JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.124.20.252

193.124.20.252 was found in our database!

This IP was reported 3,690 times. Confidence of Abuse is 100%: ?

100%

ISP	Infrawatch Limited
Usage Type	Fixed Line ISP
ASN	AS25369
Hostname(s)	193-124-20-252.infrawat.ch
Domain Name	infrawat.ch
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.124.20.252

Whois 193.124.20.252

IP Abuse Reports for 193.124.20.252:

This IP address has been reported a total of 3,690 times from 304 distinct sources. 193.124.20.252 was first reported on April 11th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ValtonTahiri	2026-04-14 02:42:08 (1 month ago)	Honeypot hit: Unauthorized traffic (109 bytes) Payload: m8, A ��3:AA(DESCRIPTION=(CONNECT_DATA=(CID= ... show more Honeypot hit: Unauthorized traffic (109 bytes) Payload: m8, A ��3:AA(DESCRIPTION=(CONNECT_DATA=(CID=(PROGRAM=lzrORA)))) on 3309/TCP (1 attempt) show less	Port Scan
🇫🇮 6kilowatti	2026-04-14 02:41:25 (1 month ago)	2026-04-14T05:41:24.656204+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ... show more 2026-04-14T05:41:24.656204+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=193.124.20.252 DST=192.168.0.102 LEN=44 TOS=0x00 PREC=0x00 TTL=55 ID=0 PROTO=TCP SPT=3430 DPT=6005 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-04-14 02:38:46 (1 month ago)	Blocked by UFW (TCP on 6050) Source port: 33993 TTL: 49 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6050) Source port: 33993 TTL: 49 Packet length: 40 TOS: 0x08 This report (for 193.124.20.252) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 etu brutus	2026-04-14 02:36:03 (1 month ago)	193.124.20.252 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇳🇱 COMPLEX	2026-04-14 02:35:45 (1 month ago)	Unsolicited TCP traffic \| Action: DROP \| Port 6600	Brute-Force
🇨🇦 Slackin' Jack	2026-04-14 02:35:32 (1 month ago)	Triggered honeypot on port 554. (193.124.20.252)	Port Scan
🇺🇸 donarev419	2026-04-14 02:27:48 (1 month ago)	Connection to port 5672 with data transfer. Data preview: AMQP	Port Scan Hacking
🇩🇪 Admins@FBN	2026-04-14 02:25:21 (1 month ago)	FW-PortScan: Traffic Blocked srcport=36891 dstport=6013	Port Scan
Anonymous	2026-04-14 02:15:57 (1 month ago)	AS25369: 193.124.20.0/23 - Hydra Communications Ltd (DE)	Port Scan
🇺🇸 xmission.com	2026-04-14 02:12:59 (1 month ago)	Blocked by UFW (TCP on 6025) Source port: 10815 TTL: 49 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6025) Source port: 10815 TTL: 49 Packet length: 40 TOS: 0x08 This report (for 193.124.20.252) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 COMPLEX	2026-04-14 02:12:25 (1 month ago)	Unsolicited TCP traffic \| Action: DROP \| Port 2181	Brute-Force
🇫🇮 6kilowatti	2026-04-14 02:06:15 (1 month ago)	2026-04-14T05:06:15.328874+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-04-14T05:06:15.328874+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=193.124.20.252 DST=10.0.0.30 LEN=40 TOS=0x00 PREC=0x00 TTL=57 ID=0 PROTO=TCP SPT=62101 DPT=51007 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-04-14 02:04:27 (1 month ago)	Tried our host z.	Port Scan Hacking Exploited Host
🇩🇪 dispaisyenterprises	2026-04-14 02:03:41 (1 month ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 8000 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 8000 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
Anonymous	2026-04-14 02:03:22 (1 month ago)	IP & Port Scan.	SSH Port Scan Brute-Force

Showing 3601 to 3615 of 3690 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.74.50.114

🇮🇳 182.78.70.98

🇲🇾 180.74.90.204

🇨🇴 152.200.181.42

🇮🇳 123.58.203.202

🇫🇷 51.75.141.245

🇮🇩 38.253.239.21

🇺🇸 159.89.157.152

🇮🇳 152.59.121.52

🇺🇸 150.107.38.234

🇵🇰 139.135.45.60

🇸🇾 89.43.133.103

🇺🇸 85.239.151.41

🇨🇳 60.223.110.133

🇷🇴 2.57.121.25

🇨🇱 186.10.86.130

🇨🇳 180.165.29.129

🇺🇸 109.105.210.78

🇺🇸 57.151.98.124

🇺🇸 47.251.7.228