This IP address has been reported a total of
841
times from
193 distinct
sources.
180.149.126.10 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot hit: HTTP/1.1 request on 53920
GET /
User-Agent: Mozilla/5.0 (Windows NT 5.1; Win64; x64) ...
show moreHoneypot hit: HTTP/1.1 request on 53920
GET /
User-Agent: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 53920 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-02-22 02:24:23 UTC Unauthorized activity to TCP port 7777. TCP connection established to port 7 ...
show more2026-02-22 02:24:23 UTC Unauthorized activity to TCP port 7777. TCP connection established to port 7777 (redirect=true). Banner sent; connection dropped.
show less
Honeypot hit: HTTP/1.1 request on 35202
GET /
User-Agent: Mozilla/5.0 (Windows NT 5.1; Win64; x64) ...
show moreHoneypot hit: HTTP/1.1 request on 35202
GET /
User-Agent: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Accept: */*
Accept-Encoding: gzip
Full payload: GET / HTTP/1.1 Host: [SOME-IP]:35202 User-Agent: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36 Accept: */* Accept-Encoding: gzip on 35202/TCP (1 attempt)
show less
Honeypot [uk-production01]: HTTP/1.1 request on 8623
GET /
User-Agent: Mozilla/5.0 (Windows NT 5.1; ...
show moreHoneypot [uk-production01]: HTTP/1.1 request on 8623
GET /
User-Agent: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 8623 [1] TCP
show less
ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/180.149.126.10
2026-02- ...
show moreThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/180.149.126.10
2026-02-15 18:35:45 /
2026-02-15 22:26:41 /stalker_portal/server/tools/auth_simple.php
show less
Honeypot hit: HTTP/1.1 request on 5500
GET /
User-Agent: Mozilla/5.0 (Windows NT 5.1; Win64; x64) A ...
show moreHoneypot hit: HTTP/1.1 request on 5500
GET /
User-Agent: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Accept: */*
Accept-Encoding: gzip
Full payload: GET / HTTP/1.1 Host: [SOME-IP]:5500 User-Agent: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36 Accept: */* Accept-Encoding: gzip on 5500/TCP (1 attempt)
show less
ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/180.149.126.10
2026-02- ...
show moreThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/180.149.126.10
2026-02-09 04:00:05 /c/
2026-02-09 03:59:53 /c/
2026-02-09 04:00:42 /c/
2026-02-09 03:59:41 /c/
show less
Honeypot hit: HTTP/1.1 request on 8880
GET /
User-Agent: Mozilla/5.0 (Windows NT 5.1; Win64; x64) A ...
show moreHoneypot hit: HTTP/1.1 request on 8880
GET /
User-Agent: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 8880 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Hacking
Bad Web Bot
Showing 76 to
90
of 841 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩