JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.208.191.222

41.208.191.222 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 37%: ?

37%

ISP	SONATEL Societe Nationale Des Telecommunications Du Senegal
Usage Type	Fixed Line ISP
ASN	AS8346
Domain Name	sonatel.sn
Country	🇸🇳 Senegal
City	Dakar, Dakar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.208.191.222

Whois 41.208.191.222

IP Abuse Reports for 41.208.191.222:

This IP address has been reported a total of 42 times from 21 distinct sources. 41.208.191.222 was first reported on December 19th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 masterguru	2026-10-22 05:44:05 (1 day ago)	COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487). Operato ... show more COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. (225170-169) show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 23:02:26 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 41.208.191.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 41.208.191.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 19:02:22.056973 2026] [security2:error] [pid 13490:tid 13490] [client 41.208.191.222:3223] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|modestosoftwater.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "modestosoftwater.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atlEfgWUe_zEgXbzpGO0ZAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-10-21 03:53:56 (2 days ago)	cloudlinux2 fail2ban: 2026-10-21 05:49:06,388 fail2ban.filter [1488]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-10-21 05:49:06,388 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 196.176.230.124 - 2026-10-21 05:49:06cloudlinux2 fail2ban: 2026-10-21 05:49:57,927 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 187.190.28.195 - 2026-10-21 05:49:57cloudlinux2 fail2ban: 2026-10-21 05:50:24,832 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 103.168.240.163 - 2026-10-21 05:50:24cloudlinux2 fail2ban: 2026-10-21 05:50:31,124 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 37.55.4.10 - 2026-10-21 05:50:30cloudlinux2 fail2ban: 2026-10-21 05:50:26,604 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 41.208.191.222 - 2026-10-21 05:50:26cloudlinux2 fail2ban: 2026-10-21 05:51:20,962 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 34.97.21.42 - 2026-10-21 05:51:20cloudlinux2 fail2ban: 2026-10-21 05:51:24,426 fail2ban.actions [1488]: NOTICE [plesk-modsecurity] Ban 34.97.21.42cloudlinux2 fail2ban: 2026-1 show less	Web App Attack
🇩🇪 Hazzard	2026-10-21 00:16:28 (2 days ago)	(wordpress) Failed wordpress login from 41.208.191.222 (SN/Senegal/Dakar/Dakar/-/[redacted]): (CF_E ... show more (wordpress) Failed wordpress login from 41.208.191.222 (SN/Senegal/Dakar/Dakar/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇺🇸 鬼影233	2026-09-22 10:19:34 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇮 mikkopal88	2026-09-04 14:45:19 (1 month ago)	Telnet probe or brute-force attempt	Port Scan Brute-Force
Anonymous	2026-08-26 12:45:38 (1 month ago)	Large-scale coordinated botnet (2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/10822/form_key/JQwK6FPbgn9IsOO2/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_6) AppleWebKit/536.0 (KHTML, like Gecko) Chrome/30.0.825.0 Safari/536.0 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-18 17:27:08 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-26 08:05:35 (2 months ago)	denied traffic to a honeypot network. destination port 23851.	Port Scan Hacking
🇫🇷 MatStef132	2026-06-21 21:24:32 (4 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇺🇸 kosada.com	2026-06-20 13:04:39 (4 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 anon333	2026-04-30 22:33:57 (5 months ago)	Hacker syslog review 1777588436	Hacking
Anonymous	2026-04-27 16:48:58 (5 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇮🇹 A000Z	2026-04-20 08:07:22 (6 months ago)	Fail2Ban: 41.208.191.222 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 41.208.191.222 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 maxxsense	2026-03-26 20:43:10 (6 months ago)	41.208.191.222 (SN/Senegal/-), 12 distributed imapd attacks on account [redacted]	Brute-Force

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 109.160.32.31

🇨🇴 181.49.8.57

🇦🇷 153.67.181.198

🇺🇸 147.90.234.15

🇩🇪 147.78.241.164

🇬🇧 35.203.210.84

🇧🇪 34.77.118.238

🇦🇺 16.178.71.99

🇮🇳 180.151.195.84

🇨🇳 116.62.152.62

🇩🇪 46.151.182.222

🇸🇬 8.222.211.65

🇦🇪 2.50.139.78

🇰🇷 218.234.186.2

🇩🇪 213.209.159.26

🇳🇱 185.136.15.80

🇬🇧 185.91.69.248

🇷🇺 178.44.31.187

🇨🇴 152.200.181.42

🇨🇦 99.199.82.160