124.29.225.159

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
95% Critical
24 reports
18 reporters · latest 10 hours ago
ISP
Broadband Services
Usage Type
Fixed Line ISP
ASN
AS9541
Domain Name
cyber.net.pk
Country
🇵🇰 Pakistan
City
Karachi, Sindh
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
24 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 9 🇩🇪 Germany 7 🇫🇷 France 4
Most common categories Port Scan 20 Hacking 4 SSH 3 Brute-Force 3 Exploited Host 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇫🇷 noi
honeypot proto=TCP dpt=23 flags=SYN hits=1 window=1h
Port Scan
🇺🇸 xclmp
Unauthorized connection attempts consistent with that of port probing and scanning from 124.29.225.159 were detected at 2026-11-08 03:46:14 UTC. Learn More: https://fia.project-furina.com/report/19922
Port Scan
🇧🇾 sashan
2026-11-08T04:18:02.563462+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=124.29.225.159 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=36640 DF PROTO=TCP SPT=11538 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ...
Port Scan
🇩🇪 guldkage
Unauthorized connection attempt detected from IP address 124.29.225.159 to port 23 (ger-01) [TELNET]
Exploited Host
🇫🇷 uthul
T-Pot honeypot: 63 hits on ports [23] (automated)
Port Scan Brute-Force SSH
🇺🇸 cwytech
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
Hacking
🇩🇪 KPS
PortscanT
Port Scan
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇺🇸 RAP
2026-11-06 19:46:13 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇩🇪 KPS
PortscanT
Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:11168 dst:23
Port Scan
🇺🇸 drewf.ink
[00:21] Attempted telnet login with credentials root:p**s
Brute-Force IoT Targeted
🇯🇵 Kinsei Engineering Inc.
UFW:High-frequency access to non-released SSH or Telnet ports
SSH Port Scan
🇺🇸 RAP
2026-11-01 23:16:45 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 183.82.111.224
🇹🇭 171.5.8.9
🇳🇱 45.148.10.157
🇨🇳 221.3.78.163
🇵🇹 89.180.208.156
🇸🇪 83.255.209.245
🇺🇸 13.89.122.190
🇨🇳 222.178.224.114
🇺🇸 204.48.24.161
🇺🇸 184.154.16.90
🇺🇸 104.238.110.208
🇷🇺 93.157.245.200
🇨🇳 223.166.103.218
🇵🇪 190.119.63.81
🇺🇸 162.216.150.242
🇮🇶 151.236.188.226
🇺🇸 109.105.209.84
🇷🇴 80.96.232.52
🇨🇴 69.6.234.27
🇳🇱 45.148.10.141
feedback