This IP address has been reported a total of
73
times from
37 distinct
sources.
111.173.159.139 was first reported on
November 25th 2025 , and the most recent report was
52 minutes ago United States of America
with 31
reports;
Germany
with 12
reports;
France
with 7
reports.
The most common categories in these recent reports were:
Port Scan
53
times;
Brute-Force
21
times;
Hacking
19
times;
IoT Targeted
5
times;
Email Spam
2
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
KPS
2026-10-15 23:26:18
(52 minutes ago)
PortscanT
Port Scan
🇦🇹
Pingger Shikkoken
2026-10-15 23:20:40
(57 minutes ago)
2026-10-15T23:20:40+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ...
show more
2026-10-15T23:20:40+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=111.173.159.139 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=23332 DF PROTO=TCP SPT=46507 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 2026-10-15T23:20:41+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=111.173.159.139 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=23333 DF PROTO=TCP SPT=46507 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0
show less
Hacking
Brute-Force
🇧🇾
sashan
2026-10-15 20:32:54
(3 hours ago)
2026-10-15T23:32:53.827167+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=111.173.159 ...
show more
2026-10-15T23:32:53.827167+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=111.173.159.139 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=37868 DF PROTO=TCP SPT=36564 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇮🇹
CoreTech srl
2026-10-15 09:18:27
(14 hours ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
Hacking
🇩🇪
Jochen Pretli
2026-10-14 23:48:16
(1 day ago)
connection to honeypot
Email Spam
Port Scan
🇩🇪
KPS
2026-10-14 22:33:46
(1 day ago)
PortscanT
Port Scan
🇦🇹
Pingger Shikkoken
2026-10-14 18:59:21
(1 day ago)
2026-10-14T18:59:21+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ...
show more
2026-10-14T18:59:21+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=111.173.159.139 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=12901 DF PROTO=TCP SPT=45749 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 2026-10-14T18:59:22+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=111.173.159.139 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=12902 DF PROTO=TCP SPT=45749 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0
show less
Hacking
Brute-Force
2026-10-14 17:04:10
(1 day ago)
IP & Port Scan.
SSH
Port Scan
Brute-Force
🇵🇱
sefinek.net
2026-10-14 10:28:25
(1 day ago)
Honeypot hit: Unauthorized connection attempt detected on 23/TELNET
Reported by: https://github.com/ ...
show more
Honeypot hit: Unauthorized connection attempt detected on 23/TELNET
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Hacking
Port Scan
🇺🇸
knock
2026-10-14 01:18:29
(1 day ago)
Knock-Knock honeypot brute-force: Telnet (105 total hits)
Brute-Force
🇩🇪
Jochen Pretli
2026-10-13 22:35:07
(2 days ago)
connection to honeypot
Email Spam
Port Scan
🇩🇪
KPS
2026-10-13 19:29:26
(2 days ago)
PortscanT
Port Scan
🇺🇸
cwytech
2026-10-13 11:23:56
(2 days ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
Hacking
🇵🇱
bart@
2026-10-13 07:23:37
(2 days ago)
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honey ...
show more
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp
show less
Port Scan
🇩🇪
bancix
2026-10-13 02:09:39
(2 days ago)
Heimdallr NIDS: Automatic ban triggered. Reason: TRAP_PORT_HIT (porta 23)
Port Scan
Showing 1 to
15
of 73 reports
