41.135.76.73

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
131 reports
82 reporters · latest 12 hours ago
ISP
Dimension Data
Usage Type
Fixed Line ISP
ASN
AS20011
Domain Name
global.ntt
Country
🇿🇦 South Africa
City
Johannesburg, Gauteng
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
131 from 82 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 15 🇩🇪 Germany 12 🇨🇿 Czechia 7
Most common categories Port Scan 38 SSH 34 Brute-Force 34 Hacking 20 Web App Attack 11
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇺 Block Rockin' Beats
Attempted connection to TCP port 22
Port Scan SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇫🇷 aki
PortScan: TCP/22
Port Scan
🇺🇸 RAP
2026-11-09 16:47:50 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇩🇪 MrPeak
gaabip-0.3.1 : 2026-11-09T00:06:23Z : ssh_refused, abuseipdb
Port Scan SSH
🇳🇱 36max
Blocked by firewall: 7 unsolicited inbound connection attempts within 24 hours to ports 22, 23. Automated report from a home network.
Port Scan Brute-Force SSH IoT Targeted
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
Anonymous
Bot / scanning and/or hacking attempts: [1/1] done, POST /wp-login.php HTTP/2.0
Hacking Web App Attack
🇩🇪 KPS
PortscanT
Port Scan
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 41.135.76.73 2026-11-03T15:23:58+0100 vpn Access-Reject station: 41.135.76.73
Brute-Force Web App Attack
🇲🇽 octageeks.com
Wordpress malicious attack:[octaflood]
Web App Attack
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) de 41.135.76.73 [TCP]
Port Scan
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 41.135.76.73 2026-11-02T00:21:47+0100 vpn Access-Reject station: 41.135.76.73
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇴 152.0.37.48
🇯🇵 139.162.70.53
🇧🇬 79.124.49.146
🇺🇸 74.82.47.50
🇺🇸 62.10.174.7
🇨🇳 27.39.130.144
🇻🇳 14.191.17.157
🇸🇰 195.28.145.197
🇨🇳 106.12.38.73
🇯🇵 103.163.220.37
🇺🇸 91.230.168.9
🇺🇸 63.44.253.23
🇪🇬 197.52.99.101
🇬🇧 185.216.145.178
🇨🇳 58.240.123.98
🇸🇪 51.12.216.87
🇮🇱 20.217.29.214
🇺🇸 199.165.159.194
🇰🇪 197.248.25.77
🇨🇷 186.177.160.115
feedback