41.207.248.182
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Ideal Dental
- Usage Type
- Fixed Line ISP
- ASN
- AS37540
- Domain Name
- winrok.net
- Country
- 🇳🇬 Nigeria
- City
- Abuja, FCT
Abuse Reports
Total reports
24 from
22 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to RDP port 3389
|
Port Scan Hacking | |
| 🇧🇷 SOC Blue Team |
IPs get by Hunting on SIEM
|
Phishing Web Spam Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/3389
|
Port Scan | |
| 🇫🇷 thecocasio |
PortSentry honeypot: unsolicited TCP connection to closed decoy port 3389 (RDP) on a host running no such service. Automated port-scan detection at 2026-11-11T07:31:06Z.
|
Port Scan | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_desktop_or_file_sharing_session
|
Hacking | |
| 🇺🇸 Block Rockin' Beats |
Attempted connection to TCP port 3389 (RDP)
|
Port Scan | |
| 🇭🇰 mutebot.net |
SRC=41.207.248.182, PROTO=TCP, SPT=57256, DPT=3389
|
Port Scan | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 3389 proto 6 detection honeypot_tcp
|
Port Scan | |
| 🇩🇪 KPS |
PortscanT
|
Port Scan | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [3389/tcp]
Source port: 55205
TTL: 115
Packet length: 52
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 NetVexor |
Attack source identified and submitted via NetVexor BGP Blackhole Network
|
Port Scan Hacking Brute-Force | |
| 🇸🇪 SkyDancer |
Multiple intrusion attempts via RDP. Attack automatically blocked by SkyDancer Ai(RDP-X).
|
Hacking Brute-Force | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Behavioral Unusually fast Terminal Server Traffic Potential Scan or Infection (Inbound)) de 41.207.248.182 [TCP]
|
Port Scan | |
| 🇨🇭 trading1617.internet-box.ch |
|
Brute-Force | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 3389
|
Port Scan Hacking Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown