92.239.120.34

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
71 reports
45 reporters · latest 3 hours ago
ISP
Virgin Media Limited
Usage Type
Fixed Line ISP
ASN
AS5089
Hostname(s)
seve-25-b2-v4wan-169806-cust2081.vm13.cable.virginm.net
Domain Name
virginmedia.com
Country
🇬🇧 United Kingdom of Great Britain and Northern Ireland
City
Newbury Park, England
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
71 from 45 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 19 🇩🇪 Germany 11 🇫🇷 France 10
Most common categories Port Scan 51 Hacking 20 SSH 20 Brute-Force 16 Bad Web Bot 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 ISPLtd
Nov 14 06:10:52 92.239.120.34 TCP SPT=48084 DPT=22 SYN Nov 14 06:16:06 92.239.120.34 TCP SPT=42576 DPT=22 SYN ...
Port Scan SSH
🇺🇸 sumnone
Port probing on unauthorized port 23
Port Scan Hacking Exploited Host
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇺🇸 MPL
tcp ports: 23,22 (12 or more attempts)
Port Scan
Anonymous
Network service scanning detected by FortiGate; source quarantined.
Port Scan
🇺🇸 avgsmoe
Connection to a honeypot port. Automated report (firemon).
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇵🇱 sefinek.net
Honeypot hit: Unauthorized connection attempt detected on 22/SSH Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
SSH Port Scan
🇺🇸 MPL
tcp ports: 22,23 (8 or more attempts)
Port Scan
🇺🇸 cwytech
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
Hacking
🇺🇸 ISPLtd
Nov 11 20:39:59 92.239.120.34 TCP SPT=40472 DPT=22 SYN Nov 11 20:40:00 92.239.120.34 TCP SPT=40472 DPT=22 SYN ...
Port Scan SSH
🇺🇸 Phil Schuyler
Repeated probing against public honeypot services: 2 observed events targeting TCP/23.
Port Scan
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Events: 1 | rDNS: seve-25-b2-v4wan-169806-cust2081.vm13.cable.virginm.net | F2B/telnet-honeypot-scan@2026-11-11T19:27:51Z
Port Scan Hacking
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 35.195.41.101
🇧🇷 200.223.163.83
🇷🇺 178.178.222.55
🇺🇸 98.114.40.151
🇯🇵 43.167.245.18
🇩🇪 37.35.50.111
🇷🇺 5.128.192.107
🇸🇬 194.5.82.117
🇸🇬 193.37.32.21
🇲🇾 180.72.80.125
🇨🇳 106.13.30.117
🇧🇩 103.173.2.227
🇫🇷 91.231.89.47
🇺🇸 89.19.34.150
🇳🇱 45.148.10.152
🇩🇪 45.67.101.74
🇬🇧 35.203.211.33
🇮🇹 31.189.248.49
🇨🇳 14.103.117.86
🇨🇳 223.13.120.51
feedback