JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.208.191.1

41.208.191.1 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 11%: ?

11%

ISP	SONATEL Societe Nationale Des Telecommunications Du Senegal
Usage Type	Fixed Line ISP
ASN	AS8346
Domain Name	sonatel.sn
Country	🇸🇳 Senegal
City	Dakar, Dakar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.208.191.1

Whois 41.208.191.1

IP Abuse Reports for 41.208.191.1:

This IP address has been reported a total of 72 times from 53 distinct sources. 41.208.191.1 was first reported on February 4th 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-06-10 02:10:10 (7 hours ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇮🇹 A000Z	2026-04-14 00:24:47 (1 month ago)	Fail2Ban: 41.208.191.1 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 41.208.191.1 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-03-20 06:25:30 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 xmission.com	2026-03-07 10:23:08 (3 months ago)	Blocked by UFW (TCP on 9101) Source port: 53835 TTL: 110 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 53835 TTL: 110 Packet length: 52 TOS: 0x08 This report (for 41.208.191.1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-02-07 17:03:08 (4 months ago)	Blocked by UFW (TCP on 9101) Source port: 6532 TTL: 110 Packet length: 52 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 6532 TTL: 110 Packet length: 52 TOS: 0x08 This report (for 41.208.191.1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-01-30 22:35:17 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 41.208.191.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 41.208.191.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 30 17:34:37.816509 2026] [security2:error] [pid 18226:tid 18226] [client 41.208.191.1:33919] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gilesvolvocarselpaso.com.acadianahero.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gilesvolvocarselpaso.com.acadianahero.com"] [uri "/twitter.com"] [unique_id "aX0x_fFoQdWVWfGagoMnpAAAABA"], referer: http://gilesvolvocarselpaso.com.acadianahero.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2026-01-21 06:11:35 (4 months ago)	Brute force	Brute-Force
Anonymous	2025-12-26 01:15:07 (5 months ago)	DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: a ... show more DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent.com with fake HTTP_REFERER foxnews.com/newsweek.com/upwork.com/activision.com/... Port 443. show less	DDoS Attack Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-23 19:05:48 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-11-25 23:58:39 (6 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-20 12:46:31 (6 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-11-08 18:21:14 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 xmission.com	2025-11-08 15:16:44 (7 months ago)	Blocked by UFW (TCP on 9101) Source port: 37911 TTL: 108 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 37911 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 41.208.191.1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-09-06 23:36:21 (9 months ago)	Blocked by UFW (TCP on 9101) Source port: 48632 TTL: 110 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 48632 TTL: 110 Packet length: 52 TOS: 0x08 This report (for 41.208.191.1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 MAGIC	2025-08-30 01:16:21 (9 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 85.217.149.74

🇺🇸 192.169.201.223

🇸🇪 185.217.0.181

🇮🇳 167.71.239.213

🇺🇸 143.244.189.78

🇮🇳 122.165.124.15

🇵🇭 120.28.200.112

🇺🇸 109.105.209.7

🇮🇩 103.175.223.204

🇷🇴 92.118.39.236

🇫🇷 91.231.89.237

🇺🇸 64.62.156.90

🇧🇷 2804:14c:3dc:810a:e59b:d872:69af:2caf

🇹🇷 212.87.199.64

🇰🇷 211.45.163.178

🇧🇷 177.53.42.101

🇨🇳 114.250.49.141

🇭🇰 103.30.40.129

🇵🇾 201.217.12.57

🇦🇷 190.182.160.212