AbuseIPDB » 15.235.148.66

15.235.148.66 was found in our database!

This IP was reported 55 times. Confidence of Abuse is 100%: ?

100%
ISP LTD, MassiveGRID
Usage Type Data Center/Web Hosting/Transit
ASN AS16276
Hostname(s) ip66.ip-15-235-148.net
Domain Name massivegrid.com
Country ๐Ÿ‡ธ๐Ÿ‡ฌ Singapore
City Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 15.235.148.66:

This IP address has been reported a total of 55 times from 27 distinct sources. 15.235.148.66 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡จ๐Ÿ‡ฆ alexbfr
Fail2Ban report from custom-honeypot; automated RDP honeypot detection.
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ IndigoRidge
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ IndigoRidge
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ IndigoRidge
Knock-Knock RDP honeypot activity; time=2026-09-18 19:58:03; username=<target-ip>
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ Cotty
Brute-Force
๐Ÿ‡จ๐Ÿ‡ฆ Sakusen
RDP (TCP/3389): 56 connections
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ Cotty
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[08:34] RDP NLA authentication attempt as Administrator (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[08:02] RDP NLA authentication attempt as Administrator (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[07:17] RDP NLA authentication attempt as Administrator (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[06:43] RDP NLA authentication attempt as Administrator (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking
๐Ÿ‡บ๐Ÿ‡ธ sargetun
Honeypot: RDP probe on port 3389 at 2026-09-18 06:29:48.008105. Automated report from VPS honeypot.
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ Cotty
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[06:12] RDP NLA authentication attempt as Administrator (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[05:06] RDP NLA authentication attempt as Administrator (NTLMv2 captured, workstation='workstation')
Brute-Force Hacking

Showing 1 to 15 of 55 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 159.223.132.86
๐Ÿ‡ฎ๐Ÿ‡ณ 157.15.93.196
๐Ÿ‡จ๐Ÿ‡ณ 106.75.224.165
๐Ÿ‡ช๐Ÿ‡ฌ 105.198.238.186
๐Ÿ‡ท๐Ÿ‡บ 92.126.250.36
๐Ÿ‡ท๐Ÿ‡บ 77.51.166.213
๐Ÿ‡บ๐Ÿ‡ธ 66.132.186.254
๐Ÿ‡บ๐Ÿ‡ธ 66.132.186.253
๐Ÿ‡บ๐Ÿ‡ธ 66.132.186.252
๐Ÿ‡บ๐Ÿ‡ธ 66.132.186.251
๐Ÿ‡บ๐Ÿ‡ธ 66.132.186.250
๐Ÿ‡ณ๐Ÿ‡ฑ 45.153.34.32
๐Ÿ‡บ๐Ÿ‡ธ 23.26.135.98
๐Ÿ‡ง๐Ÿ‡ฌ 194.50.122.50
๐Ÿ‡บ๐Ÿ‡ธ 143.42.173.101
๐Ÿ‡ฎ๐Ÿ‡ฉ 143.14.13.10
๐Ÿ‡ฑ๐Ÿ‡น 141.98.10.86
๐Ÿ‡ง๐Ÿ‡ฌ 109.160.32.31
๐Ÿ‡จ๐Ÿ‡ณ 106.55.250.126
๐Ÿ‡ท๐Ÿ‡ด 92.118.39.77