62.192.153.202

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
58% Elevated
31 reports
14 reporters · latest 5 days ago
ISP
dataforest GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS58212
Hostname(s)
202.153.192.62.dataforest.net
Domain Name
dataforest.net
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
31 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 23 🇩🇪 Germany 3 🇪🇸 Spain 3
Most common categories Port Scan 21 Brute-Force 11 SSH 4 Hacking 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇪🇸 raiolanetworks.com
Honeypot detection: RDP brute-force. 7 events observed. 4 login attempts. Reported automatically from a honeypot sensor.
Brute-Force
🇪🇸 el-brujo
T-Pot Honeypot (Honeypots): Automated attack on port 3389/RDP
Port Scan Hacking
🇪🇸 whatda
RDP connection attempt for user "b218bb28c56f4c87"
Hacking Port Scan
🇫🇷 edoram
SSH brute-force from honeypot. 123 attempts in 24h, 0 unique usernames tried.
Brute-Force SSH
🇫🇷 uthul
T-Pot honeypot: 118 hits on ports [3389] (automated)
Port Scan Brute-Force
🇫🇷 uthul
T-Pot honeypot: 118 hits on ports [3389] (automated)
Port Scan Brute-Force
🇩🇪 BULLSEYE
Automated security detection: RDP brute-force activity blocked by IPBan. Source: IPBan/RDP. Events=1, observations=5.
Brute-Force
🇫🇷 ✨
Rule : RDP Rule: RDP Event: RDP S-1-0-0 - - 0x0 S-1-0-0 ADMINISTRATOR 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM - - - 0 0x0 - 62.192.153.202 0
SSH Brute-Force
🇩🇪 comped
RDP brute-force / credential stuffing: 12 failed Windows logons (Event ID 4625) against 12 of our servers (NL), first seen 2026-10-30 01:14 UTC. Blocked automatically.
Brute-Force
🇫🇷 edoram
SSH brute-force from honeypot. 24001 attempts in 24h, 0 unique usernames tried.
Brute-Force SSH
🇩🇪 Freenex1911
2026-10-29T22:58:45Z - RDP login from 62.192.153.202 failed multiple times.
Brute-Force
🇬🇧 knock
Knock-Knock honeypot brute-force: RDP (2 total hits)
Brute-Force
🇫🇷 AmStaff
Honeypot: 35572 connection attempts (port scan). Targeted ports: RDP.
Port Scan
🇫🇷 AmStaff
Honeypot: 39494 connection attempts (port scan). Targeted ports: RDP.
Port Scan
🇫🇷 AmStaff
Honeypot: 38670 connection attempts (port scan). Targeted ports: RDP.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 183.82.111.224
🇳🇱 172.71.99.79
🇺🇸 162.216.149.82
🇵🇱 162.158.103.54
🇨🇳 111.19.212.140
🇻🇳 103.154.63.62
🇳🇱 86.38.187.78
🇳🇱 86.38.187.72
🇳🇱 85.155.15.10
🇧🇬 79.124.59.10
🇸🇬 47.128.115.81
🇨🇳 36.25.251.109
🇺🇸 20.150.212.164
🇺🇸 20.98.154.244
🇷🇴 2.57.121.25
🇳🇱 193.176.31.203
🇧🇷 191.210.73.33
🇦🇷 181.46.137.174
🇵🇱 172.68.159.114
🇵🇱 162.158.103.217
feedback