JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.189.181.2

41.189.181.2 was found in our database!

This IP was reported 222 times. Confidence of Abuse is 60%: ?

60%

ISP	MDNS
Usage Type	Fixed Line ISP
ASN	AS30986
Domain Name	mtn.com.gh
Country	🇬🇭 Ghana
City	Accra, Greater Accra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.189.181.2

Whois 41.189.181.2

IP Abuse Reports for 41.189.181.2:

This IP address has been reported a total of 222 times from 48 distinct sources. 41.189.181.2 was first reported on May 9th 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 vtchost.com	2026-06-20 03:20:13 (7 hours ago)	Jun 20 05:20:12 vtchost kernel: [71928.366291] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more Jun 20 05:20:12 vtchost kernel: [71928.366291] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:47:2d:08:00 SRC=41.189.181.2 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=17674 DF PROTO=TCP SPT=61758 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇹 urnilxfgbez	2026-06-17 22:45:00 (2 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 donarev419	2026-06-17 00:31:51 (3 days ago)	Port scan detected on port 445 (connection without data transfer)	Port Scan
Anonymous	2026-06-16 07:39:28 (4 days ago)	2026-06-16T08:39:27.592523+01:00 vps kernel: [43335722.619383] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-16T08:39:27.592523+01:00 vps kernel: [43335722.619383] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=41.189.181.2 DST=54.37.14.118 LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=3390 DF PROTO=TCP SPT=61033 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
Anonymous	2026-06-15 08:10:35 (5 days ago)	Unauthorized connection to SMB port 445	Port Scan
🇫🇷 vtchost.com	2026-06-10 00:44:42 (1 week ago)	Jun 10 02:44:42 vtchost kernel: [149201.022403] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:1 ... show more Jun 10 02:44:42 vtchost kernel: [149201.022403] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=41.189.181.2 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=31124 DF PROTO=TCP SPT=59537 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-06-06 03:45:10 (2 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-01 15:58:57 (2 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇦🇹 urnilxfgbez	2026-05-28 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 RAP	2026-05-28 11:44:43 (3 weeks ago)	2026-05-28 11:44:43 UTC Unauthorized activity to TCP port 445. SMB	Port Scan
🇫🇮 Yachiyo Runami	2026-05-27 21:51:00 (3 weeks ago)	Port Scan on Honeypot \| Ports: 445/SMB \| Proto: TCP(1) \| Flags: all SYN \| TTL: 109 \| Len: 52B \| Win: ... show more Port Scan on Honeypot \| Ports: 445/SMB \| Proto: TCP(1) \| Flags: all SYN \| TTL: 109 \| Len: 52B \| Win: 8192(1) \| F2B/ufw-honeypot@2026-05-27T21:51:00Z show less	Port Scan Hacking
🇺🇸 drewf.ink	2026-05-24 19:55:07 (3 weeks ago)	[19:55] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, ... show more [19:55] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇺🇸 drewf.ink	2026-05-24 17:50:34 (3 weeks ago)	[17:50] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, ... show more [17:50] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇫🇷 vtchost.com	2026-05-23 06:47:12 (4 weeks ago)	May 23 08:47:11 vtchost kernel: [84550.696629] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more May 23 08:47:11 vtchost kernel: [84550.696629] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=41.189.181.2 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=2931 DF PROTO=TCP SPT=61521 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇵🇱 nfsec.pl	2026-05-19 17:00:31 (1 month ago)	Detected: TCP scan on port: 445 with flags: SYN	Port Scan

Showing 1 to 15 of 222 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.89

🇨🇳 203.195.82.4

🇨🇳 180.76.202.69

🇸🇪 170.168.174.55

🇮🇳 103.214.60.56

🇫🇷 51.68.34.131

🇶🇦 34.18.62.244

🇵🇸 188.225.234.201

🇮🇷 130.185.72.228

🇺🇸 73.207.236.11

🇺🇸 20.65.194.27

🇧🇬 2a01:5a8:32e:cb71:a8b1:7939:12db:41ca

🇳🇱 217.60.195.26

🇺🇸 216.73.216.94

🇨🇳 120.85.114.137

🇹🇼 118.163.132.212

🇵🇰 116.71.136.125

🇻🇳 113.177.27.200

🇮🇳 103.88.76.27

🇮🇹 93.42.227.251