JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.29.247.4

124.29.247.4 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 81%: ?

81%

ISP	Broadband Services
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.29.247.4

Whois 124.29.247.4

IP Abuse Reports for 124.29.247.4:

This IP address has been reported a total of 64 times from 29 distinct sources. 124.29.247.4 was first reported on May 8th 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-07-13 22:45:00 (22 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇨🇭 GAS	2026-07-12 20:48:30 (2 days ago)	SSH Honeypot attack. {"duser":"admin","level":"info","msg":"Telnet login attempt","password":"conexa ... show more SSH Honeypot attack. {"duser":"admin","level":"info","msg":"Telnet login attempt","password":"conexant","src":"124.29.247.4","time":"2026-07-12T20:47:56.566138301Z"} {"duser":"root","level":"info","msg":"Telnet login attempt","password":"Fireitup","src":"124.29.247.4","time":"2026-07-12T20:48:00.103055991Z"} {"duser":"root","level":"info","msg":"Telnet login attempt","password":"1111","src":"124.29.247.4","time":"2026-07-12T20:48:03.068703093Z"} {"duser":"admin","level":"info","msg":"Telnet login attempt","password":"54321","src":"124.29.247.4","time":"2026-07-12T20:48:05.990898104Z"} {"duser":"root","level":"info","msg":"Telnet login attempt","password":"zte","src":"124.29.247.4","time":"2026-07-12T20:48:08.903872149Z"} {"duser":"admin","level":"info","msg":"Telnet login attempt","password":"cat1029","src":"124.29.247.4","time":"2026-07-12T20:48:12.513972543Z"} {"duser":"root","level":"info","msg":"Telnet login attempt","password":"GM8182","src":"124.29.247.4","time":"2026-07-12T20:48:15.505493623Z"} {"d ... show less	Brute-Force SSH
🇺🇸 MPL	2026-07-12 04:52:31 (2 days ago)	tcp/8443 (4 or more attempts)	Port Scan
🇺🇸 stechusa	2026-07-08 21:12:29 (6 days ago)	ELEVATED_THREAT \| 166 IPs targeting /brand/satco-products-inc.html \| Facet request during elevated t ... show more ELEVATED_THREAT \| 166 IPs targeting /brand/satco-products-inc.html \| Facet request during elevated threat (facet_ratio=0.97, unique_ips=801) \| Recv-Q=1489 bytes on ESTABLISHED connection (threshold=1000) show less	Bad Web Bot DDoS Attack
🇩🇪 bescared	2026-07-08 17:09:04 (6 days ago)	F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -c23856ef-	Port Scan
🇺🇸 [email protected]	2026-07-05 13:03:58 (1 week ago)	ASN: AS9541 Cyber Internet Services (Pvt) Ltd.. Country: PK. Ports: 80. Proto: TCP. Observations: 3. ... show more ASN: AS9541 Cyber Internet Services (Pvt) Ltd.. Country: PK. Ports: 80. Proto: TCP. Observations: 3. AbuseScore: 82/100 show less	Web App Attack
🇦🇹 urnilxfgbez	2026-07-03 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇨🇦 senkodev	2026-07-03 20:33:49 (1 week ago)	2026-07-03T20:33:48.528236Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 124.29.247 ... show more 2026-07-03T20:33:48.528236Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 124.29.247.4:33282 (158.69.22.11:2223) [session: 34228a3c3040] 2026-07-03T20:33:49.537764Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 124.29.247.4:33304 (158.69.22.11:2223) [session: cfb75a847347] ... show less	Brute-Force SSH
🇺🇸 MPL	2026-07-03 13:01:25 (1 week ago)	tcp/23	Port Scan
🇺🇸 mutebot.net	2026-07-02 19:36:30 (1 week ago)	SRC=124.29.247.4, PROTO=TCP, SPT=34449, DPT=23	Port Scan
🇺🇸 MPL	2026-06-30 15:17:44 (2 weeks ago)	tcp/23	Port Scan
🇺🇸 MPL	2026-06-29 00:00:48 (2 weeks ago)	tcp/2323	Port Scan
🇦🇹 urnilxfgbez	2026-06-28 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 OptimusGO	2026-06-28 13:21:06 (2 weeks ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-06-28 14:21:05 UTC Log evidence: 06/28/2026-14:21:04.180169 [] [1:2019309:5] ET WEB_SERVER WGET Command Specifying Output in HTTP Headers [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 124.29.247.4:27034 -> 185.127.18.66:80 06/28/2026-14:21:04.180169 [] [1:2020899:6] ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 124.29.247.4:27034 -> 185.127.18.66:80 show less	Port Scan Brute-Force
🇨🇭 TOCE	2026-06-26 17:16:53 (2 weeks ago)	25 hits seen on 2026-06-26, ports 23 (Telnet) on a honeypot from www.toce.ch	Brute-Force

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a09:bac5:4e20:1478::20a:3a

🇫🇮 185.204.1.76

🇷🇴 80.94.92.234

🇺🇸 172.253.214.24

🇻🇳 103.69.96.120

🇬🇧 35.203.211.39

🇬🇧 198.244.242.101

🇩🇪 167.94.146.74

🇹🇷 94.154.43.140

🇨🇳 42.230.181.137

🇺🇸 34.86.230.16

🇺🇸 20.228.193.165

🇧🇷 20.206.89.130

🇮🇳 20.197.47.211

🇭🇰 20.2.219.124

🇵🇸 1.178.214.205

🇧🇷 191.7.192.104

🇩🇪 185.168.30.222

🇨🇭 185.74.71.44

🇺🇸 172.93.169.155