Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
139.135.43.81 has a threat confidence score of 51%. This IP address from Pakistan (AS9541, Cyber Internet Services Pvt Ltd.) has been observed in 3 honeypot sessions targeting HTTP, HTTPS protocols. Detected attack patterns include http gpon mozi botnet rce chain. First observed on March 10, 2026, most recently active March 23, 2026.
Observed exploitation chain targeting /GponForm/diag_Form diagnostic endpoint, abusing diag_action=ping for command injection to download Mozi.m malware via wget, accompanied by images/ query artifact. Indicative of automated GPON router exploitation for Mozi botnet deployment.