JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.139.204.25

41.139.204.25 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 83%: ?

83%

ISP	For Converged services Western Region
Usage Type	Fixed Line ISP
ASN	AS37061
Domain Name	onecom.co.ke
Country	🇰🇪 Kenya
City	Kagio, Kirinyaga County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.139.204.25

Whois 41.139.204.25

IP Abuse Reports for 41.139.204.25:

This IP address has been reported a total of 25 times from 21 distinct sources. 41.139.204.25 was first reported on August 1st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RAP	2026-08-29 13:47:30 (1 day ago)	2026-08-29 13:47:30 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 gui-ying233	2026-08-28 13:18:37 (2 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇯🇵 SentinalX by uzumaru	2026-08-28 05:44:46 (3 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.ipify.org:443 show less	Open Proxy Port Scan
🇺🇸 gui-ying233	2026-08-28 02:26:42 (3 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-27 04:30:38 (4 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-08-25 16:05:11 (5 days ago)	denied traffic to a honeypot network. destination port 3951.	Port Scan Hacking
🇺🇸 kosada.com	2026-08-25 09:22:29 (5 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 garrymenata	2026-08-23 17:53:20 (1 week ago)	41.139.204.25 - - [24/Aug/2026:00:46:11 +0700] "GET / HTTP/1.1" 403 8280 "-" "Dalvik/2.1.0 (Linux; U ... show more 41.139.204.25 - - [24/Aug/2026:00:46:11 +0700] "GET / HTTP/1.1" 403 8280 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 41.139.204.25 - - [24/Aug/2026:00:46:15 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 41.139.204.25 - - [24/Aug/2026:00:46:17 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-23 11:02:11 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-20 18:19:28 (1 week ago)	DDoS flood attack against 82.152.54.0 (2026-08-20 18:14:28 -> 2026-08-20 18:29:28 UTC) targeting AS2 ... show more DDoS flood attack against 82.152.54.0 (2026-08-20 18:14:28 -> 2026-08-20 18:29:28 UTC) targeting AS215599. This IP (AS37061) sent ~2250 packets (3.20 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇫🇷 Zkillu	2026-08-19 22:29:20 (1 week ago)	UDP flood (DDoS) vs AS215599: 2975 pkts / 4.25 MB to UDP 80/8443 across 163 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 2975 pkts / 4.25 MB to UDP 80/8443 across 163 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:29:20 (1 week ago)	UDP flood (DDoS) vs AS215599: 2975 pkts / 4.25 MB to UDP 80/8443 across 163 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 2975 pkts / 4.25 MB to UDP 80/8443 across 163 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇩🇪 klaus_ph	2026-08-18 21:06:22 (1 week ago)	41.139.204.25 - - [18/Aug/2026:06:22:51 +0200] "GET /dsm/Record/a0010359?lng=tr&print=1 HTTP/1.1" 20 ... show more 41.139.204.25 - - [18/Aug/2026:06:22:51 +0200] "GET /dsm/Record/a0010359?lng=tr&print=1 HTTP/1.1" 200 12470 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.17 Safari/537.36" ... show less	Bad Web Bot
🇱🇺 tdefise	2026-08-16 15:22:00 (2 weeks ago)	This IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (9.48 requests/min over ... show more This IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (9.48 requests/min over a 829-minute timeframe) show less	DDoS Attack
🇧🇷 SOC Blue Team	2026-08-16 01:26:04 (2 weeks ago)	IPs get by Hunting on SIEM	Phishing Web Spam Port Scan Hacking

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 219.140.105.152

🇫🇮 204.168.222.91

🇺🇸 172.236.228.115

🇺🇸 170.187.165.139

🇭🇰 165.154.23.187

🇪🇬 156.222.7.235

🇳🇱 89.21.67.173

🇨🇳 27.224.127.166

🇧🇷 177.201.240.147

🇨🇦 143.110.213.8

🇳🇱 45.148.10.35

🇺🇸 2001:470:1:fb5::14d

🇧🇷 177.10.182.175

🇻🇪 154.194.14.24

🇻🇪 153.51.237.209

🇨🇳 106.114.164.40

🇳🇱 51.124.171.14

🇬🇧 45.133.173.155

🇬🇧 45.133.173.128

🇺🇸 13.222.217.64