JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.139.235.113

41.139.235.113 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 34%: ?

34%

ISP	For Converged services Coast
Usage Type	Fixed Line ISP
ASN	AS37061
Hostname(s)	41-139-235-113.safaricombusiness.co.ke
Domain Name	onecom.co.ke
Country	🇰🇪 Kenya
City	Rumuruti, Laikipia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.139.235.113

Whois 41.139.235.113

IP Abuse Reports for 41.139.235.113:

This IP address has been reported a total of 37 times from 26 distinct sources. 41.139.235.113 was first reported on January 15th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nodepile	2026-07-05 18:19:58 (1 day ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-07-03 09:44:24 (3 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 kosada.com	2026-06-25 21:53:48 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 backslash	2026-06-24 22:36:00 (1 week ago)	block ruleset 333FBABBA6DC06D7D20EDF60700DF5D9612E6F09	Bad Web Bot
🇺🇸 gui-ying233	2026-06-12 00:05:02 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇩🇪 pltcldvlpr	2026-06-06 08:27:41 (1 month ago)	Bogus Useragent: 41.139.235.113 - - [06/Jun/2026:10:27:40 +0200] "GET /protocol?id=sh_15_124&offset= ... show more Bogus Useragent: 41.139.235.113 - - [06/Jun/2026:10:27:40 +0200] "GET /protocol?id=sh_15_124&offset=850&seq=889 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0) AppleWebKit/531.12.7 (KHTML, like Gecko) Version/4.1 Safari/531.12.7" asn=37061 org="Safaricom Limited" country=KE ... show less	Bad Web Bot
🇮🇩 hermawan	2026-05-26 00:13:31 (1 month ago)	1779754400.037809 41.139.235.113 103.166.156.58 64240_2-1-3-4-8_1412_8 2026-05-26 07:13:20 WIB ...	Email Spam Hacking
Anonymous	2026-05-15 14:41:53 (1 month ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-post.asp show less	Exploited Host Bad Web Bot
🇮🇳 Parth Maniar	2026-05-08 23:05:52 (1 month ago)	This IP address carried out 2 port scanning attempts on 08-05-2026. For more information or to repor ... show more This IP address carried out 2 port scanning attempts on 08-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇺🇸 RAP	2026-05-05 15:36:06 (2 months ago)	2026-05-05 15:36:06 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇮🇩 Burayot	2026-04-27 06:33:45 (2 months ago)	LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 41.139.235.113 (KE/Kenya/41-139-23 ... show more LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 41.139.235.113 (KE/Kenya/41-139-235-113.safaricombusiness.co.ke): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-15 09:24:13 (2 months ago)	(mod_security) mod_security (id:217210) triggered by 41.139.235.113 (41-139-235-113.safaricombusines ... show more (mod_security) mod_security (id:217210) triggered by 41.139.235.113 (41-139-235-113.safaricombusiness.co.ke): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 05:24:07.812526 2026] [security2:error] [pid 3748804:tid 3748804] [client 41.139.235.113:51504] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|www.autism.mv\|F\|4"] [data "GET http://www.autism.mv HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.autism.mv"] [uri "/"] [unique_id "ad9ZN1yq6dnm1OpmA2qVfgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 maxxsense	2026-04-04 01:27:12 (3 months ago)	41.139.235.113 (KE/Kenya/41-139-235-113.safaricombusiness.co.ke), 12 distributed imapd attacks on ac ... show more 41.139.235.113 (KE/Kenya/41-139-235-113.safaricombusiness.co.ke), 12 distributed imapd attacks on account [redacted] show less	Brute-Force
🇺🇸 kosada.com	2026-03-23 06:17:02 (3 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-02-23 16:31:10 (4 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 188.240.59.56

🇯🇵 153.121.54.102

🇿🇦 102.213.135.41

🇨🇦 85.217.149.46

🇩🇪 69.5.169.67

🇺🇸 64.62.197.41

🇸🇬 47.128.122.50

🇧🇪 34.53.153.22

🇺🇸 209.50.162.9

🇧🇪 198.235.24.245

🇲🇽 187.191.2.213

🇧🇷 187.23.192.152

🇦🇱 185.38.193.138

🇨🇳 115.191.22.111

🇹🇼 111.70.33.194

🇨🇳 110.249.202.158

🇦🇱 109.236.40.174

🇩🇪 69.5.169.84

🇩🇪 69.5.169.11

🇸🇬 68.183.236.1