JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 163.61.129.218

163.61.129.218 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 62%: ?

62%

ISP	Sulehria Wireless Internet Services Provider Pvt Ltd t/a SWIS
Usage Type	Fixed Line ISP
ASN	AS153596
Domain Name	swis.com.pk
Country	🇵🇰 Pakistan
City	Faisalabad, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 163.61.129.218

Whois 163.61.129.218

IP Abuse Reports for 163.61.129.218:

This IP address has been reported a total of 41 times from 28 distinct sources. 163.61.129.218 was first reported on March 2nd 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RAP	2026-10-26 09:55:19 (13 hours ago)	2026-10-26 09:55:19 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇫🇷 Kejult	2026-10-25 08:48:17 (1 day ago)	Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 2 target p ... show more Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 2 target ports and 3 source port(s). Ports: 22/SSH, 23/Telnet. Sensors: Cowrie. show less	Port Scan
🇫🇷 Danguole Rasalaite Memorial 🇱🇹	2026-10-24 15:45:30 (2 days ago)	[SOC-ALERT: SSH-HONEYPOT] Hostile probe intercepted on dormant TCP/22. Vector: Unsolicited TCP SYN / ... show more [SOC-ALERT: SSH-HONEYPOT] Hostile probe intercepted on dormant TCP/22. Vector: Unsolicited TCP SYN / Port Scan targeting decoys (MITRE ATT&CK: T1046 Network Service Discovery). System architecture: Production SSH operates exclusively on a hardened non-standard port; port 22 is an active deception honeypot. Enforcement: Perimeter drop via Netfilter/NFTables, source IP quarantined. Automated threat intelligence telemetry. show less	Port Scan Brute-Force SSH
🇫🇷 bigorre.org	2026-10-17 15:39:43 (1 week ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
Anonymous	2026-10-16 17:18:55 (1 week ago)	Honeypot: http-public probing for vulnerable paths /archive/worlds/datapacks-staff-notes/restarts/20 ... show more Honeypot: http-public probing for vulnerable paths /archive/worlds/datapacks-staff-notes/restarts/2020/old/Passwords%20-%20old%20ba show less	Web App Attack
🇩🇪 Vegascosmetics	2026-10-14 15:50:46 (1 week ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (60, Abuse: 51) show less	Hacking Exploited Host Web App Attack
🇷🇸 Smel	2026-10-11 05:47:05 (2 weeks ago)	SSH/22 MH Probe, BF, Hack -	Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-10-07 21:29:10 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 163.61.129.218 (dyn-163-61-129-218.swis.com.pk) ... show more (mod_security) mod_security (id:210350) triggered by 163.61.129.218 (dyn-163-61-129-218.swis.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 17:29:04.039250 2026] [security2:error] [pid 2745:tid 2745] [client 163.61.129.218:55914] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mininoarg.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mininoarg.com"] [uri "/"] [unique_id "asa5oGk8e5bLzChfB5ebJwAAAAY"], referer: https://internationallinkbuilding.shop/dir/professional-seo-links-137230 show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 EGP Abuse Dept	2026-09-30 11:25:30 (3 weeks ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇺🇸 MPL	2026-09-25 15:46:07 (1 month ago)	tcp ports: 23,22 (12 or more attempts)	Port Scan
🇹🇷 trakyabirlik	2026-09-24 15:48:31 (1 month ago)	Auto-blocked by Seczar SecureOps — SSH Brute Force (6 events in 5min) at 2026-09-24 15:48	Web App Attack
🇺🇸 鬼影233	2026-09-24 15:41:28 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-21 18:01:16 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=67&topics%5B1%5D=34&topics%5B2%5D=70&topics%5B3%5D=37 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0") show less	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-09-20 03:49:39 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇸🇪 Peter Gabaldon	2026-09-20 03:13:11 (1 month ago)	Fail2Ban Triggered By 163.61.129.218	Port Scan SSH

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.204.230.91

🇳🇱 23.97.182.38

🇷🇺 5.183.29.239

🇳🇱 185.226.197.10

🇲🇴 182.93.50.90

🇧🇷 170.239.252.152

🇵🇰 165.99.207.153

🇺🇸 147.185.132.66

🇺🇸 135.237.122.43

🇳🇱 45.148.10.152

🇷🇴 2.57.122.76

🇺🇸 2602:80d:1006::59

🇺🇸 195.184.76.206

🇸🇬 188.212.104.80

🇰🇷 175.201.85.209

🇨🇳 125.43.0.151

🇮🇳 122.176.122.24

🇮🇳 113.193.234.210

🇫🇷 85.217.140.32

🇺🇸 73.117.132.160