JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.220.116.230

41.220.116.230 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 51%: ?

51%

ISP	geerlofs kenya ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS15808
Hostname(s)	41.220.116.230.accesskenya.com
Domain Name	global.ntt
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.220.116.230

Whois 41.220.116.230

IP Abuse Reports for 41.220.116.230:

This IP address has been reported a total of 42 times from 34 distinct sources. 41.220.116.230 was first reported on March 4th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 A000Z	2026-07-11 00:00:09 (12 hours ago)	Fail2Ban: 41.220.116.230 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 41.220.116.230 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-07-10 10:21:23 (1 day ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in email-link.asp show less	Exploited Host Bad Web Bot
🇺🇸 kosada.com	2026-07-06 06:55:52 (5 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 stechusa	2026-07-02 17:56:06 (1 week ago)	ELEVATED_THREAT \| country=KE \| ASN=IDDQD-AS \| Facet request during elevated threat (facet_ratio=0.81 ... show more ELEVATED_THREAT \| country=KE \| ASN=IDDQD-AS \| Facet request during elevated threat (facet_ratio=0.81, unique_ips=2015) \| 1363 IPs targeting /category/light-bulbs.html \| Recv-Q=1515 bytes on ESTABLISHED connection (threshold=1000) show less	Bad Web Bot DDoS Attack
🇺🇸 kosada.com	2026-06-26 23:33:02 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 nodepile	2026-06-26 08:28:40 (2 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0') show less	Web App Attack Exploited Host
🇮🇩 hermawan	2026-06-10 21:15:14 (1 month ago)	06/11/2026-04:15:14.262540 [Drop] [] [1:920621:1] Suricata Local: Ubiquiti Discovery (5678) [] ... show more 06/11/2026-04:15:14.262540 [Drop] [] [1:920621:1] Suricata Local: Ubiquiti Discovery (5678) [] [Classification: (null)] [Priority: 3] {UDP} 41.220.116.230:53745 -> 103.166.156.58:4290 ... show less	Email Spam Hacking
🇩🇪 Vegascosmetics	2026-06-07 08:56:25 (1 month ago)	Kingcopy(AI-IDS) Report: IP automatically blocked after obfuscated encoding. Vegas Security System	DDoS Attack Hacking Bad Web Bot
🇮🇩 hermawan	2026-06-07 04:13:32 (1 month ago)	[Sun Jun 07 11:13:27.873328 2026] [security2:error] [pid 625151:tid 140593893172928] [client 41.220. ... show more [Sun Jun 07 11:13:27.873328 2026] [security2:error] [pid 625151:tid 140593893172928] [client 41.220.116.230:55898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan"] [unique_id "aiTv5x0YE5vqNmJiGX-ngQADUQg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[625160] [RiGZHWJp77M] [aiTv5x0YE5vqNmJiGX-ngQADUQg] keep_alive=[1] [2026-06-07 11:13:27.873332] [R:aiTv5x0YE5vqNmJiGX-ngQADUQg] UA:'Mozilla/5.0 (Linu ... show less	Email Spam Hacking
🇹🇷 0xi	2026-05-26 23:00:40 (1 month ago)	Telnet-based IoT botnet activity detected (84 attempts). Targeted ports: 23. Triggered sensors: P0f, ... show more Telnet-based IoT botnet activity detected (84 attempts). Targeted ports: 23. Triggered sensors: P0f, Cowrie, Suricata. Observed via distributed honeypot network. show less	Brute-Force SSH
🇭🇰 PingMeMaybe	2026-05-24 17:47:38 (1 month ago)	Blocked by UFW on hk [23/tcp] Source port: 60256 TTL: 45 Packet length: 60 TOS: 0x00 This report wa ... show more Blocked by UFW on hk [23/tcp] Source port: 60256 TTL: 45 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇳🇱 rmvanderspek	2026-05-23 08:55:04 (1 month ago)	Telnet Brute-force (IoT Botnet scan) detected.	Brute-Force IoT Targeted
🇦🇹 urnilxfgbez	2026-05-21 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 PeravixGroup	2026-05-21 01:35:47 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇦🇹 urnilxfgbez	2026-05-20 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 164.92.161.148

🇸🇬 194.5.82.100

🇺🇸 162.216.150.47

🇱🇹 94.244.77.5

🇮🇳 61.0.60.18

🇺🇸 20.163.15.172

🇻🇳 171.231.195.56

🇻🇳 171.231.192.192

🇺🇸 147.185.132.140

🇳🇱 146.185.142.238

🇫🇮 45.87.249.146

🇩🇪 43.228.157.136

🇧🇷 43.157.180.116

🇺🇸 18.97.5.65

🇨🇱 190.121.73.125

🇧🇷 177.37.169.217

🇨🇦 142.44.220.190

🇹🇷 94.154.43.230

🇫🇷 85.204.70.102

🇱🇹 62.60.130.219