JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.215.17.122

41.215.17.122 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 0%: ?

ISP	AccessKenya Group Ltd
Usage Type	Fixed Line ISP
ASN	AS15808
Hostname(s)	41.215.17.122.accesskenya.com
Domain Name	global.ntt
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.215.17.122

Whois 41.215.17.122

IP Abuse Reports for 41.215.17.122:

This IP address has been reported a total of 97 times from 38 distinct sources. 41.215.17.122 was first reported on February 24th 2022, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 syokadmin	2025-10-28 01:51:59 (10 months ago)	41.215.17.122 (KE/Kenya/41.215.17.122.accesskenya.com), 5 distributed SMTP Logins on account [accoun ... show more 41.215.17.122 (KE/Kenya/41.215.17.122.accesskenya.com), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
🇺🇸 TPI-Abuse	2025-10-20 03:48:33 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 41.215.17.122 (41.215.17.122.accesskenya.com): ... show more (mod_security) mod_security (id:225170) triggered by 41.215.17.122 (41.215.17.122.accesskenya.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 19 23:48:27.205234 2025] [security2:error] [pid 25858:tid 25858] [client 41.215.17.122:59740] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bernsteinip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aPWxC2ICXi7kmv3aam9FeAAAAAw"], referer: https://bernsteinip.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-10-18 01:12:12 (11 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 Nicolmn	2025-09-24 03:47:01 (11 months ago)	Web form spam ( id grncs-jrdns.l )	Web Spam
🇳🇱 antikirra	2025-09-16 16:17:40 (1 year ago)	Proxy Port Scanning	Port Scan
🇮🇹 VHosting	2025-09-11 05:32:04 (1 year ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 nowyouknow	2025-08-30 13:16:49 (1 year ago)	(From [email protected])	Phishing Web Spam
🇬🇧 Apache	2025-08-27 08:55:07 (1 year ago)	(mod_security) mod_security (id:217200) triggered by 41.215.17.122 (KE/Kenya/41.215.17.122.accessken ... show more (mod_security) mod_security (id:217200) triggered by 41.215.17.122 (KE/Kenya/41.215.17.122.accesskenya.com): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-08-14 21:52:36 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 41.215.17.122 (41.215.17.122.accesskenya.com): ... show more (mod_security) mod_security (id:225170) triggered by 41.215.17.122 (41.215.17.122.accesskenya.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 14 17:52:33.078330 2025] [security2:error] [pid 31281:tid 31281] [client 41.215.17.122:33643] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|aemcmullin.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aemcmullin.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aJ5aoaCGCyzbjPxo9FTxTQAAACg"], referer: https://aemcmullin.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-13 02:27:57 (1 year ago)	Spamming registration page	Web Spam
Anonymous	2025-08-12 07:42:10 (1 year ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2025-07-23 04:32:15 (1 year ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
Anonymous	2025-07-19 17:15:44 (1 year ago)	Ports: *; Direction: 0; Trigger: LF_DISTSMTP	Brute-Force SSH
🇺🇸 nowyouknow	2025-07-13 23:50:17 (1 year ago)	(From [email protected])	Phishing Web Spam
🇺🇸 nowyouknow	2025-06-12 20:59:21 (1 year ago)	(From [email protected])	Phishing Web Spam

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.216

🇫🇷 185.177.72.45

🇮🇶 185.147.100.1

🇺🇸 162.216.149.165

🇩🇪 85.214.50.153

🇺🇸 75.112.23.30

🇳🇱 45.198.224.237

🇺🇸 17.166.235.22

🇲🇾 203.121.40.210

🇹🇼 198.235.24.22

🇺🇸 198.71.50.113

🇩🇪 194.88.98.101

🇯🇵 172.70.123.210

🇺🇸 162.216.150.254

🇺🇸 152.32.206.247

🇺🇸 91.230.168.5

🇺🇸 69.10.37.151

🇩🇪 69.5.169.123

🇭🇰 65.181.71.117

🇺🇸 17.166.150.195