [unique_id "aQuQNW5c9T4J28kknvMx1AAAAAk"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-05-28 23:02:57 UTC · (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2025-04-22 04:15:29 UTC · (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 Psycho Solutions LLC	2025-04-15 14:54:25 UTC · (1 year ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 4/15/2025 2:54 pm (UTC-6)	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-03 22:50:31 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 92.119.229.21 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 18:50:25.160903 2025] [security2:error] [pid 23378:tid 23378] [client 92.119.229.21:41717] [ ... show more (mod_security) mod_security (id:210730) triggered by 92.119.229.21 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 18:50:25.160903 2025] [security2:error] [pid 23378:tid 23378] [client 92.119.229.21:41717] [client 92.119.229.21] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.CapitalSwissCorp.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.capitalswisscorp.com"] [uri "/mailto:[email protected]"] [unique_id "Z-8Qsbh5GidsouF0OMdMzQAAABA"], referer: http://www.CapitalSwissCorp.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-20 09:36:16 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 92.119.229.21 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 20 05:36:09.265785 2025] [security2:error] [pid 21679:tid 21679] [client 92.119.229.21:50499] [ ... show more (mod_security) mod_security (id:210730) triggered by 92.119.229.21 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 20 05:36:09.265785 2025] [security2:error] [pid 21679:tid 21679] [client 92.119.229.21:50499] [client 92.119.229.21] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.holgerfeld.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.holgerfeld.com"] [uri "/mailto:[email protected]"] [unique_id "Z9vhif1agTEid5iQXKRFiAAAABE"], referer: http://www.holgerfeld.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 easyonnet.com	2024-09-22 19:22:13 UTC · (2 years ago)		Fraud Orders

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 221.1.195.6

🇳🇱 193.47.62.28

🇺🇸 185.191.171.10

🇮🇳 182.237.13.208

🇺🇸 172.121.178.28

🇺🇸 172.121.92.140

🇫🇷 172.71.130.159

🇯🇲 72.27.22.82

🇩🇪 69.5.169.179

🇩🇪 69.5.169.116

🇳🇱 64.205.72.19

🇮🇳 45.123.110.70

🇦🇪 31.215.136.181

🇺🇸 184.154.16.90

🇫🇷 91.231.89.13

🇳🇱 45.148.10.157

🇺🇦 45.14.28.244

🇺🇸 40.223.166.115

🇺🇸 40.223.158.10

🇺🇸 40.223.139.73