JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.222.147.122

129.222.147.122 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 62%: ?

62%

ISP	SpaceX Services, Inc.
Usage Type	Fixed Line ISP
ASN	AS14593
Hostname(s)	customer.nrbiken1.isp.starlink.com
Domain Name	spacex.com
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.222.147.122

Whois 129.222.147.122

IP Abuse Reports for 129.222.147.122:

This IP address has been reported a total of 29 times from 19 distinct sources. 129.222.147.122 was first reported on May 9th 2026, and the most recent report was 11 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 netclix.gr	2026-07-02 13:49:51 (11 minutes ago)	(wordpress) Failed wordpress login from 129.222.147.122 (KE/Kenya/customer.nrbiken1.isp.starlink.com ... show more (wordpress) Failed wordpress login from 129.222.147.122 (KE/Kenya/customer.nrbiken1.isp.starlink.com): (CF_ENABLE) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-02 13:39:54 (21 minutes ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.122 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.122 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 09:39:48.990717 2026] [security2:error] [pid 29977:tid 29977] [client 129.222.147.122:51190] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.122 (+1 hits since last alert)\|lighthousescm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lighthousescm.com"] [uri "/xmlrpc.php"] [unique_id "akZqJNmGUcf6mKre90rXkQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 12:06:01 (1 hour ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.122 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.122 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 08:05:57.957242 2026] [security2:error] [pid 18306:tid 18306] [client 129.222.147.122:51077] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.122 (+1 hits since last alert)\|hookedupfishing.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hookedupfishing.net"] [uri "/xmlrpc.php"] [unique_id "akZUJbjkINGcom-G4e7X5QAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 10:05:20 (3 hours ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.122 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.122 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 06:05:14.675975 2026] [security2:error] [pid 1652:tid 1652] [client 129.222.147.122:44991] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.122 (+1 hits since last alert)\|meganmurph.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "meganmurph.com"] [uri "/xmlrpc.php"] [unique_id "akY32iEux8XFUTskQJ7_HQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 stinpriza	2026-06-30 14:36:19 (1 day ago)	Web App Attack	Web App Attack
🇨🇭 4server	2026-06-29 16:18:24 (2 days ago)	[MonJun2918:18:18.5490782026][security2:error][pid3224568:tid3224580][client129.222.147.122:0]ModSec ... show more [MonJun2918:18:18.5490782026][security2:error][pid3224568:tid3224580][client129.222.147.122:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ch-garantie.ch\"][uri\"/xmlrpc.php\"][unique_id\"akKayoSzBPA5D2BEULeOZgAAAAo\"] show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-06-29 08:41:02 (3 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 David Koswari	2026-06-05 05:44:00 (3 weeks ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇳🇱 ParaBug	2026-05-30 08:37:31 (1 month ago)	129.222.147.122 - - [30/May/2026:10:37:31 +0200] "POST /xmlrpc.php HTTP/1.1" 301 2921 "-" "Jetpack/1 ... show more 129.222.147.122 - - [30/May/2026:10:37:31 +0200] "POST /xmlrpc.php HTTP/1.1" 301 2921 "-" "Jetpack/12.0; WordPress/6.4; http://site88845636.com" ... show less	Phishing Brute-Force Web App Attack
🇳🇱 Site.eu	2026-05-30 06:34:14 (1 month ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-05-30 05:33:38 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.122 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.122 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 01:33:32.518437 2026] [security2:error] [pid 27485:tid 27485] [client 129.222.147.122:12165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.122 (+1 hits since last alert)\|vzan.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vzan.org"] [uri "/xmlrpc.php"] [unique_id "ahp2rJatCohaosJpxn8hvgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-30 04:21:46 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.122 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.122 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 00:21:39.114696 2026] [security2:error] [pid 7281:tid 7281] [client 129.222.147.122:10294] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.122 (+1 hits since last alert)\|advantagept.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "advantagept.org"] [uri "/xmlrpc.php"] [unique_id "ahpl08dj1iJpISL8xxXQFAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-30 01:37:31 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.122 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.122 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 21:37:26.772148 2026] [security2:error] [pid 24537:tid 24537] [client 129.222.147.122:31334] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.122 (+1 hits since last alert)\|roguetechink.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "roguetechink.com"] [uri "/xmlrpc.php"] [unique_id "aho_VrBVZn_wFPLjHm_HyQAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-30 00:33:50 (1 month ago)	(wordpress) Failed wordpress login from 129.222.147.122 (KE/Kenya/customer.nrbiken1.isp.starlink.com ... show more (wordpress) Failed wordpress login from 129.222.147.122 (KE/Kenya/customer.nrbiken1.isp.starlink.com) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-05-29 23:35:05 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.122 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.122 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 19:34:58.593853 2026] [security2:error] [pid 27120:tid 27120] [client 129.222.147.122:62599] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.122 (+1 hits since last alert)\|accommodation-perthairport.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "accommodation-perthairport.com"] [uri "/xmlrpc.php"] [unique_id "ahoiom9I8NexTvSlpGBE3gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.238.242.194

🇮🇳 49.207.150.52

🇻🇳 14.191.158.240

🇷🇴 193.29.13.125

🇦🇷 186.23.209.47

🇺🇸 184.57.39.170

🇨🇳 183.233.85.194

🇰🇷 183.96.62.29

🇨🇴 179.33.186.150

🇩🇪 167.94.146.78

🇨🇳 106.13.98.129

🇺🇸 66.132.172.125

🇸🇬 43.173.181.129

🇧🇪 34.62.9.136

🇹🇭 202.29.228.248

🇹🇭 202.29.220.6

🇿🇦 197.221.108.78

🇮🇳 182.95.185.158

🇮🇳 182.95.150.106

🇮🇳 182.95.119.30