72.255.3.76

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
45% Elevated
89 reports
35 reporters · latest 3 days ago
ISP
Cyber Internet Services Pakistan
Usage Type
Fixed Line ISP
ASN
AS9541
Domain Name
cyber.net.pk
Country
🇵🇰 Pakistan
City
Lahore, Punjab
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
89 from 35 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇩🇪 Germany 6 🇮🇩 Indonesia 6
Most common categories Bad Web Bot 11 Brute-Force 7 Hacking 5 Port Scan 4 Web App Attack 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Hacking Bad Web Bot
Anonymous
denied traffic to a honeypot network. destination port 49152.
Port Scan Hacking
🇩🇪 filstal.org
Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Opera/9.20.(X11; Linux x86_64; apn-IN) Presto/2.9.189 Version/11.00
Bad Web Bot
🇵🇹 Information Security
Web App Attack ...
Web App Attack
🇵🇹 Information Security
Web App Attack ...
Web App Attack
🇯🇵 VXG-NET
port=80, indicator_type=code-execution
Hacking
Anonymous
denied traffic to a honeypot network. destination port 80.
Port Scan Hacking
🇫🇷 bigorre.org
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇹🇷 Threat.live
Threat.live: Web Scan
Web App Attack
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
Anonymous
Brute-force: 4 blocked attempts on port(s) 8080 between 2026-10-01 20:48 and 2026-10-01 20:48 UTC (OPNsense firewall log).
Brute-Force
🇩🇪 cloudmax
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
Port Scan
🇹🇷 trakyabirlik
Seczar SecureOps — Crypto Miner / C2 Outbound (4 events) — quarantined 43200m on Trakya_Genel_Mudurluk
Exploited Host
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇪 91.236.116.50
🇦🇺 216.226.77.120
🇰🇷 211.250.40.117
🇳🇵 202.51.89.78
🇷🇴 193.32.162.148
🇧🇷 191.7.159.201
🇺🇸 184.105.139.71
🇦🇺 170.64.188.239
🇷🇴 2.57.121.112
🇩🇪 213.209.159.231
🇺🇸 162.216.150.134
🇮🇩 103.165.227.178
🇹🇷 88.243.76.27
🇻🇳 42.1.65.89
🇺🇸 20.169.84.56
🇺🇸 20.168.121.140
🇨🇱 201.188.79.213
🇺🇸 157.22.19.219
🇺🇸 129.121.143.191
🇰🇷 122.40.25.144
feedback