JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.234.213.122

216.234.213.122 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 42%: ?

42%

ISP	SpaceX Services, Inc.
Usage Type	Fixed Line ISP
ASN	AS14593
Hostname(s)	customer.jhngzaf1.isp.starlink.com
Domain Name	spacex.com
Country	🇿🇲 Zambia
City	Lusaka, Lusaka Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.234.213.122

Whois 216.234.213.122

IP Abuse Reports for 216.234.213.122:

This IP address has been reported a total of 17 times from 14 distinct sources. 216.234.213.122 was first reported on September 2nd 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 karger	2026-09-18 00:54:37 (2 days ago)	Wordpress attack - soft filter	Brute-Force Web App Attack
🇩🇪 LRob	2026-09-18 00:24:13 (2 days ago)	WordPress login brute-force \| path: /xmlrpc.php \| 2026-09-18 00:24 UTC	Brute-Force Web App Attack
🇺🇸 Jason Howell	2026-09-17 20:38:17 (3 days ago)	216.234.213.122 - - [17/Sep/2026:15:37:34 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4355 "-" "Jetpack b ... show more 216.234.213.122 - - [17/Sep/2026:15:37:34 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4355 "-" "Jetpack by WordPress.com" 216.234.213.122 - - [17/Sep/2026:15:37:45 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4356 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" 216.234.213.122 - - [17/Sep/2026:15:37:55 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4355 "-" "Jetpack by WordPress.com" 216.234.213.122 - - [17/Sep/2026:15:38:06 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4356 "-" "Jetpack by WordPress.com" 216.234.213.122 - - [17/Sep/2026:15:38:16 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4356 "-" "Jetpack by WordPress.com" ... show less	Web App Attack
🇮🇹 CoreTech srl	2026-09-17 19:28:58 (3 days ago)	cloudlinux2 fail2ban: 2026-09-17 21:25:33,818 fail2ban.filter [1818]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-09-17 21:25:33,818 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 34.79.176.214 - 2026-09-17 21:25:33cloudlinux2 fail2ban: 2026-09-17 21:25:34,039 fail2ban.filter [1818]: INFO [recidive] Found 34.79.176.214 - 2026-09-17 21:25:34cloudlinux2 fail2ban: 2026-09-17 21:25:33,603 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 34.79.176.214 - 2026-09-17 21:25:33cloudlinux2 fail2ban: 2026-09-17 21:25:33,975 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 34.79.176.214 - 2026-09-17 21:25:33cloudlinux2 fail2ban: 2026-09-17 21:25:33,376 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 34.79.176.214 - 2026-09-17 21:25:33cloudlinux2 fail2ban: 2026-09-17 21:25:34,032 fail2ban.actions [1818]: NOTICE [plesk-modsecurity] Ban 34.79.176.214cloudlinux2 fail2ban: 2026-09-17 21:25:33,742 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 34.79.176.214 - 2026-09-17 21:25:33cloudlinux2 fail2ban: 2026-0 show less	Brute-Force
🇩🇪 dbmwebdesign	2026-09-17 06:20:20 (3 days ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇩🇪 LRob	2026-09-16 20:44:38 (3 days ago)	WordPress login brute-force \| path: /xmlrpc.php \| 2026-09-16 20:44 UTC	Brute-Force Web App Attack
Anonymous	2026-09-16 17:14:02 (4 days ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇫🇷 dynamix	2026-08-25 13:26:54 (3 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 07:09:05 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 216.234.213.122 (customer.jhngzaf1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 216.234.213.122 (customer.jhngzaf1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 03:08:57.595132 2026] [security2:error] [pid 6736:tid 6736] [client 216.234.213.122:29783] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 216.234.213.122 (+1 hits since last alert)\|mkdesignndetailing.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mkdesignndetailing.com"] [uri "/xmlrpc.php"] [unique_id "ajuCif40rX5MXq1URRdPLQAAAFE"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-06-24 07:04:52 (2 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 02:29:40 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 216.234.213.122 (customer.jhngzaf1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 216.234.213.122 (customer.jhngzaf1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 22:29:35.064457 2026] [security2:error] [pid 22286:tid 22286] [client 216.234.213.122:18734] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 216.234.213.122 (+1 hits since last alert)\|globalweb123.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "globalweb123.com"] [uri "/xmlrpc.php"] [unique_id "ajtBD40jUtBSZuB3y6JuNwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bazter.pro	2026-06-24 00:25:34 (2 months ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 22:11:38 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 216.234.213.122 (customer.jhngzaf1.isp.starlink ... show more (mod_security) mod_security (id:240335) triggered by 216.234.213.122 (customer.jhngzaf1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 18:11:32.766279 2026] [security2:error] [pid 13460:tid 13995] [client 216.234.213.122:51820] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 216.234.213.122 (+1 hits since last alert)\|pref-realestate.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pref-realestate.com"] [uri "/xmlrpc.php"] [unique_id "ajsElJWi7laSz8qh4hX6ZAAAAFA"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-23 21:07:49 (2 months ago)	Blocked by CSF 13 firewall - Rule: XMLRPC US/United States/customer.jhngzaf1.isp.starlink.com	Web App Attack
Anonymous	2026-06-23 17:50:42 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 129.159.56.14

🇨🇳 101.96.205.145

🇭🇰 45.115.26.203

🇳🇱 34.13.207.118

🇰🇷 221.167.21.148

🇻🇳 180.93.144.27

🇺🇸 159.223.176.213

🇮🇳 143.110.181.98

🇨🇳 125.77.73.145

🇷🇺 37.230.158.103

🇨🇳 218.78.140.242

🇺🇸 205.210.31.37

🇫🇷 200.13.204.196

🇳🇱 193.47.62.69

🇧🇪 130.211.106.154

🇨🇳 116.179.37.68

🇺🇿 89.126.211.166

🇧🇷 69.6.213.81

🇹🇼 35.185.153.9

🇺🇸 34.162.160.6