JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 153.117.66.96

153.117.66.96 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 89%: ?

89%

ISP	Cyber Internet Services Pvt Ltd
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 153.117.66.96

Whois 153.117.66.96

IP Abuse Reports for 153.117.66.96:

This IP address has been reported a total of 25 times from 19 distinct sources. 153.117.66.96 was first reported on September 9th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 EvoX	2026-09-30 10:33:17 (6 hours ago)	🛡️ Honeypot [bsts-tpot-hive]: Brute-force attack detected on 23/TELNET • Credentials: e8ehome1:e8eho ... show more 🛡️ Honeypot [bsts-tpot-hive]: Brute-force attack detected on 23/TELNET • Credentials: e8ehome1:e8ehome1, yhtcAdmin:Cuc@YHfw, root:7ujMko0admin, admin:1234567890, keomeo:keomeo, root:helpme, support:support123, Manager:friend, root:1234, root:00000000, admin:1q2w3e, super:super, admin:pass, admin:gpon@Vnt00, e8ehome:e8ehome, draytek:1234, admin:qwerty, root:hi3518, root:svgodie, admin:123456 • Number of login attempts: 20 • 18 command(s) were executed during the session show less	Brute-Force Hacking
🇩🇪 Jochen Pretli	2026-09-28 12:42:37 (2 days ago)	connection to honeypot	Email Spam Port Scan
Anonymous	2026-09-28 03:02:24 (2 days ago)	Malware payload written over SSH: 'i' (301 KB), SHA256: 12013662c71da69de977c04cd7021f13a70cf7bed4ca ... show more Malware payload written over SSH: 'i' (301 KB), SHA256: 12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef. show less	Hacking SSH
🇹🇷 trakyabirlik	2026-09-27 21:16:35 (2 days ago)	Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — Telnet (13 events ... show more Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — Telnet (13 events in 5min) at 2026-09-27 21:16 show less	Web App Attack
🇺🇸 MPL	2026-09-27 00:14:24 (3 days ago)	tcp/80 (6 or more attempts)	Port Scan
🇳🇱 ByeByte API	2026-09-26 09:39:22 (4 days ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 60001. Single burst at 20 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 60001. Single burst at 2026-09-26 09:39 UTC. show less	Port Scan
🇹🇷 oalver	2026-09-25 10:50:43 (5 days ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet. ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet. Sources: honeypot. First seen: 2026-09-25. Risk score: 90/100. show less	Brute-Force IoT Targeted
🇫🇷 EvoX	2026-09-25 03:42:54 (5 days ago)	🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 23/TELNET • Credentials: root:helpme, ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 23/TELNET • Credentials: root:helpme, super:sp-admin, admin:88888888, root:, root:xmhdipc, admin:1234, admin:CTLSupport12, root:Admin, cht:chtngpon, ruijie:ruijie, !!Huawei:@HuaweiHgw, root:root, root:Zte521, root:20080826, root:1234567890, admin:qwerty, root:Fireitup, user:, root:klv123, admin:chzhdpl, root:hme12345, admin:v2mprt, root:xc3511 • Number of login attempts: 23 • 9 command(s) were executed during the session show less	Brute-Force Hacking
🇺🇸 PhilGoode	2026-09-24 21:29:33 (5 days ago)	Public honeypot activity observed on 2026-09-24. TELNET activity: 25 sessions, 25 authentication att ... show more Public honeypot activity observed on 2026-09-24. TELNET activity: 25 sessions, 25 authentication attempts, 2 command sessions, and 2 payload-indicator sessions. No credential or payload content is included. show less	Hacking Brute-Force IoT Targeted
🇭🇰 CyberFox	2026-09-22 07:21:52 (1 week ago)	23/tcp (1 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-09-20 15:12:15 (1 week ago)	Blocked by UFW (TCP on 23) Source port: 33492 TTL: 46 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 33492 TTL: 46 Packet length: 40 TOS: 0x00 This report (for 153.117.66.96) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 鬼影233	2026-09-20 13:04:30 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇨🇭 backslash	2026-09-20 13:03:04 (1 week ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇳🇱 EGP Abuse Dept	2026-09-20 00:26:59 (1 week ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
Anonymous	2026-09-19 20:16:04 (1 week ago)	Network service scanning detected by FortiGate; source quarantined.	Port Scan

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 167.71.138.9

🇱🇹 62.60.130.103

🇳🇱 45.148.10.141

🇫🇷 217.182.253.249

🇹🇼 203.145.217.125

🇺🇸 167.172.205.210

🇰🇷 112.164.146.173

🇺🇸 47.251.90.59

🇳🇱 213.206.207.146

🇦🇪 213.42.31.237

🇬🇪 178.134.235.210

🇬🇧 154.16.44.200

🇮🇳 103.216.170.48

🇮🇩 103.111.249.99

🇩🇪 93.152.221.113

🇬🇧 45.133.173.146

🇬🇧 5.226.140.73

🇬🇧 193.163.125.109

🇧🇩 103.216.57.119

🇧🇩 103.89.26.38