JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.199.148.226

217.199.148.226 was found in our database!

This IP was reported 180 times. Confidence of Abuse is 59%: ?

59%

ISP	MTN Business Kenya
Usage Type	Fixed Line ISP
ASN	AS9129
Domain Name	mtnbusiness.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 217.199.148.226

Whois 217.199.148.226

IP Abuse Reports for 217.199.148.226:

This IP address has been reported a total of 180 times from 79 distinct sources. 217.199.148.226 was first reported on May 16th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-06 16:55:43 (3 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 stechusa	2026-07-06 15:47:41 (3 days ago)	[Askari] \| country=KE \| Behavior: Targeting specific pages, Rotating user agents, Slow-read attack, ... show more [Askari] \| country=KE \| Behavior: Targeting specific pages, Rotating user agents, Slow-read attack, URL template abuse, Concurrent page load during attack show less	Bad Web Bot DDoS Attack
🇺🇸 nodepile	2026-07-05 15:26:21 (4 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/fits-13-16-scion-fr-s-ikon- ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/fits-13-16-scion-fr-s-ikon-v3-style-front-bumper-lip-spoiler-unpainted-black-pu.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-07-03 14:46:53 (6 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 stechusa	2026-07-02 10:54:24 (1 week ago)	ELEVATED_THREAT \| country=KE \| ASN=MTN SA \| 225 IPs targeting /category/light-bulbs.html \| Facet req ... show more ELEVATED_THREAT \| country=KE \| ASN=MTN SA \| 225 IPs targeting /category/light-bulbs.html \| Facet request during elevated threat (facet_ratio=0.73, unique_ips=702) \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇳🇱 homeshowdomain.nl	2026-07-01 22:13:36 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-30. show less	Web App Attack SSH Hacking
🇺🇸 nodepile	2026-06-30 19:10:17 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 TPI-Abuse	2026-06-30 03:50:38 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 217.199.148.226 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 217.199.148.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 23:50:34.484250 2026] [security2:error] [pid 31163:tid 31163] [client 217.199.148.226:56386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "breezentry.com"] [uri "/.env.dev"] [unique_id "akM9Cicucn2VP5Uu9ZqucgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-06-28 18:44:31 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-06-26 08:42:52 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇮🇩 David Koswari	2026-06-19 05:45:00 (2 weeks ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇸 gui-ying233	2026-06-18 00:05:21 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇹🇷 Threat.live	2026-06-17 11:05:06 (3 weeks ago)	Suspicious Connection Attempts	Brute-Force
🇩🇪 Vegascosmetics	2026-06-06 17:20:34 (1 month ago)	Kingcopy(AI-IDS) Report: IP automatically blocked after obfuscated encoding. Vegas Security System	DDoS Attack Hacking Bad Web Bot
🇺🇸 floreriaexpress	2026-05-30 21:12:10 (1 month ago)	FakeADS-Anti: country:KE \| https://floreriaexpresschile.cl/product-tag/flores-santiago/page/21/?orde ... show more FakeADS-Anti: country:KE \| https://floreriaexpresschile.cl/product-tag/flores-santiago/page/21/?orderby=price&add-to-cart=83607 show less	Bad Web Bot

Showing 1 to 15 of 180 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.111.95.253

🇮🇷 193.39.9.191

🇪🇪 165.231.165.165

🇮🇳 143.110.248.82

🇸🇬 116.89.22.124

🇺🇸 107.175.132.21

🇺🇸 104.143.89.111

🇫🇷 91.196.152.178

🇳🇱 86.54.31.34

🇫🇷 85.217.140.26

🇺🇸 66.132.195.91

🇮🇷 178.252.141.3

🇻🇳 171.244.39.95

🇺🇸 164.90.152.103

🇵🇭 120.28.194.140

🇹🇼 111.70.23.253

🇻🇳 103.82.194.251

🇷🇴 80.94.95.211

🇺🇸 68.82.198.204

🇺🇸 64.62.197.107