141.76.94.39

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
463 reports
376 reporters · latest 32 minutes ago
ISP
Internet measurement research conducted by the Chair of Distributed
Usage Type
University/College/School
ASN
AS680
Hostname(s)
ipid-osfingerprint.research.netd.cs.tu-dresden.de
Domain Name
tu-dresden.de
Country
🇩🇪 Germany
City
Dresden, Saxony
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
463 from 376 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 99 🇺🇸 United States of America 84 🇫🇷 France 52
Most common categories Port Scan 208 Web App Attack 154 Brute-Force 134 SSH 113 Hacking 105
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇹 redmihype
SSH tarpit (endlessh)
Brute-Force SSH
🇺🇸 wk5h
Honeypot (T-Pot), last 24h: 8 hits. Services: Cowrie, Dionaea, H0neytr4p, Tanner.
Port Scan Hacking Brute-Force Web App Attack SSH
🇺🇸 MatCat
Banned by fail2ban: blossomd
Brute-Force SSH
🇫🇷 uthul
T-Pot honeypot: 42 hits on ports [22, 80, 161, 443, 445] (automated)
Port Scan Hacking Brute-Force Web App Attack SSH
🇳🇴 amaco
SSH brute-force attempt detected.
Port Scan Brute-Force SSH
🇩🇪 Vegascosmetics
Kingcopy.org AI-IDS (Vegas Cosmetics shop): Abuse 100 / BAN. IP is on the AbuseIPDB blacklist and was blocked on the first request.
Hacking Exploited Host Web App Attack
🇪🇸 GranTech
141.76.94.39 - - [11/Nov/2026:10:26:45 +0000] "GET / HTTP/1.1" 400 127577 "-" "Mozilla/5.0 zgrab/0.x" ...
Bad Web Bot
🇩🇪 Ano_Nym
CrowdSec IDS alert on VPS 217.154.115.19 (DE). Scenario: crowdsecurity/http-bad-user-agent
Web App Attack
🇩🇪 Admins@Storch
IPS:drop <match> dstport=80
Brute-Force Exploited Host
🇩🇪 KPS
Portscan-P
Port Scan
🇺🇸 xclmp
Unauthorized connection attempts consistent with that of port probing and scanning from 141.76.94.39 were detected at 2026-11-11 10:11:31 UTC. Learn More: https://fia.project-furina.com/report/23312
Port Scan
🇺🇸 Sockets-AR
CrowdSec: malicious bot / scanner detected (crowdsecurity/http-bad-user-agent) at 2026-11-11T10:08:53.356Z
Bad Web Bot Web App Attack
🇷🇺 basil s
Unauthorized access attempt: automated SSH credential brute-force probe on TCP/22; dropped and source blocked. Observed 2026-11-11 09:56:16 UTC; blocked for 24h.
Brute-Force SSH
🇧🇬 Stoyko Stoykov
141.76.94.39 - - [11/Nov/2026:11:51:49 +0200] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 zgrab/0.x" ...
Hacking Web App Attack
🇸🇪 sweplox.se
Ip 141.76.94.39 performed 'crowdsecurity/http-bad-user-agent' (2 events over 1.049704ms) at 2026-11-11 09:45:11.82762237 +0000 UTC
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 183.111.125.186
🇲🇽 177.244.112.66
🇵🇹 109.50.163.184
🇨🇭 104.244.79.113
🇺🇸 64.233.172.3
🇺🇸 57.141.20.47
🇺🇸 15.204.101.211
🇺🇸 66.235.168.200
🇺🇸 64.233.172.4
🇵🇱 51.68.151.167
🇺🇸 50.47.143.233
🇺🇸 45.131.195.186
🇫🇮 45.130.127.14
🇻🇪 201.243.127.107
🇺🇸 199.165.159.217
🇳🇱 195.178.110.26
🇺🇸 129.153.32.165
🇮🇳 110.226.125.123
🇫🇷 51.254.136.153
🇪🇸 45.157.82.252
feedback