62.129.150.227

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
125 reports
102 reporters · latest 2 hours ago
ISP
24fire GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS216063
Hostname(s)
fireapi.de
Domain Name
24fire-gmbh.de
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
125 from 102 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 28 🇺🇸 United States of America 24 🇫🇷 France 13
Most common categories Web App Attack 78 Port Scan 38 Hacking 32 Bad Web Bot 23 Brute-Force 20
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Unauthorized SSH login attempts
Brute-Force SSH
🇺🇸 mnsf
Too many Status 40X (16)
Brute-Force Web App Attack
🇩🇪 hotzmatic
Suricata IDS: ET INFO HTTP CONNECT Tunnel Attempt Inbound (60 events observed on private honeypot sensor)
Web App Attack
🇧🇷 cibersecoptidata
Port scan / Unsolicited traffic.
Port Scan
🇺🇸 jlerouge
62.129.150.227 - - [10/Nov/2026:18:51:25 -0800] "CONNECT 125.253.79.209:801 HTTP/1.1" 405 448 "-" "-" ...
Web App Attack
Anonymous
Blocked by firewall on hugin [80/tcp] | Rule: AbuseIPDB | SPT: 4592 | TTL: 64 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇫🇷 carpes0708
Port Scan Web App Attack
🇧🇷 diego
[rede-164-29] 11/10/2026-22:39:42.583546, 62.129.150.227, Protocol: 6, LOCAL SCAN horizontal SYN probe
Port Scan
🇺🇸 MPL
tcp/80 (5 or more attempts)
Port Scan
Anonymous
Port scan against our edge firewall, detected by Wazuh: Regel 31151 | abuseipdb 100% (112 Meldungen, DE)
Port Scan
🇩🇪 ManagedStack
Probing access to unauthorized locations
Hacking Exploited Host Web App Attack
🇩🇪 EDSL
[monit.edsl.fr] Blocked by SysWarden Firewall (Web Attack)
Hacking Port Scan Web App Attack
🇸🇪 sweplox.se
Ip 62.129.150.227 performed 'crowdsecurity/http-open-proxy' (1 events over 0s) at 2026-11-11 00:41:18.186165032 +0000 UTC
Hacking
Anonymous
unsolicited connect TCP dport 80 (sport 35279)
Hacking
🇳🇱 VMHeaven.io
Blocked by UFW [80/tcp] Source port: 44909 TTL: 54 Packet length: 52
Port Scan Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 200.216.172.182
🇳🇱 193.47.62.69
🇨🇳 171.104.143.176
🇧🇬 79.124.62.134
🇮🇱 34.165.50.225
🇳🇱 20.101.99.193
🇺🇸 4.148.240.223
🇧🇷 201.32.222.15
🇳🇱 192.253.248.223
🇨🇭 179.43.133.154
🇫🇷 173.212.217.75
🇺🇸 171.22.217.66
🇳🇱 64.205.72.72
🇰🇪 41.81.69.178
🇺🇸 40.160.102.51
🇧🇷 191.7.159.201
🇭🇰 123.58.219.129
🇺🇸 91.230.168.248
🇺🇸 66.132.172.111
🇨🇳 36.100.0.112
feedback