167.148.41.34

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
62 reports
45 reporters · latest 6 months ago
ISP
Brander Group Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS19318
Domain Name
brandergroup.net
Country
🇺🇸 United States of America
City
Piscataway, New Jersey
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

167.148.41.34 has been reported 62 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
62 from 45 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇸🇪 SkyDancer
Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai via interface.
Hacking Brute-Force SSH
🇩🇪 netclix.gr
Port Scan
🇳🇱 Mangelot Hosting
(bad_user_agent) srv101 Bad User-Agent 167.148.41.34 (US/-/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇦🇺 afleventoffice.com.au
GET /zimbra/ HTTP/1.1
Web App Attack
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
Anonymous
Fuzzing/Looking for credentials files.
Brute-Force Web App Attack
🇩🇪 iNetWorker
trolling for resource vulnerabilities
Web App Attack
🇩🇪 Mr-Money
167.148.41.34 - - [07/Feb/2026:08:53:18 +0100] "GET /.env HTTP/1.1" 404 400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ...
Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇫🇷 Bensay
Hacking Bad Web Bot Web App Attack
🇺🇸 hyena
Repeated mod_security events.
Web App Attack
🇺🇸 myagent.site
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸 OceanTreasure
tcp/80; Environment file access attempt: "GET /.env" @ 2026-02-07T01:33:51Z [azure]
Web App Attack
🇨🇦 polycoda
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - 📡 Port Scan (Non Decay-Based) - ↪️ Excessive 30X Errors (Decay-Based)
Port Scan Hacking Bad Web Bot Web App Attack
Anonymous
"uri":"/.git/config"
Web App Attack
🇺🇸 mnsf
Too many Status 40X (15) Scanning/Probing (15)
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 161.118.229.234
🇫🇮 147.185.133.4
🇹🇭 118.194.250.113
🇲🇽 45.177.178.82
🇸🇪 171.25.158.87
🇩🇪 69.5.169.241
🇲🇦 41.250.169.228
🇺🇸 35.225.166.132
🇺🇸 18.145.217.42
🇬🇧 195.96.139.142
🇹🇷 178.233.116.85
🇺🇸 162.216.149.127
🇻🇳 116.110.150.166
🇺🇸 98.149.183.41
🇬🇧 87.236.176.185
🇫🇷 62.34.22.200
feedback