JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.222.147.235

129.222.147.235 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 31%: ?

31%

ISP	SpaceX Services, Inc.
Usage Type	Fixed Line ISP
ASN	AS14593
Hostname(s)	customer.nrbiken1.isp.starlink.com
Domain Name	spacex.com
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.222.147.235

Whois 129.222.147.235

IP Abuse Reports for 129.222.147.235:

This IP address has been reported a total of 39 times from 24 distinct sources. 129.222.147.235 was first reported on July 23rd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-08 12:13:19 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.235 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.235 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 08:13:13.997981 2026] [security2:error] [pid 551:tid 551] [client 129.222.147.235:58257] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.235 (+1 hits since last alert)\|marianozaro.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "marianozaro.com"] [uri "/xmlrpc.php"] [unique_id "ak4-2UigjSrTAfCvF12vTQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-08 11:29:14 (1 day ago)	(PERMBLOCK) 129.222.147.235 (KE/Kenya/customer.nrbiken1.isp.starlink.com) has had more than 4 temp b ... show more (PERMBLOCK) 129.222.147.235 (KE/Kenya/customer.nrbiken1.isp.starlink.com) has had more than 4 temp blocks show less	Hacking
Anonymous	2026-07-08 11:12:12 (1 day ago)	(wordpress) Failed wordpress login from 129.222.147.235 (KE/Kenya/customer.nrbiken1.isp.starlink.com ... show more (wordpress) Failed wordpress login from 129.222.147.235 (KE/Kenya/customer.nrbiken1.isp.starlink.com) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-08 07:13:25 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.235 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.235 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 03:13:18.595193 2026] [security2:error] [pid 31693:tid 31704] [client 129.222.147.235:42778] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.235 (+1 hits since last alert)\|leaderoftheopposition.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "leaderoftheopposition.com"] [uri "/xmlrpc.php"] [unique_id "ak34juuW0iWZ8TeIJbPZeQAAAMg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 06:10:19 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.235 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.235 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 02:10:14.113230 2026] [security2:error] [pid 31408:tid 31423] [client 129.222.147.235:8371] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.235 (+1 hits since last alert)\|tradersofficepark.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tradersofficepark.com"] [uri "/xmlrpc.php"] [unique_id "ak3pxpzXKR3WcbHpJYmjKgAAAI0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 21:46:04 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 129.222.147.235 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 129.222.147.235 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 17:45:56.559455 2026] [security2:error] [pid 20855:tid 20855] [client 129.222.147.235:50349] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.147.235 (+1 hits since last alert)\|lukeschicago.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lukeschicago.com"] [uri "/xmlrpc.php"] [unique_id "ak1zlBwIZwIGc8cEA4WEjQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-07 20:10:24 (2 days ago)	(xmlrpc) Failed xmlrpc access from 129.222.147.235 (KE/Kenya/customer.nrbiken1.isp.starlink.com): 5 ... show more (xmlrpc) Failed xmlrpc access from 129.222.147.235 (KE/Kenya/customer.nrbiken1.isp.starlink.com): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 kosada.com	2026-06-29 09:09:05 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-11 09:24:05 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 129.222.147.235 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:225170) triggered by 129.222.147.235 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 05:23:59.326674 2026] [security2:error] [pid 1561116:tid 1561116] [client 129.222.147.235:39914] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|igolfallday.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "igolfallday.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adoTL4FcBG10-9kDi0g0NgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-04-11 08:17:11 (2 months ago)	Try to access /xmlrpc.php	Web App Attack
🇦🇺 MAGIC	2026-03-28 02:01:07 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-20 06:09:44 (3 months ago)	(mod_security) mod_security (id:217210) triggered by 129.222.147.235 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:217210) triggered by 129.222.147.235 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:09:36.551380 2026] [security2:error] [pid 27442:tid 27442] [client 129.222.147.235:32098] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|el-pen.com\|F\|4"] [data "GET http://el-pen.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "el-pen.com"] [uri "/"] [unique_id "abzkoBDHlSNYIyb6SH1EUwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-13 20:07:33 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 129.222.147.235 (customer.nrbiken1.isp.starlink ... show more (mod_security) mod_security (id:225170) triggered by 129.222.147.235 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 16:07:25.245579 2026] [security2:error] [pid 29335:tid 29335] [client 129.222.147.235:25139] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|edgebiopharma.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "edgebiopharma.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abRufcVp3hBegI96EzyzPwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 matt	2026-03-02 21:24:28 (4 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack
🇺🇸 gui-ying233	2026-02-25 12:57:35 (4 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.96

🇲🇦 196.77.236.10

🇮🇳 182.19.35.57

🇸🇪 170.168.173.78

🇺🇸 103.143.10.140

🇭🇰 101.79.165.43

🇳🇱 91.92.40.19

🇺🇸 172.212.224.40

🇺🇸 147.185.132.31

🇺🇸 147.182.197.10

🇨🇳 115.190.179.68

🇺🇸 47.20.243.47

🇺🇸 20.102.91.36

🇺🇸 205.210.31.104

🇹🇿 197.186.73.131

🇨🇴 186.31.95.163

🇺🇸 146.190.209.45

🇨🇳 113.105.107.38

🇺🇸 73.36.177.174

🇮🇹 62.170.169.184