JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.222.147.144

129.222.147.144 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 55%: ?

55%

ISP	SpaceX Services, Inc.
Usage Type	Fixed Line ISP
ASN	AS14593
Hostname(s)	customer.nrbiken1.isp.starlink.com
Domain Name	spacex.com
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.222.147.144

Whois 129.222.147.144

IP Abuse Reports for 129.222.147.144:

This IP address has been reported a total of 14 times from 10 distinct sources. 129.222.147.144 was first reported on June 25th 2026, and the most recent report was 46 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-27 17:30:12 (46 minutes ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.144 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.144 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 13:30:04.697087 2026] [security2:error] [pid 4044555:tid 4044555] [client 129.222.147.144:27325] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.144 (+1 hits since last alert)\|joeordie.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "joeordie.com"] [uri "/xmlrpc.php"] [unique_id "ameVnEfMc-b5dkv81q2B5AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-07-27 17:27:22 (49 minutes ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 15:13:31 (3 hours ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.144 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.144 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 11:13:25.033252 2026] [security2:error] [pid 2070743:tid 2070743] [client 129.222.147.144:6900] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.144 (+1 hits since last alert)\|nekstlevel.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nekstlevel.com"] [uri "/xmlrpc.php"] [unique_id "amd1lfSGpDedY9wPYndOjAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-27 13:20:38 (4 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 13:12:28 (5 hours ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.144 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.144 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 09:12:22.917809 2026] [security2:error] [pid 64787:tid 64787] [client 129.222.147.144:51870] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.144 (+1 hits since last alert)\|whiterapperz.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "whiterapperz.com"] [uri "/xmlrpc.php"] [unique_id "amdZNgWQRTkTcflnhff7qwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-27 13:06:39 (5 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-07-27 13:06:26 (5 hours ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 12:44:41 (5 hours ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.144 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.144 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:44:36.327835 2026] [security2:error] [pid 1343649:tid 1343649] [client 129.222.147.144:42453] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.144 (+1 hits since last alert)\|odysseydogasporlari.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "odysseydogasporlari.com"] [uri "/xmlrpc.php"] [unique_id "amdStH4Xd6nhnRcUzcNgIwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 11:38:20 (6 hours ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.144 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.144 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:38:14.663447 2026] [security2:error] [pid 3354090:tid 3354090] [client 129.222.147.144:45157] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.144 (+1 hits since last alert)\|healthmarkcounseling.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "healthmarkcounseling.com"] [uri "/xmlrpc.php"] [unique_id "amdDJtQOt-oW2ZjM2NrmRQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WeekendWeb	2026-07-27 10:53:06 (7 hours ago)	Wordpress Vunerability attack	Web App Attack
🇮🇩 David Koswari	2026-07-15 05:15:00 (1 week ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇩🇪 Vegascosmetics	2026-07-08 14:53:54 (2 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-06-28 13:15:10 (4 weeks ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /brands/realtronix/shopby/manufacturer-beyerdynamic-rcf-realtronix-chief-lsi-ask_proxima-projectiondesign-xyz.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 kosada.com	2026-06-25 20:18:58 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.32.209.234

🇩🇪 176.9.22.222

🇧🇩 103.213.238.91

🇺🇸 103.143.239.167

🇬🇧 45.82.76.116

🇳🇱 195.178.110.223

🇷🇺 185.240.102.11

🇨🇦 159.203.27.26

🇵🇰 153.117.15.69

🇺🇸 152.32.205.153

🇨🇳 110.249.201.60

🇺🇸 107.172.43.200

🇺🇦 46.149.57.33

🇳🇱 45.148.10.151

🇯🇵 34.146.1.114

🇮🇪 20.107.250.226

🇷🇴 2.57.122.238

🇺🇸 216.25.89.123

🇳🇱 195.178.110.228

🇺🇸 172.234.25.243