AbuseIPDB » 92.63.197.70

Enter an IP Address, Domain Name, or Subnet:

e.g. 3.236.74.69, microsoft.com, or 5.188.10.0/24

92.63.197.70 was found in our database!

This IP was reported 1755 times. Confidence of Abuse is 100%: ?

100%

ISP	OOO Patent-Media
Usage Type	Data Center/Web Hosting/Transit
Domain Name	mgnhost.com
Country	Ukraine
City	Kharkiv, Kharkivska oblast

Spot an error? IP info including ISP, Usage Type, and Location provided by IP2Location.

Report 92.63.197.70

Whois 92.63.197.70

IP Abuse Reports for 92.63.197.70:

This IP address has been reported a total of 1755 times from 63 distinct sources. 92.63.197.70 was first reported on May 23rd 2020, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
JPPO	1 hour ago	Multiport scan : 5 ports scanned 3378 3381 3382 3387 3389(x2)	Port Scan
fred	10 hours ago	scans 6 times in preceeding hours on the ports (in chronological order) 3381 3384 3386 3379 3389 338 ... show morescans 6 times in preceeding hours on the ports (in chronological order) 3381 3384 3386 3379 3389 3389 resulting in total of 26 scans from 92.63.192.0/20 block. show less	Port Scan
Ukn0w1t	13 hours ago	ET CINS Active Threat Intelligence Poor Reputation IP group 84 - port: 3389 proto: tcp cat: Misc Att ... show moreET CINS Active Threat Intelligence Poor Reputation IP group 84 - port: 3389 proto: tcp cat: Misc Attackbytes: 60 show less	Port Scan
geot	13 hours ago	TCP port : 3387	Port Scan
kamsalisbury	13 hours ago	SmallBizIT.US 2 packets to tcp(3389)	Brute-Force
andrew.stream	15 hours ago	[portscan] tcp/3389 [MS RDP] [scan/connect: 2 time(s)] *(RWIN=1024)(07141104)	Port Scan Hacking Brute-Force Exploited Host
ChillScanner	15 hours ago	<RDP> TCP (SYN) 92.63.197.70:48932 -> port 3389, len 40	Port Scan Brute-Force
ChillScanner	16 hours ago	<RDP> TCP (SYN) 92.63.197.70:48932 -> port 3389, len 44	Port Scan Brute-Force
kiwi.network	16 hours ago	Port scan: Attack repeated for 24 hours	Port Scan Hacking Exploited Host
mertcangokgoz	17 hours ago	Jul 14 08:49:31 debian-2gb-nbg1-2 kernel: \[16967941.696189\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:0 ... show moreJul 14 08:49:31 debian-2gb-nbg1-2 kernel: \[16967941.696189\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.63.197.70 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=62028 PROTO=TCP SPT=48932 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
ChillScanner	18 hours ago	<RDP> TCP (SYN) 92.63.197.70:40113 -> port 3389, len 44	Port Scan Brute-Force
Honza	19 hours ago	2020-07-13 09:54:29 Reject access to port(s):3389 2 times a day	Port Scan Hacking
Ukn0w1t	19 hours ago	ET CINS Active Threat Intelligence Poor Reputation IP group 78 - port: 3377 proto: tcp cat: Misc Att ... show moreET CINS Active Threat Intelligence Poor Reputation IP group 78 - port: 3377 proto: tcp cat: Misc Attackbytes: 60 show less	Port Scan
mertcangokgoz	19 hours ago	Jul 14 06:41:36 debian-2gb-nbg1-2 kernel: \[16960267.165731\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:0 ... show moreJul 14 06:41:36 debian-2gb-nbg1-2 kernel: \[16960267.165731\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.63.197.70 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=47976 PROTO=TCP SPT=40113 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
iNetWorker	19 hours ago	firewall-block, port(s): 3379/tcp, 3385/tcp, 3386/tcp, 3389/tcp	Port Scan