139.135.43.97
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Cyber Internet Services Pakistan
- Usage Type
- Fixed Line ISP
- ASN
- AS9541
- Domain Name
- cyber.net.pk
- Country
- 🇵🇰 Pakistan
- City
- Lahore, Punjab
Abuse Reports
Total reports
71 from
38 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇪 boxed-it |
POST /GponForm/diag_Form?images/ (Tarpitted for 1d15h8m28s, wasted 8.06MB)
|
Web App Attack | |
| Anonymous |
|
Hacking Bad Web Bot | |
| Anonymous |
Triggered: repeated knocking on closed ports.
|
Port Scan | |
| 🇺🇸 justbible |
|
Bad Web Bot | |
| 🇵🇷 HRCOM |
|
IoT Targeted Web App Attack Hacking | |
| 🇫🇷 wiredalter |
Blocked by fail2ban on o2VPS [81/tcp]
Source Port: 28423
TTL: 43
Packet Length: 60
TOS: 0x00
Analyzed by https://ip.wiredalter.com
|
Brute-Force SSH | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 49152.
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 12 hits on ports [49152] (automated)
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 12 hits on ports [49152] (automated)
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| Anonymous |
Detected by CrowdSec
IP: 139.135.43.97
Scenario: crowdsecurity/suricata-major-severity
Date: Mon, 26 Oct 2026 00:09:05 CET (GMT +01:00)
|
Web App Attack Port Scan | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇹🇷 savasboluk |
Auto-blocked by Seczar SecureOps — Crypto Miner / C2 Outbound (4 events in 5min) at 2026-10-10 01:04
|
Exploited Host | |
| 🇧🇷 diego |
[arem1] 2026-10-06 17:49:51, Client: 139.135.43.97, Protocol: 6, Unauthorized activity to HTTP: POST /GponForm/diag_Form
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/80 (8 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown