JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.199.144.54

217.199.144.54 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 100%: ?

100%

ISP	MTN Business Kenya
Usage Type	Fixed Line ISP
ASN	AS9129
Domain Name	mtnbusiness.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 217.199.144.54

Whois 217.199.144.54

IP Abuse Reports for 217.199.144.54:

This IP address has been reported a total of 89 times from 58 distinct sources. 217.199.144.54 was first reported on January 31st 2026, and the most recent report was 10 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-08-29 08:38:37 (10 minutes ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: High Priority: %25252F show less	Hacking Exploited Host Web App Attack
🇬🇧 OptimusGO	2026-08-26 06:19:46 (3 days ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-08-26 07:19:46 UTC Log evidence: 08/26/2026-07:19:45.960616 [wDrop] [] [1:7001101:1] FINSERV CRITICAL: Telnet Access Blocked [] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {TCP} 217.199.144.54:38809 -> 185.127.18.66:23 08/26/2026-07:19:45.960616 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 217.199.144.54:38809 -> 185.127.18.66:23 show less	Port Scan Brute-Force
🇺🇸 kosada.com	2026-08-25 09:24:30 (3 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-25 05:02:01 (4 days ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇧🇷 noconex	2026-08-24 08:47:09 (5 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 217.199.14 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 217.199.144.54 show less	Port Scan Brute-Force SSH
Anonymous	2026-08-23 13:03:57 (5 days ago)	PORT & IP Scan.	Port Scan Brute-Force
🇯🇵 Kinsei Engineering Inc.	2026-08-21 08:59:50 (1 week ago)	UFW:High-frequency access to non-released SSH or Telnet ports	SSH Port Scan
🇫🇷 Zkillu	2026-08-20 18:19:28 (1 week ago)	DDoS flood attack against 82.152.54.0 (2026-08-20 18:14:28 -> 2026-08-20 18:29:28 UTC) targeting AS2 ... show more DDoS flood attack against 82.152.54.0 (2026-08-20 18:14:28 -> 2026-08-20 18:29:28 UTC) targeting AS215599. This IP (AS9129) sent ~847 packets (1.15 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇧🇷 noconex	2026-08-20 15:50:06 (1 week ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 217.199.14 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 217.199.144.54 show less	Port Scan Brute-Force SSH
Anonymous	2026-08-20 15:49:04 (1 week ago)	2026-08-20T11:47:56.786843-04:00 sshd-session: Connection closed by 217.199.144.54 port 46057 [preau ... show more 2026-08-20T11:47:56.786843-04:00 sshd-session: Connection closed by 217.199.144.54 port 46057 [preauth] 2026-08-20T11:49:03.710517-04:00 sshd-session: Connection closed by 217.199.144.54 port 12299 [preauth] show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-08-19 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 Zkillu	2026-08-19 21:58:04 (1 week ago)	UDP flood (DDoS) vs AS215599: 294 pkts / 0.42 MB to UDP 80/8443 across 187 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 294 pkts / 0.42 MB to UDP 80/8443 across 187 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:58:04 (1 week ago)	UDP flood (DDoS) vs AS215599: 294 pkts / 0.42 MB to UDP 80/8443 across 187 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 294 pkts / 0.42 MB to UDP 80/8443 across 187 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇧🇷 noconex	2026-08-19 14:07:03 (1 week ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 217.199.14 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 217.199.144.54 show less	Port Scan Brute-Force SSH
🇧🇷 noconex	2026-08-18 12:33:11 (1 week ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 217.199.14 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 217.199.144.54 show less	Port Scan Brute-Force SSH

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.51.208.158

🇷🇺 176.192.198.233

🇱🇹 213.176.26.19

🇺🇸 207.90.244.19

🇨🇳 203.83.234.180

🇧🇪 198.235.24.168

🇩🇪 194.88.98.120

🇩🇪 193.124.20.233

🇸🇦 188.52.246.42

🇲🇽 187.139.184.131

🇸🇬 178.128.218.245

🇺🇸 162.241.181.223

🇦🇷 152.168.228.241

🇳🇱 149.143.81.23

🇫🇷 141.101.97.100

🇸🇬 94.231.206.109

🇸🇬 94.231.206.108

🇲🇦 81.192.53.131

🇩🇪 69.5.169.234

🇩🇪 69.5.169.208