JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.135.63.8

139.135.63.8 was found in our database!

This IP was reported 258 times. Confidence of Abuse is 56%: ?

56%

ISP	Cyber Internet Services Pakistan
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.135.63.8

Whois 139.135.63.8

IP Abuse Reports for 139.135.63.8:

This IP address has been reported a total of 258 times from 84 distinct sources. 139.135.63.8 was first reported on November 8th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 syscfg	2026-09-30 15:05:38 (4 hours ago)	Cowrie SSH honeypot: 1050 attempt(s) from 139.135.63.8. Period: 2026-08-24T13:50:57 to 2026-08-31T09 ... show more Cowrie SSH honeypot: 1050 attempt(s) from 139.135.63.8. Period: 2026-08-24T13:50:57 to 2026-08-31T09:39:49 UTC. Usernames tried: default, cisco, telecomadmin, root, admin. Passwords tried: default, hg2x0, ALC#FGU, root, uFwfBht5. Source: Cowrie honeypot (SSH/Telnet) show less	Brute-Force SSH
🇫🇮 syscfg	2026-09-29 15:05:37 (1 day ago)	Cowrie SSH honeypot: 1050 attempt(s) from 139.135.63.8. Period: 2026-08-24T13:50:57 to 2026-08-31T09 ... show more Cowrie SSH honeypot: 1050 attempt(s) from 139.135.63.8. Period: 2026-08-24T13:50:57 to 2026-08-31T09:39:49 UTC. Usernames tried: admin, default, root, guest, e8ehome. Passwords tried: 5up, zlxx., ALC#FGU, tlJwpbo6, ipcam. Source: Cowrie honeypot (SSH/Telnet) show less	Brute-Force SSH
🇫🇮 syscfg	2026-09-28 15:05:37 (2 days ago)	Cowrie SSH honeypot: 1050 attempt(s) from 139.135.63.8. Period: 2026-08-24T13:50:57 to 2026-08-31T09 ... show more Cowrie SSH honeypot: 1050 attempt(s) from 139.135.63.8. Period: 2026-08-24T13:50:57 to 2026-08-31T09:39:49 UTC. Usernames tried: AdminGPON, guest, root, telecomadmin, e8ehome. Passwords tried: password, admintelecom, guest, root, Zxic521. Source: Cowrie honeypot (SSH/Telnet) show less	Brute-Force SSH
🇫🇮 syscfg	2026-09-27 14:05:40 (3 days ago)	Cowrie SSH honeypot: 1050 attempt(s) from 139.135.63.8. Period: 2026-08-24T13:50:57 to 2026-08-31T09 ... show more Cowrie SSH honeypot: 1050 attempt(s) from 139.135.63.8. Period: 2026-08-24T13:50:57 to 2026-08-31T09:39:49 UTC. Usernames tried: AdminGPON, e8ehome, admin, guest, cisco. Passwords tried: admin1234, ipcam, telnet, wabjtam, 7ujMko0admin. Source: Cowrie honeypot (SSH/Telnet) show less	Brute-Force SSH
🇫🇮 syscfg	2026-09-26 14:05:38 (4 days ago)	Cowrie SSH honeypot: 1050 attempt(s) from 139.135.63.8. Period: 2026-08-24T13:50:57 to 2026-08-31T09 ... show more Cowrie SSH honeypot: 1050 attempt(s) from 139.135.63.8. Period: 2026-08-24T13:50:57 to 2026-08-31T09:39:49 UTC. Usernames tried: support, guest, root, cisco, AdminGPON. Passwords tried: support, VnT3ch@dm1n, guest, root, 12345. Source: Cowrie honeypot (SSH/Telnet) show less	Brute-Force SSH
🇫🇮 syscfg	2026-09-25 13:05:37 (5 days ago)	Cowrie SSH honeypot: 1050 attempt(s) from 139.135.63.8. Period: 2026-08-24T13:50:57 to 2026-08-31T09 ... show more Cowrie SSH honeypot: 1050 attempt(s) from 139.135.63.8. Period: 2026-08-24T13:50:57 to 2026-08-31T09:39:49 UTC. Usernames tried: guest, AdminGPON, support, telecomadmin, e8ehome. Passwords tried: guest, vizxv, xmhdipc, hg2x0, 5up. Source: Cowrie honeypot (SSH/Telnet) show less	Brute-Force SSH
🇫🇷 security.rdmc.fr	2026-09-03 21:06:54 (3 weeks ago)	Port Scan Attack proto:TCP src:61223 dst:23	Port Scan
Anonymous	2026-09-03 04:09:53 (3 weeks ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇺🇸 RAP	2026-09-02 23:37:06 (3 weeks ago)	2026-09-02 23:37:06 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 MPL	2026-09-02 09:05:21 (4 weeks ago)	tcp/23	Port Scan
🇫🇷 security.rdmc.fr	2026-09-02 05:30:35 (4 weeks ago)	Port Scan Attack proto:TCP src:61223 dst:23	Port Scan
🇵🇱 bart@	2026-09-01 23:40:08 (4 weeks ago)	Automated scan detection against redacted protected targets. Hits=51; port 23 proto 6 detection hone ... show more Automated scan detection against redacted protected targets. Hits=51; port 23 proto 6 detection honeypot_tcp show less	Port Scan
🇺🇸 MPL	2026-09-01 16:26:09 (4 weeks ago)	tcp/23 (2 or more attempts)	Port Scan
🇺🇸 xKaramx	2026-09-01 12:01:25 (4 weeks ago)	SSH/Telnet honeypot (telnet) recorded 50 session(s) and 874 logged event(s) from this address. Obser ... show more SSH/Telnet honeypot (telnet) recorded 50 session(s) and 874 logged event(s) from this address. Observed: credential set includes known IoT/DVR default passwords associated with Mirai-family botnets. Sample credentials attempted: 1001chin, 1234, 12345, 123456, 3ep5w2u, 5up. Reported automatically from honeypot telemetry. show less	Hacking Brute-Force IoT Targeted
🇩🇪 Kitki30.com	2026-09-01 08:13:50 (4 weeks ago)	Entered Telnet Tarpit (endlessh, server 3). Log: 2026-09-01T08:13:49.669Z ACCEPT host=::ffff:139.135 ... show more Entered Telnet Tarpit (endlessh, server 3). Log: 2026-09-01T08:13:49.669Z ACCEPT host=::ffff:139.135.63.8 port=51062 fd=13 n=12/4096 show less	IoT Targeted Port Scan Brute-Force

Showing 1 to 15 of 258 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 172.70.240.19

🇳🇱 109.160.32.46

🇮🇩 104.28.215.133

🇫🇷 85.217.140.18

🇳🇱 192.42.116.48

🇺🇸 166.186.196.135

🇺🇸 45.33.12.214

🇺🇸 40.121.200.75

🇹🇼 36.229.205.232

🇺🇸 216.25.89.95

🇻🇳 203.167.15.65

🇬🇧 185.216.145.179

🇵🇰 182.178.57.126

🇺🇸 173.255.223.124

🇯🇵 172.64.213.80

🇸🇪 138.124.86.81

🇨🇳 129.211.204.25

🇳🇱 77.239.124.174

🇳🇱 77.239.124.80

🇺🇸 72.240.125.133