JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.199.144.41

217.199.144.41 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 75%: ?

75%

ISP	MTN Business Kenya
Usage Type	Fixed Line ISP
ASN	AS9129
Domain Name	mtnbusiness.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 217.199.144.41

Whois 217.199.144.41

IP Abuse Reports for 217.199.144.41:

This IP address has been reported a total of 32 times from 26 distinct sources. 217.199.144.41 was first reported on January 9th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-12 16:05:41 (4 hours ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 security.rdmc.fr	2026-08-12 04:09:17 (16 hours ago)	Port Scan Attack proto:TCP src:20905 dst:23	Port Scan
🇹🇭 Sawasdee	2026-08-12 01:33:08 (19 hours ago)	SSH break in attempt ...	SSH
🇦🇹 urnilxfgbez	2026-08-11 22:45:00 (21 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇳🇱 VMHeaven.io	2026-08-10 20:44:28 (1 day ago)	Blocked by UFW [22/tcp] Source port: 8632 TTL: 50 Packet length: 60	Port Scan SSH Brute-Force
🇺🇸 MPL	2026-08-10 09:17:17 (2 days ago)	tcp ports: 22,23 (12 or more attempts)	Port Scan
🇩🇪 acadeova	2026-08-10 01:25:26 (2 days ago)	Blocked by UFW on vps2 [23/tcp] Source port: 13963 TTL: 51 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on vps2 [23/tcp] Source port: 13963 TTL: 51 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇮🇹 sssrit	2026-08-09 04:44:09 (3 days ago)	217.199.144.41 - - [09/Aug/2026:06:44:08 +0200] "GET /doc/A.html HTTP/1.1" 404 3713 "-" "Mozilla/5.0 ... show more 217.199.144.41 - - [09/Aug/2026:06:44:08 +0200] "GET /doc/A.html HTTP/1.1" 404 3713 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.146 Safari/537.36" ... show less	Web App Attack
🇩🇪 polido	2026-08-03 10:59:02 (1 week ago)	[debian-4gb-nbg1-1] Unauthorized connection attempt to port 443 from 217.199.144.41	Port Scan
Anonymous	2026-08-02 18:36:36 (1 week ago)	217.199.144.41 - - [02/Aug/2026:18:36:35 +0000] "GET /.env.development HTTP/1.1" 444 0 "-" "Mozilla/ ... show more 217.199.144.41 - - [02/Aug/2026:18:36:35 +0000] "GET /.env.development HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "-" 217.199.144.41 - - [02/Aug/2026:18:36:36 +0000] "GET /.env.bkp HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" 217.199.144.41 - - [02/Aug/2026:18:36:36 +0000] "GET /.env.production.local HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0" "-" 217.199.144.41 - - [02/Aug/2026:18:36:36 +0000] "GET /.env.development.local HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "-" 217.199.144.41 - - [02/Aug/2026:18:36:36 +0000] "GET /.env.docker HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0 ... show less	Port Scan Brute-Force
🇩🇪 maxpower	2026-08-02 14:12:02 (1 week ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 217.199.144.41 (KE/Kenya/-): 1 in the la ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 217.199.144.41 (KE/Kenya/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 217.199.144.41 - - [02/Aug/2026:16:11:37 +0200] "GET /.aws/credentials HTTP/1.1" 404 10388 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "-" host=51.89.2.99 show less	Port Scan
🇺🇸 gui-ying233	2026-07-27 00:04:48 (2 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-23 15:01:05 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 David Koswari	2026-06-29 05:35:00 (1 month ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇸 TPI-Abuse	2026-06-26 17:43:30 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 217.199.144.41 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 217.199.144.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 13:43:25.762765 2026] [security2:error] [pid 11678:tid 11678] [client 217.199.144.41:32924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "genesis-castle.com"] [uri "/wp-config.php"] [unique_id "aj66PYM58_981qMm-x5AsQAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.232

🇺🇸 74.125.181.153

🇳🇱 45.156.87.234

🇯🇵 43.165.170.198

🇬🇧 37.10.113.214

🇬🇧 2a06:4880:c000::fc

🇺🇸 205.210.31.85

🇩🇪 193.124.20.233

🇺🇸 153.76.12.122

🇨🇳 116.179.32.46

🇮🇩 103.186.31.66

🇫🇷 91.196.152.107

🇫🇮 74.125.74.16

🇺🇸 66.132.186.196

🇯🇵 20.48.41.224

🇬🇪 212.58.102.150

🇮🇷 185.237.84.185

🇺🇸 172.174.245.26

🇮🇩 163.7.1.218

🇺🇸 153.76.9.151