171.22.174.48
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- MASSIVEGRID LTD
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS49683
- Domain Name
- massivegrid.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
19 from
13 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 uthul |
T-Pot honeypot: 54 hits on ports [3389] (automated)
|
Port Scan Brute-Force | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/global-exclusion-high.
|
Hacking | |
| 🇺🇸 3rdKey |
OpenCanary honeypot hit on port 3389 (no legitimate service runs there); logtype 14001. Automated report.
|
Port Scan Brute-Force Exploited Host | |
| 🇺🇸 Cotty |
Automated sensor: 2 RDP brute-force attempts from this IP during the current reporting window (latest 2026-11-12T15:37Z). Usernames tried: 1.
|
Brute-Force | |
| 🇺🇸 wk5h |
Honeypot (T-Pot), last 24h: 3 hits, 3 login attempts. Services: RDPHoneypot.
|
Brute-Force | |
| 🇦🇹 CTK |
Customer Site (WELS SM)
|
Brute-Force | |
| 🇫🇷 Kejult |
Honeypot Finding: RDP brute-force on TCP/3389; 3 login attempts.
|
Brute-Force | |
| 🇩🇪 dominikdomex |
Windows logon brute-force (RDP) (IPBan)
|
Brute-Force | |
| 🇺🇸 IndigoRidge |
Knock-Knock RDP honeypot activity; time=2026-11-12 08:47:46; username=71.87.148.80
|
Brute-Force | |
| 🇫🇷 uthul |
T-Pot honeypot: 55 hits on ports [3389] (automated)
|
Port Scan Brute-Force | |
| 🇫🇷 uthul |
T-Pot honeypot: 29 hits on ports [3389] (automated)
|
Port Scan Brute-Force | |
| 🇸🇬 drewf.ink |
[03:16] RDP NLA authentication attempt as Administrator (NTLMv2 captured, workstation='workstation')
|
Brute-Force Hacking | |
| 🇺🇸 HamSammich |
Automated sensor: 4 RDP brute-force attempts over the last 24h (latest 2026-11-12T03:15Z).
|
Brute-Force | |
| 🇺🇸 drewf.ink |
[01:10] RDP NLA authentication attempt as Administrator (NTLMv2 captured, workstation='workstation')
|
Brute-Force Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/3389 (RDP); 5 application-level events across 2 source port(s). Sensor(s): RDPHoneypot.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown