37.148.40.39

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
86% Critical
23 reports
17 reporters · latest 55 minutes ago
ISP
SHATEL DSL Network
Usage Type
Fixed Line ISP
ASN
AS34369
Domain Name
shatel.ir
Country
🇮🇷 Iran (Islamic Republic of)
City
Tehran, Tehran
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
23 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇮🇩 Indonesia 7 🇧🇷 Brazil 5 🇫🇷 France 2
Most common categories Port Scan 9 Brute-Force 9 Hacking 6 Exploited Host 3 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
Brute-Force
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
Brute-Force
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
Brute-Force
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
Brute-Force
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
Brute-Force
🇩🇪 goodbytes
Hacking
🇫🇷 uthul
T-Pot honeypot: 1 hits on ports [9034] (automated)
Port Scan
🇮🇪 RoboSOC
Realtek Jungle SDK Remote Code Execution Vulnerability, PTR: 37-148-40-39.rasana.net.
Hacking
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-11-09 UTC.
Exploited Host
🇫🇷 Petre 21_ip
2026-11-09T20:02:38.537911+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=37.148.40.39 DST=155.133.26.57 LEN=124 TOS=0x00 PREC=0x00 TTL=53 ID=10140 DF PROTO=UDP SPT=53386 DPT=9034 LEN=104 ...
Port Scan
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
Brute-Force
🇹🇼 kk_it_man
hack
Hacking
🇧🇷 diego
[rede-44-49] 11/09/2026-05:52:18.227016, 37.148.40.39, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Hacking
🇺🇸 HamSammich
Automated sensor: 1 port 9034 connection/probe attempts over the last 24h (latest 2026-11-09T06:51Z).
Port Scan
🇳🇮 elfita
Blocked by nftables on AmneziaWG gateway (Ports: 9034)
Port Scan Brute-Force Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 217.181.86.186
🇩🇪 167.94.146.61
🇭🇰 123.58.213.20
🇺🇸 34.34.225.119
🇺🇸 205.210.31.22
🇨🇱 201.238.194.80
🇹🇼 198.235.24.67
🇬🇧 188.240.59.56
🇸🇾 188.132.249.180
🇬🇧 185.216.145.178
🇺🇸 168.92.242.164
🇷🇺 154.83.196.237
🇩🇪 151.243.11.109
🇵🇰 124.29.224.16
🇨🇳 119.145.167.171
🇯🇴 109.107.243.174
🇺🇸 109.105.210.75
🇺🇸 72.215.44.103
🇳🇱 45.148.10.95
🇷🇴 2.57.122.209
feedback