JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

124.29.226.195

Recent Activity

Abuse confidence score ?

98% Critical

138 reports

61 reporters · latest 1 day ago

ISP	Broadband Services
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Sialkot, Punjab

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 124.29.226.195

Export CSV

This IP address has been reported a total of 138 times from 61 distinct sources. 124.29.226.195 was first reported on April 17th 2026, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: United States of America with 21 reports; Germany with 8 reports; Serbia with 4 reports. The most common categories in these recent reports were: Port Scan 38 times; Brute-Force 14 times; Hacking 14 times; IoT Targeted 8 times; Exploited Host 3 times; Other 5 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Tsumugi Kotobuki	2026-10-10 22:27:52 (1 day ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 52 \| Len: 40B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 52 \| Len: 40B \| Win: 18703(1) \| F2B/ufw-honeypot@2026-10-10T22:27:52Z show less	Port Scan Hacking
🇺🇸 SuperCores Hosting	2026-10-10 10:10:21 (2 days ago)	[2026-10-10 10:10:21.077712] TELNET/8080 Unautorized connection, Suspicious Mirai Botnet.	IoT Targeted Brute-Force Hacking Port Scan DDoS Attack
🇩🇪 reznekcs	2026-10-09 05:00:36 (3 days ago)	Blocked by UFW firewall	Brute-Force
🇺🇸 MPL	2026-10-04 19:41:38 (1 week ago)	tcp/23 (2 or more attempts)	Port Scan
🇺🇸 johuang92	2026-10-02 07:31:17 (1 week ago)	Cowrie SSH honeypot: session c99cd298b92b	SSH
🇩🇪 Kejult	2026-10-01 01:22:21 (1 week ago)	Honeypot Finding: Telnet intrusion activity on TCP/23; successful login, command, or download activi ... show more Honeypot Finding: Telnet intrusion activity on TCP/23; successful login, command, or download activity observed. show less	Hacking
🇫🇷 security.rdmc.fr	2026-09-30 19:59:07 (1 week ago)	Port Scan Attack proto:TCP src:43821 dst:23	Port Scan
🇷🇸 Smel	2026-09-30 08:30:07 (1 week ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 micropedro	2026-09-29 23:18:09 (1 week ago)	4 incidents: malicious activity. First: 2026-09-29 18:52, Last: 2026-09-29 19:18 UTC. Triggers: unkn ... show more 4 incidents: malicious activity. First: 2026-09-29 18:52, Last: 2026-09-29 19:18 UTC. Triggers: unknown. show less	Port Scan
🇩🇪 Kitki30.com	2026-09-29 14:10:24 (1 week ago)	Entered Telnet Tarpit (endlessh, server 2). Log: 2026-09-29T12:30:36.366Z ACCEPT host=::ffff:124.29. ... show more Entered Telnet Tarpit (endlessh, server 2). Log: 2026-09-29T12:30:36.366Z ACCEPT host=::ffff:124.29.226.195 port=43635 fd=81 n=78/4096 show less	IoT Targeted Port Scan Brute-Force
🇫🇮 Birdo	2026-09-29 00:02:18 (1 week ago)	[Honeypot Report] Attempted malware delivery following Telnet intrusion An automated malware loader ... show more [Honeypot Report] Attempted malware delivery following Telnet intrusion An automated malware loader brute-forced our emulated Telnet service, then obtained shell access and executed commands, and finally attempted to retrieve a remote payload. Credentials and request paths match DVR / IP camera (OEM default), DrayTek router. Observed: 2026-09-28 20:00 to 2026-09-29 00:02 UTC \| 2,073 sessions \| 33,168 events \| Telnet (port 23) Attack chain: 1. 2,073 credential attempts: root/Zte521, admin/12345, admin/admin, test1/test1, root/7ujMko0admin (+35 more pairs) 2. Payload retrieval attempted from: http://182.114.254.164:35762/i Technique: CWE-78 OS command injection \| Classification: IoT botnet loader, malware loader \| Signatures: Mirai/IoT Botnet Busybox Probe, Download-and-Execute Payload Chain Full evidence: https://github.com/1Birdo/lyrebird-intel/blob/main/incidents/2026/09/124.29.226.195.md Reported by birdo.uk (Lyrebird honeypot lyrebird-01). Emulated service - no host was compromised. show less	Exploited Host Hacking IoT Targeted Brute-Force
🇺🇸 xmission.com	2026-09-26 20:57:51 (2 weeks ago)	Blocked by UFW (TCP on 23) Source port: 43093 TTL: 46 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 43093 TTL: 46 Packet length: 40 TOS: 0x00 This report (for 124.29.226.195) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-09-26 20:47:38 (2 weeks ago)	Blocked by UFW [23/tcp] \| SPT: 43093 \| TTL: 54 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefin ... show more Blocked by UFW [23/tcp] \| SPT: 43093 \| TTL: 54 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
Anonymous	2026-09-25 09:18:49 (2 weeks ago)	MikroTik Enterprise Honeypot	Port Scan
🇺🇸 freehosts.eu	2026-09-25 03:25:43 (2 weeks ago)	Blocked by UFW [23/tcp] \| SPT: 43744 \| TTL: 54 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefin ... show more Blocked by UFW [23/tcp] \| SPT: 43744 \| TTL: 54 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.73.23.162

🇨🇭 179.43.167.3

🇨🇦 142.93.156.231

🇨🇦 138.197.144.99

🇲🇦 105.155.158.67

🇺🇸 69.42.211.92

🇺🇸 66.132.195.106

🇺🇸 50.6.111.141

🇺🇸 35.196.105.90

🇮🇱 169.150.227.208

🇳🇱 109.160.32.103

🇧🇬 79.124.56.214

🇲🇹 77.71.245.73

🇬🇧 2a06:4884:d000::f7

🇭🇰 103.210.21.178

🇺🇦 91.235.225.212

🇺🇸 72.240.125.133

🇳🇱 45.148.10.141

🇩🇿 41.105.243.105

🇺🇸 35.223.20.126