JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.214.49.105

41.214.49.105 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 21%: ?

21%

ISP	SONATEL Societe Nationale Des Telecommunications Du Senegal
Usage Type	Fixed Line ISP
ASN	AS8346
Domain Name	sonatel.sn
Country	🇸🇳 Senegal
City	Dakar, Dakar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.214.49.105

Whois 41.214.49.105

IP Abuse Reports for 41.214.49.105:

This IP address has been reported a total of 26 times from 14 distinct sources. 41.214.49.105 was first reported on January 28th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-07-25 12:20:31 (1 hour ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇺🇸 directorioeducativo.com	2026-07-20 01:40:40 (5 days ago)	GET URL: "/tag/sciences/"Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML ... show more GET URL: "/tag/sciences/"Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6613.137 Safari/537.36" show less	Web App Attack
Anonymous	2026-07-12 12:34:54 (1 week ago)	Unauthorized VPN login attempts	Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-04-29 22:02:52 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 41.214.49.105 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 41.214.49.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 18:02:45.996617 2026] [security2:error] [pid 8583:tid 8583] [client 41.214.49.105:34064] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.chicagowca.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.chicagowca.com"] [uri "/[email protected]"] [unique_id "afKABfsi6QzRtRp-lOTNZAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 INTEQ	2026-04-27 16:41:04 (2 months ago)	Web attack from 41.214.49.105	Web App Attack
🇮🇳 liveaspankaj	2026-04-24 20:36:47 (3 months ago)	DDoS attack: 57 requests in 5m (GET / or repair.php).	DDoS Attack
🇺🇸 xmission.com	2026-04-16 02:38:08 (3 months ago)	Blocked by UFW (TCP on 9101) Source port: 23285 TTL: 108 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 23285 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 41.214.49.105) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 DEV-DNS	2026-02-19 22:06:29 (5 months ago)	41.214.49.105 (SN/Senegal/Dakar/Dakar/-/[redacted]	Brute-Force
🇨🇭 backslash	2026-01-19 20:05:24 (6 months ago)	block ruleset 333FBABBA6DC06D7D20EDF60700DF5D9612E6F09	Bad Web Bot
🇺🇸 xmission.com	2026-01-13 13:51:48 (6 months ago)	Blocked by UFW (TCP on 9101) Source port: 58532 TTL: 109 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 58532 TTL: 109 Packet length: 52 TOS: 0x08 This report (for 41.214.49.105) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇹 VHosting	2025-12-23 23:30:33 (7 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (7 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
🇨🇦 polycoda	2025-12-02 12:52:03 (7 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 xmission.com	2025-11-30 02:47:24 (7 months ago)	Blocked by UFW (TCP on 9101) Source port: 1620 TTL: 108 Packet length: 52 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 1620 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 41.214.49.105) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-11-27 00:13:04 (7 months ago)	Blocked by UFW (TCP on 9101) Source port: 18382 TTL: 108 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 18382 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 41.214.49.105) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 112.164.253.222

🇮🇩 103.125.103.201

🇺🇸 71.11.94.10

🇺🇸 216.25.89.69

🇨🇭 209.99.190.115

🇻🇪 201.238.32.2

🇩🇪 152.53.148.66

🇺🇸 147.185.132.152

🇩🇪 69.5.169.143

🇯🇵 43.165.174.48

🇨🇭 209.99.191.65

🇨🇭 209.99.189.190

🇺🇦 178.215.168.205

🇺🇸 174.166.200.11

🇹🇭 118.174.62.132

🇨🇿 85.163.38.185

🇸🇬 47.237.121.109

🇮🇪 34.254.203.208

🇺🇸 23.129.64.161

🇺🇸 20.64.105.196