154.223.128.39

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
53% Elevated
135 reports
79 reporters · latest 1 week ago
ISP
AIRNET COPROPIEDAD
Usage Type
Fixed Line ISP
ASN
AS271990
Domain Name
airnet.com.gt
Country
🇬🇹 Guatemala
City
Chiquimula, Chiquimula
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
135 from 79 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 9 🇩🇪 Germany 7 🇫🇷 France 3
Most common categories Port Scan 23 Hacking 8 Brute-Force 7 SSH 5 Bad Web Bot 4
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇺🇸 kot
scan port 22, 154.223.128.39 block
Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇧🇬 Ilcheff
SSH tarpit hit (endlessh): connection to the SSH port accepted and held open with an endless banner, no login possible.
Port Scan Brute-Force SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇺🇸 mibbsdevs
CoffeePot: Connection attempt detected on closed service bait ports (21/22/23/3306/3389/5432).
Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇩🇪 LRob
Not following 301 redirects — wasted requests | method: GET | path: /avis-toogoodtogo/ | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36
Bad Web Bot
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
Anonymous
Hacking Bad Web Bot
Anonymous
Unauthorized access (23/tcp/telnet) Targeted IoT device:Unknown (Probability:High)
Port Scan IoT Targeted
🇮🇹 A000Z
Fail2Ban: 154.223.128.39 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
Bad Web Bot
Anonymous
Blocked by os-abuseipdb; 7 hits, proto=tcp, ports=22,23
Port Scan Hacking Brute-Force
🇩🇪 KPS
PortscanT
Port Scan
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 196.251.121.126
🇬🇧 195.96.139.104
🇩🇪 194.88.98.107
🇮🇹 185.132.230.195
🇫🇷 169.58.88.107
🇺🇸 166.62.41.96
🇺🇸 146.190.41.214
🇩🇪 69.5.169.91
🇺🇸 66.132.172.194
🇺🇸 52.186.182.115
🇬🇧 51.89.173.238
🇫🇷 5.135.108.244
🇰🇿 195.82.9.146
🇧🇷 191.177.190.110
🇲🇽 158.23.162.152
🇦🇹 109.70.100.2
🇮🇩 103.159.199.43
🇪🇸 91.210.126.2
🇬🇧 90.203.127.44
🇳🇱 64.205.72.62
feedback