JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.215.235.103

41.215.235.103 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 89%: ?

89%

ISP	CDNetwork (Hosted in RSAWEB DC2)
Usage Type	Fixed Line ISP
ASN	AS37053
Domain Name	rsaweb.co.za
Country	🇿🇦 South Africa
City	Cape Town, Western Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.215.235.103

Whois 41.215.235.103

IP Abuse Reports for 41.215.235.103:

This IP address has been reported a total of 50 times from 26 distinct sources. 41.215.235.103 was first reported on September 26th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 noconex	2026-09-02 03:37:13 (8 hours ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 41.215.235 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 41.215.235.103 show less	Port Scan Brute-Force SSH
🇷🇸 Scan	2026-09-02 02:04:05 (9 hours ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇦🇹 urnilxfgbez	2026-09-01 22:45:00 (13 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 spufidoo	2026-09-01 07:14:34 (1 day ago)	2026-09-01T08:13:03.722674+01:00 heimdall kernel: [9308393.663938] [UFW BLOCK] IN=eth0 OUT= MAC=b8:2 ... show more 2026-09-01T08:13:03.722674+01:00 heimdall kernel: [9308393.663938] [UFW BLOCK] IN=eth0 OUT= MAC=b8:27:eb:a2:a7:d3:d4:05:de:c6:00:32:08:00:45:00:00:3c:c9:8d:40:00:35:06:a1:fa SRC=41.215.235.103 DST=192.168.4.77 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=51597 DF PROTO=TCP SPT=47200 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-01T08:13:04.230945+01:00 heimdall kernel: [9308394.172212] [UFW BLOCK] IN=eth0 OUT= MAC=b8:27:eb:a2:a7:d3:d4:05:de:c6:00:32:08:00:45:00:00:3c:c9:8e:40:00:35:06:a1:f9 SRC=41.215.235.103 DST=192.168.4.77 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=51598 DF PROTO=TCP SPT=47200 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-01T08:14:31.748170+01:00 heimdall kernel: [9308481.689398] [UFW BLOCK] IN=eth0 OUT= MAC=b8:27:eb:a2:a7:d3:d4:05:de:c6:00:32:08:00:45:00:00:3c:fb:a7:40:00:35:06:6f:e0 SRC=41.215.235.103 DST=192.168.4.77 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=64423 DF PROTO=TCP SPT=53652 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Brute-Force SSH
🇧🇷 noconex	2026-09-01 02:42:17 (1 day ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 41.215.235 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 41.215.235.103 show less	Port Scan Brute-Force SSH
🇺🇸 gui-ying233	2026-08-30 00:42:10 (3 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-28 16:06:24 (4 days ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇧🇷 noconex	2026-08-28 13:28:05 (4 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 41.215.235 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 41.215.235.103 show less	Port Scan Brute-Force SSH
🇺🇸 MPL	2026-08-27 16:41:17 (5 days ago)	tcp ports: 22,23 (24 or more attempts)	Port Scan
🇫🇷 security.rdmc.fr	2026-08-27 09:55:10 (6 days ago)	Port Scan Attack proto:TCP src:59712 dst:23	Port Scan
🇺🇸 bpolson	2026-08-26 04:40:00 (1 week ago)	Brute Force SSH. (BP)	Brute-Force SSH
🇺🇸 MPL	2026-08-25 23:48:22 (1 week ago)	tcp ports: 23,22 (12 or more attempts)	Port Scan
🇧🇷 noconex	2026-08-25 20:28:10 (1 week ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 41.215.235 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 41.215.235.103 show less	Port Scan Brute-Force SSH
🇵🇱 mkey	2026-08-24 07:05:02 (1 week ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS= ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS=22,23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-08-24 09:02:37 \| LAST=2026-08-24 09:02:37. Last seen 2026-08-24 09:02:37. show less	Port Scan
🇳🇱 EGP Abuse Dept	2026-08-24 07:01:18 (1 week ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.221

🇫🇷 194.99.24.70

🇧🇩 151.158.44.55

🇨🇳 118.248.164.30

🇺🇸 107.146.137.220

🇫🇷 91.231.89.133

🇺🇸 66.240.223.214

🇺🇸 40.124.170.184

🇺🇸 34.174.145.166

🇦🇷 200.59.96.35

🇫🇷 193.163.207.11

🇺🇸 162.243.248.232

🇫🇷 91.231.89.165

🇩🇪 69.5.169.102

🇧🇷 43.164.196.244

🇺🇸 40.119.44.118

🇦🇷 216.244.218.132

🇭🇰 203.185.56.59

🇺🇸 192.3.1.130

🇧🇷 191.176.129.183