163.223.18.58
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Lajward Hindukush Technology Service company
- Usage Type
- Fixed Line ISP
- ASN
- AS153711
- Domain Name
- lhict.net
- Country
- 🇦🇫 Afghanistan
- City
- Fayzabad, Badakhshan
Abuse Reports
Total reports
17 from
12 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
. It is possible that this IP is
no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇳 leonfetter |
Dasheng Security: 3 failed logons in 10 minutes
|
Brute-Force | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/3389 (RDP); 6 application-level events across 3 source port(s). Sensor(s): RDPHoneypot.
|
Port Scan | |
| 🇦🇹 CTK |
RDP Brute-Force (Grieskirchen RZ1)
|
Brute-Force | |
| 🇺🇸 JakeddoT |
Windows RDP brute force: 30 failed logins between 2026-10-04 01:56 and 2026-10-04 07:12 UTC. Usernames tried include: FEDEX, BETTY, BARRY, ECOPY.
|
Brute-Force | |
| 🇺🇸 Cotty |
Automated sensor: 17 RDP brute-force attempts from this IP during the current reporting window (latest 2026-10-02T16:16Z). Usernames tried: 17.
|
Brute-Force | |
| 🇺🇸 Cotty |
Automated sensor: 15 RDP brute-force attempts from this IP during the current reporting window (latest 2026-10-02T10:13Z). Usernames tried: 15.
|
Brute-Force | |
| 🇺🇸 Cotty |
Automated sensor: 15 RDP brute-force attempts from this IP during the current reporting window (latest 2026-10-02T04:12Z). Usernames tried: 15.
|
Brute-Force | |
| 🇺🇸 Cotty |
Automated sensor: 4 RDP brute-force attempts from this IP during the current reporting window (latest 2026-10-01T22:04Z). Usernames tried: 4.
|
Brute-Force | |
| 🇸🇪 Juha Jurvanen |
Blocked by Scantide Guard on Network. Rule: Immediate username block: configured username 'ADMIN' was observed by trusted authentication collector 'windows-failed-logon'..
|
Brute-Force | |
| 🇩🇪 comped |
RDP brute-force / credential stuffing: 3 failed Windows logons (Event ID 4625) against 2 of our servers (NL), first seen 2026-10-01 20:27 UTC. Blocked automatically.
|
Brute-Force | |
| 🇦🇹 CTK |
Customer Site (Grieskirchen FP)
|
Brute-Force | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: RDP brute-force. 2 events observed. Reported automatically from a honeypot sensor.
|
Brute-Force | |
| 🇪🇸 whatda |
RDP connection attempt for user "hello"
|
Hacking Port Scan | |
| 🇨🇦 Luhte |
Unsolicited TCP connection from 163.223.18.58 to port 0 at 2026-08-20T10:17:56Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| 🇫🇮 ValtonTahiri |
Windows IPBan blocked brute-force / failed login activity. Source=RDP; Username=6; Count=; LogonType=3; SourcePort=0; Status=0xc000006d; SubStatus=0xc0000064; Auth=NTLM
|
Port Scan Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown