62.245.48.172
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Ekaset broadband
- Usage Type
- Fixed Line ISP
- ASN
- AS5563
- Hostname(s)
- 172.48-245-62.ftth.rus-com.net
- Domain Name
- ural.net
- Country
- 🇷🇺 Russian Federation
- City
- Yekaterinburg, Sverdlovsk Oblast
Abuse Reports
Total reports
19 from
13 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇹🇼 tyebstx |
Wazuh Alert Evidence: Nov 09 03:39:53 ms1.bitstreetx.info postfix/smtpd[1991207]: warning: hostname 172.48-245-62.FTTH.rus-com.net does not resolve to address 62.245.48.172: Name or service not known
|
Hacking | |
| 🇹🇼 tyetriiix |
Wazuh Alert Evidence: Nov 08 10:28:00 ms1.triiix.info postfix/submission/smtpd[1429377]: warning: hostname 172.48-245-62.FTTH.rus-com.net does not resolve to address 62.245.48.172: Name or service not known
|
Hacking | |
| 🇫🇷 Stara |
Distributed smtpauth, imapd and ftp login attacks or more than 2 temp blocks in the last 259200 secs
|
Brute-Force DDoS Attack | |
| 🇫🇷 Stara |
Distributed smtpauth, imapd and ftp login attacks or more than 2 temp blocks in the last 259200 secs
|
Brute-Force DDoS Attack | |
| 🇩🇪 GunsawianHosting |
Open public proxy/relay
|
Open Proxy VPN IP Exploited Host | |
| 🇺🇸 AEITS |
Fail2Ban eMail
|
Port Scan | |
| 🇩🇪 Packets-Decreaser.NET |
Incoming Layer 7 Flood Detected
|
DDoS Attack Web App Attack | |
| 🇩🇪 NewGastroline |
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
|
Bad Web Bot Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-20.
|
Web App Attack SSH Hacking | |
| 🇩🇪 Packets-Decreaser.NET |
Incoming Layer 7 Flood Detected
|
DDoS Attack Web App Attack | |
| 🇩🇪 ITcloud |
Automated credential attack against a legacy web authentication flow: 1716 matching requests observed between 2026-10-17T14:47:45+00:00 and 2026-10-18T18:37:49+00:00 UTC.
|
Brute-Force Web App Attack | |
| 🇩🇪 Packets-Decreaser.NET |
Incoming Layer 7 Flood Detected
|
DDoS Attack Web Spam | |
| 🇩🇪 edgeshield |
Automated web request flooding / DDoS (EdgeShield WAF).
|
DDoS Attack | |
| Anonymous |
|
DDoS Attack | |
| 🇩🇪 edgeshield |
Automated web request flooding / DDoS (EdgeShield WAF).
|
DDoS Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown