164.30.7.153
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- T-Systems International GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS6878
- Hostname(s)
- ecs-164-30-7-153.reverse.open-telekom-cloud.com
- Domain Name
- t-systems.com
- Country
- 🇩🇪 Germany
- City
- Berlin, State of Berlin
Abuse Reports
Total reports
274 from
120 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 ZeroAttackVector |
|
Brute-Force SSH | |
| 🇯🇵 keiichi9999 |
Honeypot observation: SSH/Telnet login attempts x24; web/service login attempts x144; tags: rdp-login-probe, rdp-handshake. Source: personal research honeypot.
|
Brute-Force Web App Attack SSH | |
| 🇫🇷 uthul |
T-Pot honeypot: 2129 hits on ports [3389] (automated)
|
Port Scan Brute-Force | |
| 🇧🇪 LucasCHX |
Cowrie honeypot (SSH/Telnet). 92 session(s), 34 login attempts. Main behaviour: Balayage sans connexion. Commands: echo xsec
|
Brute-Force SSH | |
| 🇫🇷 uthul |
T-Pot honeypot: 4495 hits on ports [22, 3389] (automated)
|
Port Scan Brute-Force SSH | |
| 🇺🇦 tank.zone |
Honeypot (Cowrie SSH/Telnet + HTTP trap): 34 SSH/Telnet login attempts, ran 29 shell commands.
|
Hacking Brute-Force Exploited Host SSH | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/3389 (RDP); 65 application-level events across 44 source port(s). Sensor(s): RDPHoneypot.
|
Port Scan | |
| 🇹🇷 ferique |
Real-time Intercept: RDP attack. Reference: 2026-11-13 22:36:13.0286 Login failure: 164.30.7.153 RDP 2 14
|
Brute-Force | |
| 🇳🇱 Jos Moonen |
Isolated honeypot recorded 3 RDP authentication attempts rejected by the isolated decoy. Local block at 2026-11-13 19:36 UTC. Count is cumulative for the observed sequence, not an exact count within a time window.
|
Brute-Force | |
| 🇫🇷 Kejult |
Honeypot Finding: RDP brute-force on TCP/3389; 45 login attempts.
|
Brute-Force | |
| 🇪🇸 whatda |
HoneyAI: malicious activity via RDP on honeypot
|
Hacking Port Scan | |
| 🇺🇸 MOFFER |
5 SSH/Telnet login attempts in the last 24h. Usernames tried: root. (automated report from an SSH/Docker honeypot)
|
Brute-Force SSH | |
| 🇺🇸 daboy85 |
SSH/Telnet honeypot: 7 login attempts, 1 post-auth commands in 24h. Sample creds tried: 1 root:ubuntu@987654321 1 root:ubuntu@12345678 1 root:ubuntu@1234567 1 root:12345 Sample cmds: echo xsec|
|
Brute-Force SSH Hacking Exploited Host | |
| 🇺🇸 qtland |
|
Brute-Force SSH | |
| 🇵🇱 vrozaksen |
SSH/Telnet honeypot caught this host: 1 login attempts, 1 commands executed. Last seen 2026-11-13T18:51:45Z.
|
Hacking Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown