[IPDB-AR-001876] Abuse report: 1 IP address on AS58955 Bangmod Enterprise Co., Ltd.

Dear Serverly Abuse Team, Thank you for your reply regarding IPDB-AR-001876. We would like to clarify how this listing is produced. IP-DB does not monitor your network or traffic. We aggregate public abuse and threat-intelligence blocklists, and the "last seen" date in our notice is the most recent time an upstream source still carried the address. It is not a date we set or estimate ourselves. For 92.63.180.96 the source is abuse.ch ThreatFox, and its record still shows the address as active: Source abuse.ch ThreatFox (Botnet C2 feed) ThreatFox IOC #1881411 - https://threatfox.abuse.ch/ioc/1881411/ Indicator 92.63.180.96:7443 (ip:port) Threat type Botnet command-and-control server (tags: Mythic, drb-ra) Confidence 75% First seen 2026-08-18 19:46 UTC (ThreatFox) Last seen 2026-09-24 11:47 UTC (ThreatFox) Listed on IP-DB 2026-08-30 12:48 UTC; score 90/100 Other lists none of the other public lists we aggregate carry this address at present ThreatFox recorded the command-and-control endpoint on port 7443 as recently as today, nine days after the termination date you mention. If the original service was terminated on 15 September, the address may have been reassigned to another customer, or the endpoint may still be reachable through a different service. We would recommend checking what is currently answering on 92.63.180.96:7443. The address is part of 92.63.180.0/24 (HK-SERVERLY-20230606, AS58955), for which your mailbox is registered in the RIPE database as the abuse contact. Whether to investigate further is entirely your decision. Please note, however, that as long as the upstream sources continue to list this address, it will remain in our records, and your network and this IP address will continue to be shown publicly on ip-db.com, together with this correspondence. Listings are removed automatically once the source delists an address. If the host is clean, the quickest route is to request removal from ThreatFox directly, through the IOC page above or at threatfox@abuse.ch, citing IOC #1881411. Our record updates within hours of their delisting. Public record of this case: https://ip-db.com/en/reported/IPDB-AR-001876 IP profile: https://ip-db.com/en/ip/92.63.180.96 Kind regards, IP-DB Abuse Desk abuse@ip-db.com | https://ip-db.com