149.29.2.18

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
79% Critical
22 reports
18 reporters · latest 10 hours ago
ISP
Cogent Communications, LLC
Usage Type
Fixed Line ISP
ASN
AS174
Domain Name
cogentco.com
Country
🇳🇱 Netherlands
City
Halfweg, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇩🇪 Germany 4 🇮🇳 India 3
Most common categories SSH 16 Brute-Force 14 Hacking 4 Port Scan 3 FTP Brute-Force 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 anon333
Hacker syslog review 1794245599
Hacking
🇮🇳 Parth Maniar
This IP address carried out 1 SSH credential attack (attempts) on 08-11-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Brute-Force SSH
🇺🇾 0xJ03l
SSH honeypot. user="admin" password="admin"
Brute-Force SSH
🇮🇹 Progetto1
SSH - Failed Auth
Brute-Force Exploited Host SSH
🇮🇳 Parth Maniar
This IP address carried out 4 port scanning attempts on 04-11-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Port Scan SSH
🇮🇳 Parth Maniar
This IP address carried out 1 SSH credential attack (attempts) on 04-11-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Brute-Force SSH
Anonymous
2026-11-03 11:31:02,368 server-866667.chao.iondata.systems proftpd[1206628] 0.0.0.0 (149.29.2.18[149.29.2.18]): USER admin: no such user found from 149.29.2.18 [149.29.2.18] to ::ffff:129.121.100.75:2222 ...
FTP Brute-Force
🇺🇸 onyxdev
Honeypot (ssh): 1 login attempt.
Brute-Force SSH
🇺🇸 cwytech
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-ssh-high.
Brute-Force SSH
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credential used: root:root • Number of login attempts: 1 • Client: SSH-2.0-Go
SSH
🇩🇪 tc-hawkes.com
SSH Bruteforce ...
Brute-Force SSH
🇺🇸 Phil Schuyler
Repeated probing against public honeypot services: 5 observed events targeting SSH/TELNET/2222.
Port Scan
Anonymous
Brute-Force SSH
🇺🇸 anon333
Hacker syslog review 1793532805
Hacking
🇫🇷 uthul
T-Pot honeypot: 5 hits on ports [22] (automated)
Port Scan Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.34
🇺🇸 162.243.4.24
🇫🇷 51.254.136.153
🇺🇸 193.203.8.249
🇩🇪 162.158.110.251
🇩🇪 162.158.110.250
🇬🇧 159.65.19.22
🇹🇼 114.32.19.171
🇧🇩 103.134.57.18
🇳🇱 86.38.187.175
🇺🇸 66.132.186.135
🇳🇱 45.148.10.141
🇷🇺 31.173.20.80
🇷🇴 2.57.121.25
🇨🇱 179.9.57.246
🇺🇸 129.121.138.48
feedback