JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

59.103.119.48

Recent Activity

Abuse confidence score ?

82% Critical

87 reports

41 reporters · latest 20 hours ago

ISP	Cyber Internet Services Pvt Ltd
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Nawabshah, Sindh

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 59.103.119.48

Export CSV

This IP address has been reported a total of 87 times from 41 distinct sources. 59.103.119.48 was first reported on September 1st 2025, and the most recent report was 20 hours ago. In the last 60 days, the top reporter locations were: United States of America with 27 reports; France with 6 reports; Germany with 4 reports. The most common categories in these recent reports were: Port Scan 30 times; Brute-Force 20 times; SSH 12 times; Hacking 11 times; Exploited Host 4 times; Other 10 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 LSPCCU	2026-10-03 13:10:59 (20 hours ago)	TSEC Honeypot Network report. Threat score: 99/100. Categories: DDoS Attack, Port Scan, Hacking, Bru ... show more TSEC Honeypot Network report. Threat score: 99/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Exploited Host, Web App Attack, SSH, IoT Targeted. Honeypot: cowrie. Context: 59.103.119.48 classified as malware delivery infrastructure dropping payloads on compromised hosts (high confidence). show less	DDoS Attack Port Scan Hacking Brute-Force Exploited Host Web App Attack SSH IoT Targeted
🇩🇪 edgeshield	2026-10-03 02:53:51 (1 day ago)	Automated web request flooding / DDoS (EdgeShield WAF).	DDoS Attack
🇨🇦 senkodev	2026-10-01 23:01:53 (2 days ago)	2026-10-01T23:01:51.798582Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 59.103.119 ... show more 2026-10-01T23:01:51.798582Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 59.103.119.48:41955 (158.69.22.11:2223) [session: e4d6095db934] 2026-10-01T23:01:52.850187Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 59.103.119.48:41977 (158.69.22.11:2223) [session: caec9d344cc4] ... show less	Brute-Force SSH
🇺🇦 TawnyBalfour	2026-10-01 14:15:07 (2 days ago)	Telnet honeypot. 2158 commands executed after access. Target port: 23. Window: 2026-10-01 14:01 to 2 ... show more Telnet honeypot. 2158 commands executed after access. Target port: 23. Window: 2026-10-01 14:01 to 2026-10-01 14:15 UTC. show less	Hacking
🇺🇸 xmission.com	2026-10-01 08:07:22 (3 days ago)	Blocked by UFW (TCP on 23) Source port: 41346 TTL: 47 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 41346 TTL: 47 Packet length: 40 TOS: 0x00 This report (for 59.103.119.48) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 sumnone	2026-09-30 11:17:27 (3 days ago)	Port probing on unauthorized port 23	Port Scan Hacking Exploited Host
🇺🇸 MPL	2026-09-29 02:12:43 (5 days ago)	tcp/23	Port Scan
🇺🇸 xmission.com	2026-09-28 19:51:37 (5 days ago)	Blocked by UFW (TCP on 2323) Source port: 40382 TTL: 47 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2323) Source port: 40382 TTL: 47 Packet length: 40 TOS: 0x00 This report (for 59.103.119.48) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-09-25 14:02:25 (1 week ago)	tcp/23	Port Scan
🇺🇸 xmission.com	2026-09-25 00:50:10 (1 week ago)	Blocked by UFW (TCP on 23) Source port: 41897 TTL: 46 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 41897 TTL: 46 Packet length: 40 TOS: 0x00 This report (for 59.103.119.48) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇩🇪 Kitki30.com	2026-09-23 18:36:16 (1 week ago)	Entered Telnet Tarpit (endlessh, server 2). Log: 2026-09-23T18:36:15.817Z ACCEPT host=::ffff:59.103. ... show more Entered Telnet Tarpit (endlessh, server 2). Log: 2026-09-23T18:36:15.817Z ACCEPT host=::ffff:59.103.119.48 port=40381 fd=10 n=16/4096 show less	IoT Targeted Port Scan Brute-Force
🇰🇷 2048	2026-09-23 12:24:37 (1 week ago)	Telnet credential brute-force observed by honeypot. Source IP: 59.103.119.48 Targeted device: DVR Fi ... show more Telnet credential brute-force observed by honeypot. Source IP: 59.103.119.48 Targeted device: DVR First seen: 23 Sep 2026 12:21:06 UTC Last seen: 23 Sep 2026 12:24:37 UTC Attempts: 23 Sample credentials: ftp:ftp, admin:smcadmin, 8ehomeasb:8ehomeasb, super:sp-admin, 1234:1234, root:2011vesta, root:bluehorse, root:2010vesta, root:system, root:realtek show less	Brute-Force IoT Targeted
🇺🇸 MPL	2026-09-23 01:39:55 (1 week ago)	tcp/23 (2 or more attempts)	Port Scan
🇺🇸 MPL	2026-09-22 07:15:20 (1 week ago)	tcp/23	Port Scan
🇨🇿 Countryman	2026-09-19 06:54:52 (2 weeks ago)	IPS detection: Multiple.Routers.GPON.formLogin.Remote.Command.Injection	Hacking

Showing 1 to 15 of 87 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 104.30.180.114

🇧🇩 103.187.95.237

🇳🇱 77.91.71.92

🇳🇱 45.148.10.157

🇫🇷 2001:41d0:303:2bb1::1

🇧🇷 205.210.31.177

🇵🇱 194.180.49.68

🇷🇴 193.46.255.86

🇺🇸 191.102.129.134

🇦🇴 154.71.187.132

🇻🇳 116.110.212.77

🇲🇲 103.233.206.154

🇧🇩 103.145.74.131

🇨🇬 102.141.45.17

🇧🇬 5.188.206.30

🇺🇸 2604:a880:400:d1:0:5:196d:1001

🇺🇸 2001:470:1:c84::2d5

🇷🇺 217.149.191.246

🇩🇪 207.154.224.112

🇪🇬 196.219.224.230