2.63.98.97

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
3% Caution
23 reports
19 reporters · latest 1 week ago
ISP
OJSC Sibirtelecom
Usage Type
Fixed Line ISP
ASN
AS12389
Domain Name
sibirtelecom.ru
Country
🇷🇺 Russian Federation
City
Krasnoyarsk, Krasnoyarsk Krai
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
23 from 19 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇷🇺 Russian Federation 1
Most common categories Hacking 1 Bad Web Bot 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Hacking Bad Web Bot
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet, 22/SSH | Proto: TCP(2) | Flags: all SYN | TTL: 52 | Len: 60B(2x) | Win: 65535(2) | F2B/ufw-honeypot@2026-08-13T08:32:49Z
Port Scan Hacking
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=54562 dstport=23
Port Scan
🇵🇱 pshost.pl
2026-08-13T05:00:23.265Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 2.63.98.97.
Port Scan Brute-Force SSH
🇺🇸 RAP
2026-08-12 12:24:28 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 drewf.ink
[17:26] Attempted telnet login with credentials root:C******1
Brute-Force Exploited Host
🇫🇷 thecocasio
PortSentry honeypot: unsolicited TCP connection to closed decoy port 23 (Telnet) on a host running no such service. Automated port-scan detection at 2026-08-11T11:07:21Z.
Port Scan
🇺🇸 rjdefrancisco
Unwanted traffic detected by honeypot on August 10, 2026: port scans (1 port 23 scan).
Port Scan Brute-Force SSH
🇹🇷 SeczarSecureOps
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (5 events in 5min) at 2026-08-11 02:27
Web App Attack
🇺🇸 LockBlock
2026-08-09 18:27:20: Port scan detected from 2.63.98.97 on port 22 of racknerd-e7e1a9
Port Scan SSH
🇮🇳 Parth Maniar
This IP address carried out 2 port scanning attempts on 08-08-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Port Scan SSH
🇺🇸 RAP
2026-08-09 13:57:31 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:35202 dst:23
Port Scan
🇫🇷 jonahtebaa
SSH tarpit capture
Port Scan Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 46.72.58.7
🇵🇭 203.160.174.34
🇲🇽 200.77.172.159
🇩🇪 193.124.20.230
🇺🇸 191.102.163.84
🇸🇬 168.107.73.222
🇮🇩 163.227.253.166
🇮🇹 93.66.98.34
🇸🇰 92.180.231.142
🇦🇹 68.210.120.110
🇮🇳 66.116.253.148
🇮🇳 66.116.251.45
🇮🇳 66.116.235.14
🇺🇸 40.119.45.117
🇬🇧 35.203.210.188
🇨🇳 27.43.204.8
🇮🇹 213.45.111.191
🇲🇽 189.167.227.82
🇵🇱 162.158.103.169
🇺🇸 91.242.127.221
feedback