92.42.202.59

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
68% Elevated
52 reports
12 reporters · latest 2 hours ago
ISP
Noavaran System Sarv Co.Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS198926
Domain Name
githubusercontent.com
Country
🇳🇱 Netherlands
City
Heerlen, Limburg
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
52 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 33 🇦🇺 Australia 4 🇫🇷 France 4
Most common categories Port Scan 46 SSH 12 Brute-Force 6 Hacking 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) de 92.42.202.59 [TCP]
Port Scan
Anonymous
UFW blocked 4 unsolicited TCP packet(s) in last 65 minutes ago. Destination port(s): 22. Server has no public-facing services; all blocks are uninvited.
Brute-Force SSH
Anonymous
UFW blocked 5 unsolicited TCP packet(s) in last 65 minutes ago. Destination port(s): 22. Server has no public-facing services; all blocks are uninvited.
Brute-Force SSH
Anonymous
UFW blocked 3 unsolicited TCP packet(s) in last 65 minutes ago. Destination port(s): 22. Server has no public-facing services; all blocks are uninvited.
Brute-Force SSH
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-libssh-0.2
SSH Port Scan
🇨🇦 Sakusen
SSH (TCP/22): 66 connections
Port Scan
🇦🇺 LiftUp Hosting
Honeypot hit: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-libssh-0.2
SSH Port Scan
🇩🇰 jodk
SSH brute-force + malware deployment (Redtail miner). 40 hits on honeypot. Uploaded clean.sh, setup.sh, redtail binaries. Injected SSH backdoor key.
Brute-Force SSH
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) de 92.42.202.59 [TCP]
Port Scan
🇩🇪 Da_tschek
Port scanning
Port Scan Hacking
🇪🇸 raiolanetworks.com
Honeypot detection: SSH/Telnet brute-force. 13 events observed. Reported automatically from a honeypot sensor.
Brute-Force SSH
🇨🇦 Sakusen
SSH (TCP/22): 3 connections
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-libssh-0.2
SSH Port Scan
🇦🇺 LiftUp Hosting
Honeypot hit: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-libssh-0.2
SSH Port Scan
🇵🇰 sbk97 (https://sayor.net)
SAYOR honeypot: observed attack /admin/config.php
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 180.167.207.234
🇧🇷 179.49.192.203
🇫🇮 147.185.133.13
🇺🇸 137.184.106.205
🇫🇮 147.185.133.106
🇭🇰 118.193.45.134
🇺🇦 91.234.136.251
🇩🇪 88.218.45.183
🇺🇸 68.111.181.47
🇮🇳 49.206.201.253
🇳🇱 45.148.10.5
🇬🇧 5.252.83.88
🇺🇸 216.25.90.52
🇳🇱 192.253.248.222
🇦🇷 181.44.1.223
🇧🇷 179.190.115.143
feedback