193.163.125.159
Classification: Malicious
193.163.125.159 is a malicious IP address. Reported by 5 threat sources, last seen 2026-09-02. Network: AS211298 Driftnet Ltd.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- IoT threat — Seen attacking IoT devices.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Port Scanner | AbuseIPDB | 2024-06-20 00:04:31 | 2026-09-02 21:22:56 | anomalous-activity attacker malicious-activity reconnaissance | |
| Malicious Host | AbuseIPDB | 2024-07-01 13:20:26 | 2026-09-02 14:27:21 | attacker compromised malicious-activity | |
| Bruteforce | AbuseIPDB | 2024-06-25 00:23:34 | 2026-09-02 14:27:21 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2024-07-02 00:12:08 | 2026-09-02 11:33:06 | attacker malicious-activity | |
| Hacking | AbuseIPDB | 2024-06-20 05:37:27 | 2026-09-02 07:56:37 | attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2024-06-21 06:30:37 | 2026-09-01 15:27:15 | attacker malicious-activity | |
| FTP Attacker | AbuseIPDB | 2024-11-18 21:36:04 | 2026-08-31 21:33:28 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2024-09-05 12:40:08 | 2026-08-30 07:56:41 | anomalous-activity attacker malicious-activity | |
| Known Attacker | AbuseIPDB | 2025-01-24 05:04:46 | 2026-08-25 03:44:41 | attacker malicious-activity | |
| DDoS Attacker | AbuseIPDB | 2025-10-08 03:11:00 | 2026-08-25 03:44:41 | attacker malicious-activity | |
| Mail Spammer | AbuseIPDB | 2024-10-30 11:36:04 | 2026-08-24 22:26:11 | attacker malicious-activity | |
| Malicious Host | CIArmy | 2021-07-04 02:52:05 | 2026-08-21 20:02:36 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-01-20 06:51:33 | 2026-08-18 09:16:47 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-01-20 06:51:23 | 2026-08-18 09:16:46 | attacker malicious-activity | |
| IMAP Attacker | AbuseIPDB | 2024-08-06 21:16:23 | 2026-08-14 23:55:39 | attacker malicious-activity | |
| IoT Attacker | AbuseIPDB | 2025-01-24 05:04:46 | 2026-08-14 00:36:39 | iot malicious-activity | |
| SQL Injection | AbuseIPDB | 2024-08-04 13:44:37 | 2026-07-16 10:13:30 | attacker malicious-activity | |
| SIP Attacker | AbuseIPDB | 2024-12-08 13:36:51 | 2026-07-04 10:52:13 | attacker malicious-activity | |
| Proxy | AbuseIPDB | 2026-04-22 07:25:05 | 2026-04-22 07:25:05 | anonymization | |
| DNS Compromise | AbuseIPDB | 2024-10-04 03:00:08 | 2026-04-16 12:05:00 | compromised | |
| DDoS attack | AbuseIPDB | 2024-06-20 00:16:15 | 2025-04-30 15:13:59 | malicious-activity | |
| DNS Poisoning | AbuseIPDB | 2024-07-20 18:45:07 | 2025-01-26 00:03:48 | compromised | |
| Unauthorized scanning of hosts | Blocklist.net.ua | 2022-09-13 03:51:40 | 2024-12-22 20:41:33 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2021-11-27 00:38:50 | 2024-08-24 09:02:24 | malicious-activity |
Tags
abuse apache ddos rfi attackerWhois information
- AS name
- AS211298 Driftnet Ltd
- AS registry
- ripencc
- AS date
- 2021-05-05 00:00:00
- AS CIDR
- 193.163.125.0/24
- Registrant
- Driftnet Ltd
- City
- Leeds
- Postal code
- LS1 6AL
- Country
- GB — United Kingdom 🇬🇧
- First indexed
- 2021-07-04 02:52:05
- Last updated
- 2026-09-02 22:00:16
Malicious IPs in the same CIDR
193.163.125.137 193.163.125.139 193.163.125.75 193.163.125.159 193.163.125.100 193.163.125.228 193.163.125.74 193.163.125.95 193.163.125.253 193.163.125.125 193.163.125.254 193.163.125.189 193.163.125.219 193.163.125.198 193.163.125.165 193.163.125.195 193.163.125.245 193.163.125.238 193.163.125.164 193.163.125.129 193.163.125.43 193.163.125.155 193.163.125.128 193.163.125.114 193.163.125.120