103.244.172.242
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Cyber Internet Services Pakistan
- Usage Type
- Fixed Line ISP
- ASN
- AS9541
- Domain Name
- cyber.net.pk
- Country
- 🇵🇰 Pakistan
- City
- Gujranwala, Punjab
Abuse Reports
Total reports
25 from
15 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇵🇱 Kitki30.com |
Entered Telnet Tarpit (endlessh, server 1).
Log: 2026-11-03T14:32:08.946Z ACCEPT host=::ffff:103.244.172.242 port=10255 fd=22 n=20/4096
|
IoT Targeted Port Scan Brute-Force | |
| 🇺🇸 Axel |
Atom Honypot: 50 connections to login:telnet (tcp/23), telnet (tcp/23) observed by 1 honeypot sensor between 2026-11-03 14:20 UTC and 2026-11-03 14:22 UTC. Includes 25 authentication attempts against decoy login services.
|
Port Scan Brute-Force | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-02 00:59:40 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇫🇮 Panamaaa |
Port scan detected; Brute-force attack detected
|
Port Scan Brute-Force | |
| Anonymous |
denied traffic to a honeypot network. destination port 23.
|
Port Scan Hacking | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
|
Bad Web Bot | |
| Anonymous |
denied traffic to a honeypot network. destination port 34994.
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-04-11 05:30:34 UTC Unauthorized activity to TCP port 8443. Web App
|
Port Scan Web App Attack | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 49152)
Source port: 36768
TTL: 43
Packet length: 60
TOS: 0x08
This report (for 103.244.172.242) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 bulkvm.com |
[bulkvm.com/honeypot] Web application. Port: 37557, request: GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+, Time: 2026-03-27 11:49:47 UTC
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/49152 (12 or more attempts)
|
Port Scan | |
| 🇳🇿 Kiwi Bloke |
Mozi.Botnet
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown