This IP address has been reported a total of
11
times from
9 distinct
sources.
122.129.67.29 was first reported on
June 13th 2026 , and the most recent report was
1 day ago Germany
with 4
reports;
United States of America
with 4
reports;
France
with 1
report.
The most common categories in these recent reports were:
Brute-Force
4
times;
Port Scan
4
times;
Hacking
3
times;
Web App Attack
3
times;
Bad Web Bot
3
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-10-03 23:52:34
(1 day ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
🇺🇸
MPL
2026-09-10 16:31:53
(3 weeks ago)
tcp/23
Port Scan
2026-09-10 14:20:31
(3 weeks ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
🇩🇪
Tsumugi Kotobuki
2026-09-10 09:53:44
(3 weeks ago)
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 48 | Len: 44B | Win ...
show more
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 48 | Len: 44B | Win: 15421(1) | rDNS: 122-129-67-29.braintel.net.pk | F2B/ufw-honeypot@2026-09-10T09:53:44Z
show less
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-08-20 13:49:40
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 122.129.67.29 (122-129-67-29.braintel.net.pk): ...
show more
(mod_security) mod_security (id:240335) triggered by 122.129.67.29 (122-129-67-29.braintel.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 09:49:34.741961 2026] [security2:error] [pid 2289:tid 2289] [client 122.129.67.29:59574] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 122.129.67.29 (+1 hits since last alert)|walkercline.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "walkercline.com"] [uri "/xmlrpc.php"] [unique_id "aocF7q9KZacOzWj_rSNumQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-08-20 13:44:55
(1 month ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
kosada.com
2026-08-19 01:34:52
(1 month ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇩🇪
rh24
2026-08-07 17:09:26
(1 month ago)
(wordpress) Failed wordpress login from 122.129.67.29 (PK/Pakistan/122-129-67-29.braintel.net.pk): ...
show more
(wordpress) Failed wordpress login from 122.129.67.29 (PK/Pakistan/122-129-67-29.braintel.net.pk): (CF_ENABLE)
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-08-07 16:48:36
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 122.129.67.29 (122-129-67-29.braintel.net.pk): ...
show more
(mod_security) mod_security (id:240335) triggered by 122.129.67.29 (122-129-67-29.braintel.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 12:48:31.585641 2026] [security2:error] [pid 1122446:tid 1122446] [client 122.129.67.29:43089] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 122.129.67.29 (+1 hits since last alert)|riser-astrology.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "riser-astrology.com"] [uri "/xmlrpc.php"] [unique_id "anYMX68SYx55UOBz-SLzpwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-29 07:00:00
(2 months ago)
Apache probe; attempts=26; exact paths: /xmlrpc.php
Web App Attack
🇦🇺
screwlooseit.com.au
2026-06-13 07:27:36
(3 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
PK/Pakistan/122-129-67-29.braintel.net.pk
Web App Attack
Showing 1 to
11
of 11 reports
