JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.222.206.206

129.222.206.206 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	SpaceX Services, Inc.
Usage Type	Fixed Line ISP
ASN	AS14593
Hostname(s)	customer.lgosnga1.isp.starlink.com
Domain Name	spacex.com
Country	🇳🇬 Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.222.206.206

Whois 129.222.206.206

IP Abuse Reports for 129.222.206.206:

This IP address has been reported a total of 39 times from 28 distinct sources. 129.222.206.206 was first reported on August 19th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-08-26 04:13:02 (6 days ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2026-08-26 00:40:35 (6 days ago)	apache vulnerability scan	Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 00:36:54 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 129.222.206.206 (customer.lgosnga1.isp.starlink ... show more (mod_security) mod_security (id:210492) triggered by 129.222.206.206 (customer.lgosnga1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 20:36:49.947502 2026] [security2:error] [pid 32307:tid 32307] [client 129.222.206.206:31179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.saynotoofland.org"] [uri "/.env"] [unique_id "ao41IRsxlX_RjRywoKHsQQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-08-25 23:53:01 (6 days ago)	[Wed Aug 26 09:53:00.188344 2026] [security2:error] [pid 308283] [client 129.222.206.206:40818] [cli ... show more [Wed Aug 26 09:53:00.188344 2026] [security2:error] [pid 308283] [client 129.222.206.206:40818] [client 129.222.206.206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/.env"] [unique_id "ao4q3FrvBr_4xtTjc9M5YAAAAAk"] ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 23:23:14 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 129.222.206.206 (customer.lgosnga1.isp.starlink ... show more (mod_security) mod_security (id:210492) triggered by 129.222.206.206 (customer.lgosnga1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 19:23:10.170886 2026] [security2:error] [pid 32622:tid 32622] [client 129.222.206.206:30161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/.env"] [unique_id "ao4j3h-vLzF4P3r7Qjvh8AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-08-25 20:36:51 (6 days ago)	Try to access /.env	Web App Attack
🇺🇸 nationaleventpros.com	2026-08-25 19:47:45 (6 days ago)	vulnerability scan	Web App Attack
Anonymous	2026-08-25 19:39:02 (6 days ago)	Bot / scanning and/or hacking attempts: [1/0] write: stream 3, GET /.env, GET /.env HTTP/2.0	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 19:01:04 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 129.222.206.206 (customer.lgosnga1.isp.starlink ... show more (mod_security) mod_security (id:210492) triggered by 129.222.206.206 (customer.lgosnga1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 15:00:57.791835 2026] [security2:error] [pid 11238:tid 11238] [client 129.222.206.206:49468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.xtremeautodetailing.com"] [uri "/.env"] [unique_id "ao3maeovWxPz_KheQResIwAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-25 18:56:51 (6 days ago)	"GET /.env HTTP/1.1"	Hacking Web App Attack
🇦🇺 paulshipley.com.au	2026-08-25 18:54:39 (6 days ago)	[Wed Aug 26 04:54:38.314698 2026] [security2:error] [pid 280811] [client 129.222.206.206:61081] [cli ... show more [Wed Aug 26 04:54:38.314698 2026] [security2:error] [pid 280811] [client 129.222.206.206:61081] [client 129.222.206.206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "valueaddedpromotions.com.au"] [uri "/.env"] [unique_id "ao3k7pjJ646YSS9zYSHkhwAAAAY"] ... show less	Web App Attack
Anonymous	2026-08-25 18:31:20 (6 days ago)	[Firewall Canary] Temporary ban due to firewall rule match [URI:*/.env]	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 17:57:51 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 129.222.206.206 (customer.lgosnga1.isp.starlink ... show more (mod_security) mod_security (id:210492) triggered by 129.222.206.206 (customer.lgosnga1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 13:57:44.195595 2026] [security2:error] [pid 18567:tid 18567] [client 129.222.206.206:37614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "socialstudiesforkids.com"] [uri "/.env"] [unique_id "ao3XmGTiUajaiI0QrIyySgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ptlab	2026-08-25 16:45:04 (6 days ago)	Detected env_leak attack from WP-host.	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 16:44:36 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 129.222.206.206 (customer.lgosnga1.isp.starlink ... show more (mod_security) mod_security (id:210492) triggered by 129.222.206.206 (customer.lgosnga1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 12:44:30.688385 2026] [security2:error] [pid 27899:tid 27899] [client 129.222.206.206:18061] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.whodatnation.com"] [uri "/.env"] [unique_id "ao3GbkZALJEUt_TD4F1JBgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c7b::120

🇫🇷 178.33.224.189

🇩🇪 164.92.163.194

🇫🇮 147.185.133.133

🇺🇸 136.113.243.77

🇺🇸 57.141.20.55

🇸🇳 41.214.58.86

🇺🇸 34.182.233.21

🇩🇪 209.50.183.131

🇺🇸 172.253.192.144

🇸🇬 165.154.29.144

🇺🇸 162.216.150.231

🇨🇳 153.0.87.55

🇰🇷 119.200.229.33

🇱🇹 62.60.130.201

🇳🇱 45.148.10.152

🇵🇱 34.116.237.13

🇯🇵 34.85.121.174

🇯🇵 34.84.0.45

🇹🇼 34.80.19.90