139.135.48.149

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
58 reports
40 reporters · latest 2 hours ago
ISP
Cyber Internet Services Pakistan
Usage Type
Fixed Line ISP
ASN
AS9541
Domain Name
cyber.net.pk
Country
🇵🇰 Pakistan
City
Karachi, Sindh
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
58 from 40 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 19 🇩🇪 Germany 8 🇫🇷 France 7
Most common categories Port Scan 42 Brute-Force 22 Hacking 14 SSH 9 IoT Targeted 8
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
Hacking
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
Anonymous
Port Scan Brute-Force
🇫🇮 syscfg
Cowrie SSH honeypot: 1065 attempt(s) from 139.135.48.149. Period: 2026-11-07T14:17:27 to 2026-11-07T14:18:40 UTC. Usernames tried: root. Passwords tried: xc3511. Source: Cowrie honeypot (SSH/Telnet)
Brute-Force SSH
🇺🇸 xclmp
Unauthorized connection attempts consistent with that of port probing and scanning from 139.135.48.149 were detected at 2026-11-10 12:31:49 UTC. Learn More: https://fia.project-furina.com/report/22445
Port Scan
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇫🇮 syscfg
Cowrie SSH honeypot: 1065 attempt(s) from 139.135.48.149. Period: 2026-11-07T14:17:27 to 2026-11-07T14:18:40 UTC. Usernames tried: root. Passwords tried: xc3511. Source: Cowrie honeypot (SSH/Telnet)
Brute-Force SSH
🇹🇷 oalver
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet. Sources: honeypot. First seen: 2026-11-09. Risk score: 30/100.
Brute-Force IoT Targeted
🇷🇺 dnsbd.tech
nftables: Port scan (TCP:23) [srv1]
Port Scan Hacking
🇺🇸 MPL
tcp/23 (4 or more attempts)
Port Scan
🇩🇪 phil2k
DDoS Attack Port Scan Brute-Force
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇵🇱 mkey
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-11-08 11:31:14 | LAST=2026-11-08 11:31:15. Last seen 2026-11-08 11:31:15.
Port Scan
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 198.235.24.107
🇳🇱 193.47.62.69
🇦🇷 186.131.186.152
🇺🇸 107.174.181.21
🇺🇸 74.0.182.164
🇺🇸 65.49.1.108
🇺🇸 65.49.1.80
🇷🇺 46.50.240.92
🇺🇸 185.180.141.43
🇺🇸 172.252.205.184
🇺🇸 172.252.169.132
🇬🇧 165.227.238.235
🇦🇪 152.32.181.210
🇳🇱 109.160.32.179
🇨🇳 106.75.254.25
🇧🇩 103.41.244.186
🇳🇱 86.38.187.156
🇲🇽 68.155.153.29
🇳🇱 64.205.72.246
🇳🇱 45.148.10.230
feedback