92.62.121.70

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
72% Elevated
314 reports
90 reporters · latest 3 days ago
ISP
Cyberzon S.A (India)
Usage Type
Data Center/Web Hosting/Transit
ASN
AS209854
Domain Name
cyberzonehub.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
314 from 90 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 85 🇫🇷 France 7 🇨🇭 Switzerland 3
Most common categories Brute-Force 85 Hacking 65 Port Scan 18 SSH 2 Web Spam 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 edoram
SSH brute-force from honeypot. 1944 attempts in 24h, 0 unique usernames tried.
Brute-Force SSH
🇫🇷 uthul
T-Pot honeypot: 9013 hits on ports [3389] (automated)
Port Scan Brute-Force
🇫🇷 AmStaff
Honeypot: 2446 connection attempts (port scan). Targeted ports: RDP.
Port Scan
🇫🇷 uthul
T-Pot honeypot: 13034 hits on ports [3389] (automated)
Port Scan Brute-Force
🇫🇷 edoram
SSH brute-force from honeypot. 174 attempts in 24h, 0 unique usernames tried.
Brute-Force SSH
🇫🇷 uthul
T-Pot honeypot: 1431 hits on ports [3389] (automated)
Port Scan Brute-Force
🇫🇷 AmStaff
Honeypot: 66 connection attempts (port scan). Targeted ports: RDP.
Port Scan
🇩🇪 BULLSEYE
Automated security detection: RDP brute-force activity blocked by IPBan. Source: IPBan/RDP. Events=2, observations=26. Correlated sources: Firewall/WindowsFirewall, IPBan/RDP.
Port Scan Brute-Force
🇩🇪 Luhte
Unsolicited TCP connection from 92.62.121.70 to port 0 at 2026-11-10T04:17:20Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
Port Scan Hacking
🇨🇭 TOCE
1342 hits seen on 2026-10-28, ports 3389 (RDP) on a honeypot from www.toce.ch
Brute-Force
🇺🇸 Cotty
Automated sensor: 79 RDP brute-force attempts from this IP during the current reporting window (latest 2026-10-28T13:27Z). Usernames tried: 2.
Brute-Force
🇺🇸 knock
Knock-Knock honeypot brute-force: RDP (247 total hits)
Brute-Force
🇺🇸 drewf.ink
[13:22] Connected to RDP honeypot (routing cookie identified client as mstshash='hello')
Brute-Force Hacking
🇺🇸 drewf.ink
[13:18] Connected to RDP honeypot (routing cookie identified client as mstshash='hello')
Brute-Force Hacking
🇺🇸 drewf.ink
[12:49] Connected to RDP honeypot (routing cookie identified client as mstshash='hello')
Brute-Force Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 146.70.168.121
🇩🇪 95.88.108.88
🇺🇦 5.58.9.71
🇦🇿 216.147.123.216
🇲🇽 149.232.137.188
🇨🇳 120.15.69.133
🇳🇱 109.160.32.141
🇷🇺 91.79.191.206
🇫🇷 88.170.200.130
🇺🇸 45.45.237.39
🇷🇴 2.57.121.112
🇲🇽 82.153.139.33
🇫🇷 51.38.237.146
🇦🇲 46.36.123.134
🇳🇱 5.255.123.164
🇮🇩 165.154.151.207
🇩🇪 150.241.96.46
🇫🇷 91.231.89.179
🇳🇱 45.148.10.157
🇺🇸 45.8.19.62
feedback