JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

153.117.15.39

Recent Activity

Abuse confidence score ?

76% Critical

42 reports

22 reporters · latest 3 hours ago

ISP	Cyber Internet Services Pvt Ltd
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 153.117.15.39

Export CSV

This IP address has been reported a total of 42 times from 22 distinct sources. 153.117.15.39 was first reported on June 1st 2026, and the most recent report was 3 hours ago. In the last 60 days, the top reporter locations were: United States of America with 19 reports; Germany with 8 reports; Australia with 3 reports. The most common categories in these recent reports were: Port Scan 25 times; Brute-Force 15 times; Hacking 10 times; IoT Targeted 8 times; Web App Attack 6 times; Other 4 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-10-02 08:56:07 (3 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 71>=65, Abuse 73, NonEU, first-seen, Change* path) show less	Hacking Exploited Host Web App Attack
🇺🇸 RAP	2026-10-02 01:29:38 (10 hours ago)	2026-10-02 01:29:38 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇷🇸 Scan	2026-10-02 00:36:11 (11 hours ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 MPL	2026-10-01 03:21:36 (1 day ago)	tcp/8081 (3 or more attempts)	Port Scan
🇷🇺 genokrad	2026-09-30 14:02:56 (1 day ago)	Unauthorized connection try on TCP/23 (Telnet)	Port Scan
🇷🇸 Smel	2026-09-29 14:22:05 (2 days ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
🇺🇸 RAP	2026-09-29 08:49:16 (3 days ago)	2026-09-29 08:49:16 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇦🇺 teohumble1	2026-09-25 13:10:43 (6 days ago)	TeoStrike honeypot (reporter: Teohumble): 90/100 threat. Observed: web-exploit-attempt, no-user-agen ... show more TeoStrike honeypot (reporter: Teohumble): 90/100 threat. Observed: web-exploit-attempt, no-user-agent, web-scanner, cve-exploit:cmd-injection. Unsolicited attack on a decoy host. show less	Port Scan Hacking Web App Attack
🇫🇷 sthoyer.de	2026-09-20 00:34:25 (1 week ago)	Sep 20 02:34:25 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Sep 20 02:34:25 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=153.117.15.39 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=11182 PROTO=TCP SPT=56028 DPT=23 WINDOW=29688 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xKaramx	2026-09-12 06:02:33 (2 weeks ago)	SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observ ... show more SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇫🇮 6kilowatti	2026-09-11 02:33:06 (3 weeks ago)	2026-09-11T05:33:04.798422+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-09-11T05:33:04.798422+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:08:00 SRC=153.117.15.39 DST=5.61.88.83 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=38630 PROTO=TCP SPT=56641 DPT=2323 WINDOW=27056 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xKaramx	2026-09-11 00:12:51 (3 weeks ago)	SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observ ... show more SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇺🇸 xKaramx	2026-09-09 18:02:06 (3 weeks ago)	SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observ ... show more SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇺🇸 xKaramx	2026-09-08 18:00:53 (3 weeks ago)	SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observ ... show more SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted
🇺🇸 xKaramx	2026-09-07 18:00:51 (3 weeks ago)	SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observ ... show more SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry. show less	Brute-Force IoT Targeted

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.59

🇺🇸 107.175.80.223

🇺🇸 43.166.227.182

🇻🇳 14.225.218.99

🇳🇱 204.76.203.212

🇨🇴 201.46.124.0

🇭🇰 125.59.204.176

🇮🇳 103.151.186.22

🇫🇷 91.231.89.78

🇨🇳 59.216.101.49

🇺🇸 214.55.148.212

🇻🇪 181.208.242.90

🇺🇸 173.252.69.29

🇩🇪 159.26.104.69

🇬🇧 138.68.148.206

🇰🇷 121.135.47.141

🇷🇺 83.142.10.176

🇺🇸 73.255.107.62

🇩🇪 69.5.169.38

🇳🇱 193.47.62.69