JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.215.183.2

41.215.183.2 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 38%: ?

38%

ISP	AfriConnect Zambia Ltd
Usage Type	Fixed Line ISP
ASN	AS36959
Domain Name	inq.inc
Country	🇿🇲 Zambia
City	Lusaka, Lusaka Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.215.183.2

Whois 41.215.183.2

IP Abuse Reports for 41.215.183.2:

This IP address has been reported a total of 45 times from 35 distinct sources. 41.215.183.2 was first reported on June 1st 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Elysium Security	2026-08-19 07:30:53 (2 days ago)	Mass port scanning on a whole network	Port Scan
🇺🇸 xmission.com	2026-08-17 15:11:06 (4 days ago)	Blocked by UFW (TCP on 389) Source port: 45526 TTL: 233 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 389) Source port: 45526 TTL: 233 Packet length: 40 TOS: 0x00 This report (for 41.215.183.2) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇷 drpedrofarinacci	2026-08-14 14:01:00 (1 week ago)	Automated detection: 84 failed RDP/login attempts across servers: Hogar(84). Detected by ITSPR SENTI ... show more Automated detection: 84 failed RDP/login attempts across servers: Hogar(84). Detected by ITSPR SENTINEL monitoring system. show less	Brute-Force SSH
🇺🇸 xmission.com	2026-08-06 11:31:54 (2 weeks ago)	Blocked by UFW (TCP on 389) Source port: 41984 TTL: 227 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 389) Source port: 41984 TTL: 227 Packet length: 40 TOS: 0x08 This report (for 41.215.183.2) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇸 Smel	2026-07-28 05:38:12 (3 weeks ago)	SQL/MH Probe, Scan, Hack -	Port Scan Hacking SQL Injection
🇫🇷 eduardomelendezjr	2026-07-26 15:12:05 (3 weeks ago)	Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 Administrator WORKGROUP 0xc ... show more Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 Administrator WORKGROUP 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM NHSS - - 0 0x0 - 41.215.183.2 54737 show less	Port Scan Hacking Brute-Force
🇹🇼 kk_it_man	2026-07-22 07:43:07 (4 weeks ago)	ET SCAN Suspicious inbound to MSSQL port 1433	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-07-21 19:27:30 (1 month ago)	Persistent port scanning or vulnerability scanning	SQL Injection Port Scan
🇩🇪 HoneyPot-FrPri	2026-07-15 06:30:42 (1 month ago)	1784097041 - 07/15/2026 08:30:41 Host: 41.215.183.2/41.215.183.2 Port: 1088 TCP Blocked ...	Port Scan
Anonymous	2026-07-08 06:44:37 (1 month ago)	41.215.183.2 - - [08/Jul/2026:08:44:32 +0200] "GET /EltonZulu/event041h02.html HTTP/1.1" 404 184 "ht ... show more 41.215.183.2 - - [08/Jul/2026:08:44:32 +0200] "GET /EltonZulu/event041h02.html HTTP/1.1" 404 184 "https://sibusports.co.zm/EltonZulu/EltonZulu/MedalTableEltZulu.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 41.215.183.2 - - [08/Jul/2026:08:44:32 +0200] "GET /EltonZulu/event041h05.html HTTP/1.1" 404 184 "https://sibusports.co.zm/EltonZulu/EltonZulu/MedalTableEltZulu.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 41.215.183.2 - - [08/Jul/2026:08:44:32 +0200] "GET /EltonZulu/event041h06.html HTTP/1.1" 404 184 "https://sibusports.co.zm/EltonZulu/EltonZulu/MedalTableEltZulu.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 41.215.183.2 - - [08/Jul/2026:08:44:33 +0200] "GET /EltonZulu/event041h09.html HTTP/1.1" 404 184 "https://sibusports.co.zm/EltonZulu/EltonZulu/MedalTableEltZ ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-05 15:33:23 (1 month ago)	41.215.183.2 - - [05/Jul/2026:17:33:20 +0200] "GET /event041h02.html HTTP/1.1" 404 184 "https://sibu ... show more 41.215.183.2 - - [05/Jul/2026:17:33:20 +0200] "GET /event041h02.html HTTP/1.1" 404 184 "https://sibusports.co.zm/EltonZulu/EltonZulu/MedalTableEltZulu.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 41.215.183.2 - - [05/Jul/2026:17:33:20 +0200] "GET /event041h04.html HTTP/1.1" 404 184 "https://sibusports.co.zm/EltonZulu/EltonZulu/MedalTableEltZulu.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 41.215.183.2 - - [05/Jul/2026:17:33:20 +0200] "GET /event041h07.html HTTP/1.1" 404 184 "https://sibusports.co.zm/EltonZulu/EltonZulu/MedalTableEltZulu.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 41.215.183.2 - - [05/Jul/2026:17:33:21 +0200] "GET /event042h01.html HTTP/1.1" 404 184 "https://sibusports.co.zm/EltonZulu/EltonZulu/MedalTableEltZulu.html" "Mozilla/5.0 (Windows NT 10.0; ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-04 14:43:10 (1 month ago)	41.215.183.2 - - [04/Jul/2026:16:43:04 +0200] "GET /EltonZulu/event001h02.html HTTP/1.1" 404 184 "ht ... show more 41.215.183.2 - - [04/Jul/2026:16:43:04 +0200] "GET /EltonZulu/event001h02.html HTTP/1.1" 404 184 "https://sibusports.co.zm/EltonZulu/EltonZulu/MedalTableEltZulu.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 41.215.183.2 - - [04/Jul/2026:16:43:04 +0200] "GET /EltonZulu/event001h06.html HTTP/1.1" 404 184 "https://sibusports.co.zm/EltonZulu/EltonZulu/MedalTableEltZulu.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 41.215.183.2 - - [04/Jul/2026:16:43:05 +0200] "GET /EltonZulu/event002h03.html HTTP/1.1" 404 184 "https://sibusports.co.zm/EltonZulu/EltonZulu/MedalTableEltZulu.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 41.215.183.2 - - [04/Jul/2026:16:43:05 +0200] "GET /EltonZulu/event002h09.html HTTP/1.1" 404 184 "https://sibusports.co.zm/EltonZulu/EltonZulu/MedalTableEltZ ... show less	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-07-03 11:49:48 (1 month ago)	Blocked by UFW (TCP on 389) Source port: 45426 TTL: 234 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 389) Source port: 45426 TTL: 234 Packet length: 40 TOS: 0x00 This report (for 41.215.183.2) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Bankbook8585	2026-06-23 08:58:06 (1 month ago)	T-Pot honeypot \| Dionaea honeypot: mssqld	Port Scan Hacking
🇮🇩 hermawan	2026-06-19 22:55:59 (2 months ago)	[Sat Jun 20 05:55:55.514416 2026] [security2:error] [pid 1634160:tid 140500974220992] [client 41.215 ... show more [Sat Jun 20 05:55:55.514416 2026] [security2:error] [pid 1634160:tid 140500974220992] [client 41.215.183.2:58233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat"] [unique_id "ajXI-7X8bVu6meZw7lzOrwAAQRc"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1634184] [CuXwMaOmTV8] [ajXI-7X8bVu6meZw7lzOrwAAQRc] keep_alive=[1] [2026-06-2 ... show less	Email Spam Hacking

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4882:9000::9d

🇺🇸 195.184.76.120

🇯🇵 172.105.224.72

🇨🇳 106.38.205.224

🇮🇩 103.167.171.1

🇳🇱 94.154.43.66

🇨🇳 60.205.226.171

🇩🇪 43.228.157.53

🇰🇷 211.106.133.202

🇧🇷 205.210.31.171

🇧🇪 198.235.24.212

🇺🇸 147.185.132.38

🇮🇩 139.228.11.92

🇨🇳 139.159.142.7

🇩🇴 131.108.238.76

🇺🇸 104.223.29.209

🇺🇸 104.209.144.33

🇹🇷 88.230.179.0

🇨🇦 85.217.149.67

🇺🇸 64.62.197.136