179.63.55.124

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
52 reports
36 reporters · latest 7 minutes ago
ISP
LEIRIA HUGO LEANDRO (GEO FIBER)
Usage Type
Fixed Line ISP
ASN
AS271922
Domain Name
geofiber.com.ar
Country
🇦🇷 Argentina
City
San Juan, San Juan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
52 from 36 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 13 🇩🇪 Germany 7 🇦🇹 Austria 6
Most common categories Port Scan 22 Hacking 20 Web App Attack 13 SSH 13 Brute-Force 10
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) de 179.63.55.124 [TCP]
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-12 UTC.
Hacking
🇩🇪 IVski.com
IVski WAF | WordPress login probe - accessing wp-login.php
Hacking Brute-Force Web App Attack
🇩🇪 LRob
Web exploit attempt | method: POST, GET | path: /wp-login.php | ua: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Mobile Safari/537.36
Hacking Web App Attack
🇮🇹 CoreTech srl
Web App Attack
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇩🇪 Vegascosmetics
Kingcopy.org AI-IDS (Vegas Cosmetics shop): Abuse 100 / BAN. IP is on the AbuseIPDB blacklist and was blocked on the first request.
Hacking Exploited Host Web App Attack
🇵🇱 pshost.pl
2026-11-07T17:37:01.351Z, an unauthorized SSH access attempt was detected from source IP address 179.63.55.124 by our NetFlow-based intrusion detection.
Port Scan Brute-Force SSH
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) de 179.63.55.124 [TCP]
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇺🇸 computertrendz
Blocked by os-abuseipdb; 5 hits, proto=udp, ports=443
Port Scan Hacking
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇬🇧 tpguy825
SSH bruteforce from 179.63.55.124 port 50948, stuck in tarpit for 20.009 secs
Hacking Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 216.226.76.30
🇧🇩 103.144.201.227
🇵🇱 45.138.12.179
🇩🇪 43.157.56.17
🇺🇿 213.230.127.104
🇺🇸 209.141.48.135
🇬🇧 209.97.180.8
🇧🇪 198.235.24.209
🇺🇦 195.177.238.100
🇺🇦 178.150.1.21
🇧🇷 177.10.160.46
🇩🇪 172.70.243.26
🇸🇦 172.70.158.150
🇳🇱 160.119.71.115
🇩🇪 157.230.19.140
🇮🇩 157.66.54.166
🇧🇷 104.234.84.68
🇲🇽 104.28.199.135
🇨🇬 102.129.82.191
🇺🇸 100.31.190.94
feedback