JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.148.128.152

103.148.128.152 was found in our database!

This IP was reported 84 times. Confidence of Abuse is 100%: ?

100%

ISP	Jazz
Usage Type	Fixed Line ISP
ASN	AS131471
Hostname(s)	103-148-128-152.lmp.net.pk
Domain Name	jazz.com.pk
Country	🇵🇰 Pakistan
City	Faisalabad, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.148.128.152

Whois 103.148.128.152

IP Abuse Reports for 103.148.128.152:

This IP address has been reported a total of 84 times from 54 distinct sources. 103.148.128.152 was first reported on August 21st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Scan	2026-09-03 03:31:11 (1 hour ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇮🇩 securejdprop	2026-09-03 02:53:02 (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SERVER WGET ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SERVER WGET Command Specifying Output in HTTP Headers). show less	Hacking Web App Attack
🇺🇸 RAP	2026-09-02 20:29:29 (8 hours ago)	2026-09-02 20:29:29 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇩🇪 anycast_ac	2026-09-02 16:19:13 (12 hours ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2323 (telnet). Tried credential ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/2323 (telnet). Tried credentials: b'root':b'root' Family fingerprint: mirai Commands captured: $ start $ enable $ config terminal $ system $ linuxshell show less	DDoS Attack IoT Targeted Brute-Force
🇩🇪 anycast_ac	2026-09-02 16:04:04 (12 hours ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2323 (telnet). Tried credential ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/2323 (telnet). Tried credentials: b'root':b'12345' Family fingerprint: mirai Commands captured: $ start $ enable $ config terminal $ system $ linuxshell show less	DDoS Attack IoT Targeted Brute-Force
🇬🇧 OptimusGO	2026-09-02 09:57:02 (18 hours ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-09-02 10:57:01 UTC Log evidence: 09/02/2026-10:57:00.829611 [wDrop] [] [1:7001101:1] FINSERV CRITICAL: Telnet Access Blocked [] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {TCP} 103.148.128.152:31108 -> 185.127.18.66:23 09/02/2026-10:57:00.829611 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 103.148.128.152:31108 -> 185.127.18.66:23 show less	Port Scan Brute-Force
🇫🇷 jonahtebaa	2026-09-02 08:30:04 (20 hours ago)	SSH tarpit capture	Port Scan Brute-Force SSH
🇳🇱 DonAtari	2026-09-02 03:24:41 (1 day ago)	DShield firewall scan - TCP to port 23	Brute-Force SSH
🇺🇸 RAP	2026-09-02 02:15:52 (1 day ago)	2026-09-02 02:15:52 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇳🇱 Maurice	2026-09-01 16:26:03 (1 day ago)	Honeypot hit: Brute-force attack detected on 23/TELNET • Credentials: root:xc3511, root:2011vesta, a ... show more Honeypot hit: Brute-force attack detected on 23/TELNET • Credentials: root:xc3511, root:2011vesta, admin:BrAhMoS@15, root:7ujMko0vizxv, ruijie:ruijie, admin:admin, admin:aquario, admin:ho4uku6at, admin:adminHW, root:12345, admin:88888888, admin:qwerty, admin:a1sev5y7c39k, root:zyad1234, admin:gw1admin, root:ikwb, admin:CTLSupport12, root:1234horses, root:12341234, root:ifconfig, draytek:1234, guest:123456, root:pass, root:e2008jl • Number of login attempts: 24 • 9 command(s) were executed during the session Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Brute-Force Hacking
🇳🇱 Maurice	2026-09-01 16:26:03 (1 day ago)	Honeypot hit: Brute-force attack detected on 23/TELNET • Credentials: root:xc3511, root:2011vesta, a ... show more Honeypot hit: Brute-force attack detected on 23/TELNET • Credentials: root:xc3511, root:2011vesta, admin:BrAhMoS@15, root:7ujMko0vizxv, ruijie:ruijie, admin:admin, admin:aquario, admin:ho4uku6at, admin:adminHW, root:12345, admin:88888888, admin:qwerty, admin:a1sev5y7c39k, root:zyad1234, admin:gw1admin, root:ikwb, admin:CTLSupport12, root:1234horses, root:12341234, root:ifconfig, draytek:1234, guest:123456, root:pass, root:e2008jl • Number of login attempts: 24 • 9 command(s) were executed during the session Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Brute-Force Hacking
Anonymous	2026-09-01 14:14:00 (1 day ago)	D-Link.Devices.HNAP.SOAPAction-Header.Command.Execution	Hacking
🇹🇭 MWA SOC	2026-09-01 09:42:21 (1 day ago)		Hacking
🇺🇸 MPL	2026-09-01 03:44:17 (2 days ago)	tcp/23 (2 or more attempts)	Port Scan
🇧🇪 sid3windr	2026-08-31 11:20:16 (2 days ago)	POST /GponForm/diag_Form?images/ (Tarpitted for 1d15h8m26s, wasted 8.06MB)	Web App Attack

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 213.109.226.18

🇮🇳 203.200.74.20

🇷🇺 195.19.12.21

🇧🇷 187.120.107.227

🇺🇸 181.215.65.220

🇺🇸 158.94.187.9

🇸🇳 154.125.81.124

🇫🇮 147.185.133.245

🇺🇸 64.62.156.126

🇱🇻 62.60.130.242

🇺🇸 45.79.98.252

🇬🇧 35.203.211.3

🇺🇸 209.38.153.150

🇫🇮 193.233.199.37

🇭🇰 165.154.60.114

🇺🇸 147.185.132.51

🇺🇸 137.184.85.173

🇸🇬 84.75.148.99

🇷🇺 62.76.176.66

🇭🇰 45.120.216.232