JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.222.187.54

129.222.187.54 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 30%: ?

30%

ISP	SpaceX Services, Inc.
Usage Type	Fixed Line ISP
ASN	AS14593
Hostname(s)	customer.nrbiken1.isp.starlink.com
Domain Name	spacex.com
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.222.187.54

Whois 129.222.187.54

IP Abuse Reports for 129.222.187.54:

This IP address has been reported a total of 22 times from 19 distinct sources. 129.222.187.54 was first reported on June 24th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-16 13:34:31 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 129.222.187.54 (customer.nrbiken1.isp.starlink. ... show more (mod_security) mod_security (id:240335) triggered by 129.222.187.54 (customer.nrbiken1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 09:34:24.300751 2026] [security2:error] [pid 25096:tid 25109] [client 129.222.187.54:37983] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 129.222.187.54 (+1 hits since last alert)\|abusaimeh.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "abusaimeh.com"] [uri "/xmlrpc.php"] [unique_id "ajFQ4PqM5-snx2kjAOKNDwAAAMs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-06-16 12:28:35 (2 days ago)	(wordpress) Failed wordpress login from 129.222.187.54 (KE/Kenya/Nairobi County/Nairobi/customer.nrb ... show more (wordpress) Failed wordpress login from 129.222.187.54 (KE/Kenya/Nairobi County/Nairobi/customer.nrbiken1.isp.starlink.com) show less	Brute-Force
🇩🇪 Vegascosmetics	2026-06-16 10:59:20 (2 days ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇨🇭 backslash	2026-06-09 12:18:03 (1 week ago)	block ruleset 333FBABBA6DC06D7D20EDF60700DF5D9612E6F09	Bad Web Bot
🇦🇺 MAGIC	2026-02-12 00:33:18 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 HandyTreff.de	2026-01-20 17:10:45 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -55.262 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -55.262 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa show less	Bad Web Bot Web App Attack
🇸🇬 mypatricks	2026-01-20 10:31:04 (4 months ago)	129.222.187.54 \| Port: 13621 \| DNS: customer.nrbiken1.pop.starlinkisp.net 2026-01-20T18:31:03+08:00 ... show more 129.222.187.54 \| Port: 13621 \| DNS: customer.nrbiken1.pop.starlinkisp.net 2026-01-20T18:31:03+08:00 Africa/Nairobi \| Fake HTTP Protocol detected! \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /found-the-best-anpanman-birthday-cake-in-malaysia/?d0af061864b1386b7388f4=JPY&code=JPY \| Ref: - \| Country: KE/Kenya/+03:00 IP City: Nairobi Windows 9c0de66048734813-LIS/Lisbon, Portugal 1 hits/0 secs Robots 3 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack
🇨🇳 ThreatBook.io	2026-01-19 00:07:19 (5 months ago)	ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/129.222.187.54	SSH
🇹🇷 pamircil	2026-01-17 10:04:36 (5 months ago)	🍯 WinnieThePooh Honeypot : Detected (telnet/23) 💀	Brute-Force SSH
🇺🇸 MPL	2026-01-09 02:23:24 (5 months ago)	tcp/23 (4 or more attempts)	Port Scan
🇩🇪 london2038.com	2025-12-10 07:42:20 (6 months ago)	Connection atttempts against closed TCP ports Dec 10 08:42:17 BLOCK SRC=129.222.187.54 LEN=52 TOS=0x ... show more Connection atttempts against closed TCP ports Dec 10 08:42:17 BLOCK SRC=129.222.187.54 LEN=52 TOS=0x08 PREC=0x00 TTL=46 ID=32071 DF PROTO=TCP SPT=4689 DPT=443 WINDOW=32044 RES=0x00 ACK FIN Dec 10 08:42:18 BLOCK SRC=129.222.187.54 LEN=52 TOS=0x08 PREC=0x00 TTL=46 ID=32072 DF PROTO=TCP SPT=4689 DPT=443 WINDOW=32044 RES=0x00 ACK FIN Dec 10 08:42:19 BLOCK SRC=129.222.187.54 LEN=52 TOS=0x08 PREC=0x00 TTL=46 ID=32073 DF PROTO=TCP SPT=4689 DPT=443 WINDOW=32044 RES=0x00 ACK FIN show less	Port Scan
🇮🇹 VHosting	2025-12-02 13:47:39 (6 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2025-11-25 13:34:49 (6 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-18 13:33:36 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 london2038.com	2025-11-16 19:36:12 (7 months ago)	Connection atttempts against closed TCP ports Nov 16 20:35:47 BLOCK SRC=129.222.187.54 LEN=52 TOS=0x ... show more Connection atttempts against closed TCP ports Nov 16 20:35:47 BLOCK SRC=129.222.187.54 LEN=52 TOS=0x08 PREC=0x00 TTL=48 ID=39484 DF PROTO=TCP SPT=60342 DPT=443 WINDOW=32044 RES=0x00 ACK FIN Nov 16 20:35:55 BLOCK SRC=129.222.187.54 LEN=52 TOS=0x08 PREC=0x00 TTL=48 ID=39485 DF PROTO=TCP SPT=60342 DPT=443 WINDOW=32044 RES=0x00 ACK FIN Nov 16 20:36:11 BLOCK SRC=129.222.187.54 LEN=52 TOS=0x08 PREC=0x00 TTL=48 ID=39486 DF PROTO=TCP SPT=60342 DPT=443 WINDOW=32044 RES=0x00 ACK FIN show less	Port Scan

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 152.32.146.235

🇹🇼 128.14.236.224

🇵🇰 103.172.26.29

🇳🇱 91.92.40.6

🇬🇧 81.19.219.226

🇺🇸 64.62.197.2

🇺🇸 45.156.129.88

🇺🇸 209.85.167.194

🇧🇴 190.129.122.12

🇮🇷 185.213.165.138

🇩🇪 158.94.208.36

🇭🇰 150.5.169.138

🇫🇮 147.185.133.16

🇮🇳 122.183.32.9

🇺🇸 104.128.72.37

🇺🇸 103.234.62.12

🇩🇪 80.141.62.247

🇩🇪 77.176.138.159

🇱🇹 45.227.254.170

🇩🇪 195.3.193.170