JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.198.29.146

72.198.29.146 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Cox Communications
Usage Type	Fixed Line ISP
ASN	AS22773
Hostname(s)	ip72-198-29-146.ok.ok.cox.net
Domain Name	cox.com
Country	🇺🇸 United States of America
City	Oklahoma City, Oklahoma

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.198.29.146

Whois 72.198.29.146

IP Abuse Reports for 72.198.29.146:

This IP address has been reported a total of 30 times from 25 distinct sources. 72.198.29.146 was first reported on January 5th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 senkodev	2026-08-24 22:32:56 (2 hours ago)	2026-08-24T22:32:55.664779Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 72.198.29. ... show more 2026-08-24T22:32:55.664779Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 72.198.29.146:35805 (158.69.22.11:2223) [session: e620db4dce11] 2026-08-24T22:32:55.665300Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 72.198.29.146:51447 (158.69.22.11:2222) [session: 28747d95be98] ... show less	Brute-Force SSH
🇺🇸 NetVexor	2026-08-24 16:20:37 (8 hours ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇬🇧 openstrike.co.uk	2026-08-24 09:16:40 (15 hours ago)	6 packets to port 22	Brute-Force SSH
🇺🇸 xmission.com	2026-08-24 07:21:27 (17 hours ago)	Blocked by UFW (TCP on 23) Source port: 59899 TTL: 51 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 59899 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 72.198.29.146) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-08-24 00:57:59 (23 hours ago)	Aug 23 20:56:44 localhost kernel: [115878157.112861] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Aug 23 20:56:44 localhost kernel: [115878157.112861] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=72.198.29.146 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=49 ID=5895 DF PROTO=TCP SPT=50990 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 23 20:56:44 localhost kernel: [115878157.112874] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=72.198.29.146 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=49 ID=5895 DF PROTO=TCP SPT=50990 DPT=23 SEQ=4132189565 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A07D8227A0000000001030306) Aug 23 20:57:57 localhost kernel: [115878231.004895] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=72.198.29.146 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=49 ID=15737 DF PROTO=TCP SPT=55222 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 23 20:57:57 localhost kernel: [115878231.004932] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:0 show less	Port Scan
Anonymous	2026-08-23 17:34:09 (1 day ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
🇧🇷 noconex	2026-08-23 17:18:07 (1 day ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 72.198.29. ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 72.198.29.146 show less	Port Scan Brute-Force SSH
Anonymous	2026-08-23 16:02:09 (1 day ago)	[Firewall] SSH Brute-Force \| Proto: TCP (NEW) \| Src port: 51295 \| Dst port: 22 (SSH) \| Pkt len: 60 \| ... show more [Firewall] SSH Brute-Force \| Proto: TCP (NEW) \| Src port: 51295 \| Dst port: 22 (SSH) \| Pkt len: 60 \| Attempts logged: 2 \| ISP: Cox Communications Inc. \| Origin: Edmond, United States \| Prior AbuseIPDB score: 75% (19 reports) \| Detected: 2026-08-23 10:41 CST \| Promoted to blacklist after repeated attempts \| Banned: 6d23h40m51s show less	Brute-Force
🇷🇸 Scan	2026-08-23 02:39:24 (1 day ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-08-22 23:26:01 (2 days ago)	Port Scanner	Port Scan
Anonymous	2026-08-22 04:51:48 (2 days ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇵🇱 mkey	2026-08-21 01:20:01 (3 days ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS= ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS=22,23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-08-21 03:18:48 \| LAST=2026-08-21 03:18:48. Last seen 2026-08-21 03:18:48. show less	Port Scan
🇩🇪 centurion	2026-08-18 14:00:13 (6 days ago)	Blocked by UFW on ns02 [22/tcp] Source port: 44619 TTL: 50 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on ns02 [22/tcp] Source port: 44619 TTL: 50 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇯🇵 mkaraki	2026-08-16 03:20:50 (1 week ago)	1786850449 # Service_probe # SIGNATURE_SEND # source_ip:72.198.29.146 # dst_port:22 ...	Port Scan
🇫🇷 GoodOldTOS	2026-08-15 21:43:59 (1 week ago)	Connection to Telnet honeypot	Hacking

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 188.255.140.163

🇺🇸 2400:cb00:119:1000:2e99:b569:2309:d36d

🇰🇷 221.152.56.13

🇺🇸 207.90.244.4

🇻🇪 190.97.239.184

🇨🇳 180.184.97.101

🇷🇺 178.155.28.249

🇺🇸 172.217.107.150

🇭🇰 152.32.188.207

🇿🇦 102.253.39.1

🇺🇸 65.49.1.222

🇧🇷 45.185.72.155

🇧🇷 45.181.100.137

🇦🇷 45.180.61.244

🇺🇸 40.124.173.234

🇨🇳 27.155.120.135

🇺🇸 18.218.118.203

🇬🇧 5.226.140.15

🇨🇿 2a02:8308:14:6900:cc75:ad68:9be4:3ff1

🇺🇸 2607:f8b0:4001:c10::122