102.212.40.74

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
117 reports
39 reporters · latest 7 minutes ago
ISP
Connect, Surf and Smile Limited
Usage Type
Fixed Line ISP
ASN
AS329244
Domain Name
connectsurfsmile.com
Country
🇳🇬 Nigeria
City
Uyo, Akwa Ibom State
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
117 from 39 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 88 🇫🇷 France 5 🇸🇬 Singapore 5
Most common categories Brute-Force 87 Hacking 73 Port Scan 41 SSH 3 Web App Attack 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 drewf.ink
[07:20] RDP NLA authentication attempt as .\Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking
🇺🇸 drewf.ink
[07:03] RDP NLA authentication attempt as .\Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking
🇺🇸 drewf.ink
[06:46] RDP NLA authentication attempt as .\Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking
🇺🇸 drewf.ink
[06:28] RDP NLA authentication attempt as .\Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking
🇺🇸 IndigoRidge
Knock-Knock RDP honeypot activity; time=2026-11-06 06:16:31; username=anonymous
Brute-Force
🇺🇸 drewf.ink
[06:13] RDP NLA authentication attempt as .\Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking
🇧🇷 chronos
RDP: Connection attempt to the remote desktop service. | Port: 3389 | Proto: TCP | AS: AS329244 Connect, Surf and Smile Limited | Location: Nigeria, Uyo (~5km)
Port Scan
🇺🇸 drewf.ink
[05:58] RDP NLA authentication attempt as .\Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking
🇮🇩 Indobsd
Port Scan Web App Attack SSH
🇺🇸 drewf.ink
[05:41] RDP NLA authentication attempt as .\Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact
Hacking
🇺🇸 drewf.ink
[05:26] RDP NLA authentication attempt as .\Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking
🇺🇸 drewf.ink
[05:08] RDP NLA authentication attempt as .\Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking
🇺🇸 drewf.ink
[04:50] RDP NLA authentication attempt as .\Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking
🇺🇸 drewf.ink
[04:33] RDP NLA authentication attempt as .\Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇰 223.123.34.15
🇨🇭 209.99.189.119
🇲🇽 187.189.90.195
🇨🇳 182.138.158.134
🇹🇹 181.118.45.177
🇨🇳 121.229.9.97
🇻🇳 103.163.118.174
🇹🇷 81.214.75.248
🇺🇸 76.173.132.230
🇺🇸 73.237.197.12
🇨🇦 70.49.229.50
🇺🇸 192.155.87.225
🇫🇮 185.89.43.49
🇰🇭 124.199.118.52
🇮🇳 117.251.86.142
🇨🇦 99.227.42.234
🇺🇦 94.124.162.190
🇵🇹 85.242.146.95
🇺🇸 73.64.211.180
🇺🇸 72.63.249.93
feedback