139.5.0.164
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- RailTel Corporation is an Internet Service Provider.
- Usage Type
- Fixed Line ISP
- ASN
- AS24186
- Domain Name
- railtel.in
- Country
- 🇮🇳 India
- City
- Haldwani, Uttarakhand
Abuse Reports
Total reports
45 from
22 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-10-27 UTC.
|
Exploited Host | |
| 🇩🇪 ghostwarriors |
Webpage scraping
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇩🇪 FD-IX |
Fail2Ban: WordPress XML-RPC brute-force attack detected.
|
Bad Web Bot Web App Attack | |
| 🇺🇸 IndigoRidge |
|
Web App Attack | |
| 🇫🇮 inlink.ltd |
Known malicious PHP file or CMS probe
|
Web App Attack | |
| 🇪🇸 librebit |
Brute force
|
Brute-Force | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 37215.
|
Port Scan | |
| Anonymous |
Unauthorized connection attempt on Port 2323
|
Port Scan Hacking Exploited Host | |
| Anonymous |
Unauthorized connection attempt on Port 2323
|
Port Scan Hacking Exploited Host | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| Anonymous |
Unauthorized connection attempt on Port 2323
|
Port Scan Hacking Exploited Host | |
| 🇵🇱 sefinek.net |
Honeypot hit: Empty payload (likely service probe); 52869 [1] TCP
|
Port Scan | |
| 🇨🇿 Countryman |
IPS detection: D-Link.Devices.HNAP.SOAPAction-Header.Command.Execution
|
Hacking | |
| 🇺🇸 MPL |
tcp/2323 (3 or more attempts)
|
Port Scan | |
| 🇳🇱 exxos |
http-no-verb
|
Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown