JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 62.156.142.28

62.156.142.28 was found in our database!

This IP was reported 84 times. Confidence of Abuse is 100%: ?

100%

ISP	Arlt Wach Schliess u Schutzdienst GmbH
Usage Type	Fixed Line ISP
ASN	AS3320
Domain Name	arlt-wachdienst.de
Country	🇩🇪 Germany
City	Leipzig, Saxony

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 62.156.142.28

Whois 62.156.142.28

IP Abuse Reports for 62.156.142.28:

This IP address has been reported a total of 84 times from 64 distinct sources. 62.156.142.28 was first reported on July 9th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-07-16 09:37:15 (2 days ago)	tcp/54321 (2 or more attempts)	Port Scan
🇩🇪 Axel	2026-07-16 08:49:50 (2 days ago)	[2026-07-16 08:49:50 UTC] Honeypot Backdoor / RATs connection attempt \| AXFRA HONEYPOT	Exploited Host
🇺🇸 cazae	2026-07-15 22:24:03 (3 days ago)	Unauthorized attempt on debian [54321/tcp] Source port: 41779 TTL: 240 Packet length: 40 TOS: 0x08 ... show more Unauthorized attempt on debian [54321/tcp] Source port: 41779 TTL: 240 Packet length: 40 TOS: 0x08 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Arpan Sen	2026-07-15 19:10:07 (3 days ago)	Network port/address scan: probed 1 distinct port(s) across 26 host(s); 100% of connections received ... show more Network port/address scan: probed 1 distinct port(s) across 26 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan
🇫🇷 evvsk	2026-07-15 19:01:15 (3 days ago)	54321/tcp	Port Scan
🇩🇪 femboy.cat	2026-07-15 16:15:21 (3 days ago)	Port scan to tcp/54321 from 62.156.142.28	Brute-Force
🇩🇪 dispaisyenterprises	2026-07-15 15:57:46 (3 days ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 54321 POST /login User-Agent: Mozilla/5.0 (Windows ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 54321 POST /login User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: application/json Accept-Encoding: gzip, deflate, zstd POST Data: {"username": "admin", "password": "admin"}; 54321 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-15 15:08:39 (3 days ago)	Honeypot hit: HTTP/1.1 request on 54321 POST /login User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64 ... show more Honeypot hit: HTTP/1.1 request on 54321 POST /login User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0 Accept: application/json Accept-Encoding: gzip, deflate, zstd POST Data: {"username": "admin", "password": "admin"}; 54321 [1] TCP show less	Web App Attack
🇬🇧 gbzret4d	2026-07-15 15:03:51 (3 days ago)	Honeypot [uk-production01]: HTTP/1.1 request on 54321 POST /login User-Agent: Mozilla/5.0 (Windows ... show more Honeypot [uk-production01]: HTTP/1.1 request on 54321 POST /login User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0 Accept: application/json Accept-Encoding: gzip, deflate, zstd POST Data: {"username": "admin", "password": "admin"}; 54321 [1] TCP show less	Hacking Bad Web Bot
🇩🇪 iNetWorker	2026-07-15 14:30:55 (3 days ago)	firewall-block, port(s): 54321/tcp	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-07-15 14:29:05 (3 days ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
🇺🇸 Axel	2026-07-15 13:20:21 (3 days ago)	Blocked by UFW on MVI [54321/tcp] \| SPT: 48704 \| TTL: 243 \| LEN: 40 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on MVI [54321/tcp] \| SPT: 48704 \| TTL: 243 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇩 bakunin1848	2026-07-15 12:20:05 (3 days ago)	Firewall IPS Detection on 15-07-2026 at 14:20:05	Port Scan Exploited Host
🇺🇸 xmission.com	2026-07-15 11:59:01 (3 days ago)	Blocked by UFW (TCP on 54321) Source port: 48704 TTL: 238 Packet length: 40 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 54321) Source port: 48704 TTL: 238 Packet length: 40 TOS: 0x00 This report (for 62.156.142.28) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-15 11:42:42 (3 days ago)	Blocked by UFW (TCP on 54321) Source port: 48704 TTL: 237 Packet length: 40 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 54321) Source port: 48704 TTL: 237 Packet length: 40 TOS: 0x08 This report (for 62.156.142.28) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇿 197.158.53.100

🇨🇳 175.19.52.137

🇺🇸 157.245.243.118

🇨🇳 119.249.100.245

🇺🇸 18.188.221.184

🇨🇳 14.18.122.240

🇷🇺 178.34.162.158

🇨🇳 101.126.89.164

🇩🇪 69.5.169.130

🇺🇸 34.59.45.11

🇸🇬 8.219.200.1

🇸🇬 157.52.92.68

🇨🇳 113.57.187.45

🇱🇹 81.30.98.44

🇸🇬 2a04:4e40:1700:0:7ab:a992:b59b:c5c7

🇳🇱 195.178.110.228

🇰🇷 112.216.129.27

🇧🇷 191.53.180.36

🇫🇷 91.231.89.238

🇩🇪 43.228.157.62