This IP address has been reported a total of
9
times from
8 distinct
sources.
38.41.41.140 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
UDP flood (DDoS) vs AS215599: 37 pkts / 0.05 MB to UDP 80/8443 across 37 dst IP(s), 2026-08-19 21:46 ...
show moreUDP flood (DDoS) vs AS215599: 37 pkts / 0.05 MB to UDP 80/8443 across 37 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
UDP flood (DDoS) vs AS215599: 37 pkts / 0.05 MB to UDP 80/8443 across 37 dst IP(s), 2026-08-19 21:46 ...
show moreUDP flood (DDoS) vs AS215599: 37 pkts / 0.05 MB to UDP 80/8443 across 37 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
Application-layer flood: hammering search, login or AJAX endpoints far beyond any human use | path: ...
show moreApplication-layer flood: hammering search, login or AJAX endpoints far beyond any human use | path: /4-velos-electriques
show less
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.27 is noted in report tim ...
show moreAttempted brute force login to web vpn 2 time(s); last attempt for 2025.11.27 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
scanning http requests from known botnet
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩