136.29.1.18

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
29 reports
24 reporters · latest 5 hours ago
ISP
Webpass inc
Usage Type
Fixed Line ISP
ASN
AS19165
Hostname(s)
136-29-1-18.cab.webpass.net
Domain Name
gfiber.com
Country
🇺🇸 United States of America
City
Denver, Colorado
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
29 from 24 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇧🇷 Brazil 6 🇫🇷 France 3 🇮🇩 Indonesia 3
Most common categories Port Scan 12 Hacking 10 Brute-Force 5 Web App Attack 2 Exploited Host 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
unsolicited UDP packet to port 9034 (104 bytes)
Hacking
🇮🇩 leomardsy_
Port Scan
🇩🇪 goodbytes
Hacking
🇫🇷 uthul
T-Pot honeypot: 1 hits on ports [9034] (automated)
Port Scan
🇩🇪 KPS
PortscanM
Port Scan
🇫🇷 Petre 21_ip
2026-11-09T17:56:28.512238+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=136.29.1.18 DST=155.133.26.57 LEN=124 TOS=0x00 PREC=0x00 TTL=51 ID=37997 DF PROTO=UDP SPT=39360 DPT=9034 LEN=104 ...
Port Scan
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
Brute-Force
🇹🇼 kk_it_man
hack
Hacking
🇧🇷 diego
[rede-44-49] 11/09/2026-07:13:00.040154, 136.29.1.18, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Hacking
🇺🇸 HamSammich
Automated sensor: 1 port 9034 connection/probe attempts over the last 24h (latest 2026-11-09T08:53Z).
Port Scan
🇳🇮 elfita
Blocked by nftables on AmneziaWG gateway (Ports: 9034)
Port Scan Brute-Force Exploited Host
🇮🇹 CRI BRESCIA
Blocked by os-abuseipdb; 1 hits, proto=udp, ports=9034
Port Scan Hacking Brute-Force
🇧🇷 noconex
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: exploit (ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)) de 136.29.1.18
Hacking IoT Targeted
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇮🇳 Mr.Singh
NFT blocked 136.29.1.18 on 09-Nov-2026..
Port Scan Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇭 209.35.171.206
🇧🇪 198.235.24.151
🇯🇴 194.165.156.164
🇨🇦 192.99.210.154
🇲🇽 177.245.183.97
🇮🇪 87.198.184.106
🇹🇼 1.165.71.9
🇷🇺 37.112.63.117
🇧🇪 35.210.199.32
🇧🇷 200.53.204.19
🇧🇷 179.48.18.42
🇩🇪 167.94.146.40
🇹🇼 125.228.162.132
🇰🇷 123.111.16.14
🇳🇱 45.148.10.141
🇮🇸 45.133.193.43
🇧🇪 34.38.231.253
🇩🇪 196.251.102.73
🇫🇮 147.185.133.235
🇺🇸 136.144.43.251
feedback