93.123.118.148

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
451 reports
34 reporters · latest 10 hours ago
ISP
Neterra Ltd.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS209630
Domain Name
neterra.net
Country
🇳🇱 Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
451 from 34 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 189 🇦🇺 Australia 126 🇫🇷 France 41
Most common categories Brute-Force 436 Web App Attack 180 Hacking 93 Port Scan 41 VPN IP 21
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Ad Ministrator
RdpGuard detected brute-force attempt on RD-WEB
Brute-Force
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇷🇴 StarTech Team
Bruteforce Attempt
Brute-Force
🇨🇦 [email protected]
Brute-Force
🇩🇪 CELOS-SOC
Multiple Unauthorized VPN Login Attempts
Hacking Brute-Force
🇫🇷 edoram
SSL-VPN brute-force + firewall probe detected. 485 attempts in 24h, 140 unique usernames tried.
Port Scan Brute-Force Web App Attack
🇩🇪 EnthecSolutions
Detected by Enthec Solutions. | Attempts: 905 in 24h | Target port: N/A
Brute-Force Hacking
🇩🇪 NxtGenIT
CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html?fcadbadd=1 HTTP/1.1" 200 -,
Brute-Force
🇩🇪 NxtGenIT
CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html HTTP/1.1" 302 -,
Brute-Force
🇩🇪 NxtGenIT
CiscoASA Honeypot hit, Payload: "POST /+webvpn+/index.html HTTP/1.1" 200 -,
Brute-Force
🇩🇪 NxtGenIT
CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html?tgroup=SSLClientProfile HTTP/1.1" 200 -,
Brute-Force
🇷🇴 StarTech Team
Bruteforce Attempt
Brute-Force
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇦🇺 actrix
Sophos XGS VPN portal credential stuffing: 31 failed authentication attempts across 31 distinct usernames since 2026-11-11. Automated distributed attack.
Brute-Force Web App Attack
🇦🇺 actrix
Sophos XGS VPN portal credential stuffing: 201 failed authentication attempts across 172 distinct usernames since 2026-11-11. Automated distributed attack.
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇴 185.12.59.118
🇩🇪 165.154.138.33
🇩🇪 212.132.111.47
🇺🇸 199.101.196.138
🇧🇷 187.120.24.95
🇨🇳 111.206.174.2
🇫🇷 91.196.152.142
🇫🇷 91.196.152.139
🇧🇬 78.128.114.174
🇵🇰 72.255.15.14
🇨🇳 27.207.17.128
🇺🇸 23.227.147.163
🇰🇷 210.206.95.162
🇺🇸 188.213.202.133
🇧🇷 186.239.41.74
🇩🇴 148.0.255.164
🇫🇮 147.185.133.245
🇸🇬 147.90.170.63
🇺🇸 143.20.227.171
🇺🇸 138.197.15.182
feedback