162.4.147.30

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
186 reports
99 reporters · latest 3 hours ago
ISP
SERVERSTEP
Usage Type
Data Center/Web Hosting/Transit
ASN
AS153786
Domain Name
serverstep.org
Country
🇮🇳 India
City
Ghaziabad, Uttar Pradesh
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
186 from 99 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 51 🇩🇪 Germany 39 🇫🇷 France 27
Most common categories Port Scan 171 Hacking 50 Brute-Force 48 Web App Attack 7 SSH 6
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇹 joe-abuse
Honeypot: 1 unsolicited connection attempt(s) to ports where no service is offered (3389/tcp); first 2026-11-06 09:08:03 UTC, last 2026-11-06 09:08:03 UTC. Reported by ipdb-security/fitzgerald.eu
Port Scan
🇫🇷 Entalpi.net
Tried to hit sensible closed port commonly used in attacks
Port Scan Hacking
🇫🇮 6kilowatti
Port Scan
Anonymous
Port Scan Brute-Force
🇩🇪 IP Analyzer
Unauthorized connection attempt from IP address 162.4.147.30 on Port 3389(RDP)
Port Scan
🇦🇺 HostFission
PSAD port scan detected
Port Scan
🇱🇹 NotACaptcha
2026-11-06T09:49:10.887291+02:00 3d3l kernel: banned.IN=venet0 OUT= MAC= SRC=162.4.147.30 LEN=40 TTL=239 ID=4888 TCP DPT=3389 WINDOW=1024 SYN
Port Scan
🇷🇴 abuse_IP_reporter
Nov 6 09:17:13 server UFW BLOCK SRC=162.4.147.30 PROTO=TCP SPT=45255 DPT=3389
Port Scan
🇧🇷 chronos
RDP: Connection attempt to the remote desktop service. | Port: 3389 | Proto: TCP | AS: AS153786 SERVERSTEP | Location: India
Port Scan
🇺🇸 MPL
tcp/3389 (2 or more attempts)
Port Scan
🇨🇦 Arpan Sen
Network port/address scan: probed 1 distinct port(s) across 37 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
Port Scan
Anonymous
unsolicited connect TCP dport 3389 (sport 45255)
Hacking
🇺🇸 mibbsdevs
(ric-sv) CoffeePot: Connection attempt detected on closed service bait ports (22/23/3306/3389/5432).
Port Scan
🇭🇰 鹏鹏
monitor: on ser162528253480 | port: 3389 | ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 Admins@Storch
IPS:drop <match> dstport=3389
Brute-Force Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 208.70.8.31
🇦🇷 190.185.228.11
🇨🇳 122.51.134.68
🇺🇸 107.175.208.190
🇲🇦 105.159.180.176
🇮🇹 104.239.23.12
🇿🇦 102.64.34.105
🇧🇬 85.187.163.187
🇯🇲 63.143.93.125
🇮🇩 43.230.5.42
🇧🇪 35.189.220.200
🇰🇷 14.138.74.15
🇮🇶 217.142.31.168
🇩🇪 194.39.34.192
🇺🇸 192.177.149.230
🇺🇸 185.226.198.6
🇭🇰 118.26.39.227
🇷🇺 109.252.125.57
🇺🇸 104.236.142.88
🇨🇦 104.233.20.149
feedback