62.141.40.187

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
25 reports
22 reporters · latest 5 hours ago
ISP
WIIT AG
Usage Type
Data Center/Web Hosting/Transit
ASN
AS24961
Hostname(s)
ns2.netwaresolution.com
Domain Name
wiit.cloud
Country
🇩🇪 Germany
City
Dusseldorf, North Rhine-Westphalia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
25 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 9 🇩🇪 Germany 8 🇺🇸 United States of America 3
Most common categories Port Scan 22 Hacking 7 Brute-Force 3 DDoS Attack 2 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 drewf.ink
[01:27] Crawled recognized CouchDB endpoints without a follow-up attack: GET /_all_dbs (x2)
Hacking
🇩🇪 phil2k
fail2ban:recidive:2026-11-06 21:05:39,487 fail2ban.actions [4061749]: NOTICE [firewall] Ban 62.141.40.187 2026-11-07 00:38:12,791 fail2ban.actions [4061749]: NOTICE [firewall] Ban 62.141.40.187
DDoS Attack Port Scan Brute-Force
🇺🇸 HamSammich
Automated sensor: 2 Redis connection/probe attempts over the last 24h (latest 2026-11-06T22:38Z).
Port Scan Hacking
🇧🇷 aosafeshield
AOSafe Shield: connected to a honeypot port (TCP 11211) that no legitimate service uses.
Port Scan Hacking
🇫🇷 thecocasio
PortSentry honeypot: unsolicited TCP connection to closed decoy port 6379 (Redis) on a host running no such service. Automated port-scan detection at 2026-11-06T22:07:46Z.
Port Scan
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 36 application-level events across 5 target ports and 28 source port(s). Ports: 6379/Redis, 11434/service, 2379/service, 11211/Memcached, 2181/service. Sensors: Honeytrap, Redishoneypot.
Port Scan
🇫🇷 noi
honeypot proto=TCP dpt=6379 flags=SYN hits=1 window=1h
Port Scan
Anonymous
62.141.40.187 detected on srv02
Port Scan
Anonymous
Triggered: repeated knocking on closed ports.
Port Scan
🇩🇪 schuh
06-11-2026:20:28:06UTC [Port Scan] unique_ports:4 ports:2375,9042,11211,8088 (8 packets). SRC=62.141.40.187 TTL=248 PROTO=TCP SPT=52865 DPT=2375 SYN
Port Scan
🇫🇷 Little Iguana
trying to access non-authorized port
Port Scan
🇩🇪 mattk
port scan
Port Scan
🇩🇪 phil2k
DDoS Attack Port Scan Brute-Force
🇫🇷 JohnAtlas
Honeypot: connection attempt to unused port(s) 9200/tcp on a server where these services do not exist. Automated firewall trap.
Port Scan Hacking
🇫🇷 cityhunter_rhone
Connection attempts on sensitive port(s) 11211 (1) of a private server (ports closed to the public, firewall log). Mercurius-Guide automated detection.
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇷 200.189.19.181
🇨🇴 187.73.178.250
🇦🇷 186.148.86.110
🇺🇸 178.128.182.159
🇧🇷 168.195.233.154
🇪🇬 156.195.127.203
🇨🇳 121.29.85.18
🇨🇳 116.179.32.215
🇮🇩 103.174.238.9
🇻🇳 180.93.250.126
🇧🇷 170.233.230.225
🇨🇳 123.191.146.82
🇿🇦 102.133.162.110
🇳🇱 72.9.162.6
🇺🇸 65.49.1.232
🇨🇳 59.49.230.128
🇺🇸 20.172.68.103
🇺🇸 18.212.212.8
🇺🇸 18.97.19.199
feedback