JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

97.124.92.28

Neutral Activity

Abuse Confidence Score

0% Low Risk

30 reports

21 reporters · latest 4 years ago

ISP: CenturyLink Communications, LLC
Usage Type: Fixed Line ISP
ASN: AS209
Hostname(s): 97-124-92-28.phnx.qwest.net
Domain Name: centurylink.com
Country: 🇺🇸 United States of America
City: Phoenix, Arizona

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

97.124.92.28 has been reported 30 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

30 from 21 distinct reporters

First reported

October 18th 2021

Most recent report

4 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 23p02732	2021-11-27 20:52:53 UTC · (4 years ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇩🇪 it-ngo.com	2021-11-27 04:54:04 UTC · (4 years ago)	SMTP login attempts.	Hacking Brute-Force
🇩🇪 dwmp	2021-11-25 03:16:24 UTC · (4 years ago)	2021-11-25T09:15:58.563635mail1 auth[20044]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=97.124.92.28 2021-11-25T09:16:08.577856mail1 auth[20044]: pam_unix(dovecot:auth): authentic ... show more 2021-11-25T09:15:58.563635mail1 auth[20044]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=97.124.92.28 2021-11-25T09:16:08.577856mail1 auth[20044]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=97.124.92.28 2021-11-25T09:16:22.599591mail1 auth[20551]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=97.124.92.28 ... show less	Brute-Force
🇩🇪 it-ngo.com	2021-11-24 23:48:09 UTC · (4 years ago)	SMTP login attempts.	Hacking Brute-Force
🇹🇷 GHS	2021-11-24 18:01:20 UTC · (4 years ago)	Unauthorized connection attempt from 97.124.92.28 on port 143	Port Scan Hacking
🇳🇱 computerdoc	2021-11-24 15:50:35 UTC · (4 years ago)	failed_logins	Brute-Force
🇪🇪 reigo	2021-11-23 08:15:49 UTC · (4 years ago)	SSH invalid-user multiple login try	Brute-Force SSH
🇵🇹 Tomas Oliveira	2021-11-21 06:54:26 UTC · (4 years ago)	Nov 21 11:54:25 ubserver sshd[59205]: Connection closed by authenticating user root 97.124.92.28 port 34426 [preauth] ...	Brute-Force SSH
🇩🇪 Ba-Yu	2021-11-21 05:34:05 UTC · (4 years ago)	Unauthorized dovecot login attempt	Brute-Force Exploited Host
🇩🇪 it-ngo.com	2021-11-20 06:51:51 UTC · (4 years ago)	SMTP login attempts.	Hacking Brute-Force
🇮🇹 codabar	2021-11-17 08:01:36 UTC · (4 years ago)	SMTP login attempts.	Brute-Force
Anonymous	2021-11-12 04:15:07 UTC · (4 years ago)	Nov 12 01:15:02 propaganda sshd[11335]: Connection from 97.124.92.28 port 42930 on 10.0.0.161 port 22 rdomain "" Nov 12 01:15:04 propaganda sshd[11335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=97.124.92 ... show more Nov 12 01:15:02 propaganda sshd[11335]: Connection from 97.124.92.28 port 42930 on 10.0.0.161 port 22 rdomain "" Nov 12 01:15:04 propaganda sshd[11335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=97.124.92.28 user=root Nov 12 01:15:06 propaganda sshd[11335]: Failed password for root from 97.124.92.28 port 42930 ssh2 show less	Brute-Force SSH
Anonymous	2021-11-05 07:30:55 UTC · (5 years ago)	(imapd) Failed IMAP login from 97.124.92.28 (US/United States/97-124-92-28.phnx.qwest.net): 5 in the last 3600 secs	Brute-Force
🇩🇪 bsoft.de	2021-10-26 05:41:57 UTC · (5 years ago)	2021-10-26T11:41:36.517267MailD imap[29445]: badlogin: 97-124-92-28.phnx.qwest.net [97.124.92.28] PLAIN [SASL(-13): authentication failure: Password verification failed] 2021-10-26T11:41:44.390806MailD imap[29445]: badlogin: 97-124-92-28.phnx.qwest.n ... show more 2021-10-26T11:41:36.517267MailD imap[29445]: badlogin: 97-124-92-28.phnx.qwest.net [97.124.92.28] PLAIN [SASL(-13): authentication failure: Password verification failed] 2021-10-26T11:41:44.390806MailD imap[29445]: badlogin: 97-124-92-28.phnx.qwest.net [97.124.92.28] PLAIN [SASL(-13): authentication failure: Password verification failed] 2021-10-26T11:41:56.116590MailD imap[29445]: badlogin: 97-124-92-28.phnx.qwest.net [97.124.92.28] PLAIN [SASL(-13): authentication failure: Password verification failed] show less	Hacking Brute-Force
🇮🇳 A B	2021-10-18 14:01:37 UTC · (5 years ago)	none	FTP Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 125.23.204.74

🇨🇳 118.113.40.21

🇧🇩 103.129.238.214

🇳🇱 77.239.124.144

🇺🇸 66.132.172.180

🇩🇪 57.144.249.168

🇨🇴 181.224.162.17

🇩🇪 172.71.172.222

🇺🇸 162.216.18.241

🇨🇳 123.129.205.22

🇺🇸 100.58.91.158

🇧🇬 91.191.209.98

🇫🇷 82.64.198.56

🇩🇪 51.102.108.215

🇸🇬 47.79.201.236

🇳🇱 45.148.10.152

🇷🇺 45.91.64.10

🇳🇱 172.71.102.119

🇳🇱 141.101.76.51

🇧🇷 138.36.46.75