JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

41.66.219.61

Neutral Activity

Abuse confidence score ?

0% Low Risk

155 reports

44 reporters · latest 1 year ago

ISP	Ghana Telecommunications Company Limited
Usage Type	Fixed Line ISP
ASN	AS29614
Domain Name	ghana.com
Country	🇬🇭 Ghana
City	Accra, Greater Accra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

41.66.219.61 has been reported 155 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 41.66.219.61

Export CSV

This IP address has been reported a total of 155 times from 44 distinct sources. 41.66.219.61 was first reported on March 28th 2023, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2025-08-05 16:35:21 (1 year ago)	41.66.219.61 - - [05/Aug/2025:19:35:17 +0300] "GET /wp-login.php HTTP/1.1" 404 2628 "-" "Mozilla/5.0 ... show more 41.66.219.61 - - [05/Aug/2025:19:35:17 +0300] "GET /wp-login.php HTTP/1.1" 404 2628 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 41.66.219.61 - - [05/Aug/2025:19:35:19 +0300] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
🇸🇮 borisperc	2025-08-03 10:44:45 (1 year ago)		Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack
🇨🇦 polycoda	2025-01-15 16:03:24 (1 year ago)	🔑 Probes for xmlrpc.php everywhere	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2025-01-13 15:48:50 (1 year ago)	41.66.219.61 - - [13/Jan/2025:17:48:49 +0200] "GET /wp-login.php HTTP/1.1" 404 2609 "-" "Mozilla/5.0 ... show more 41.66.219.61 - - [13/Jan/2025:17:48:49 +0200] "GET /wp-login.php HTTP/1.1" 404 2609 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 41.66.219.61 - - [13/Jan/2025:17:48:49 +0200] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2024-12-24 17:16:07 (1 year ago)	41.66.219.61 - - [24/Dec/2024:19:16:00 +0200] "GET /wp-login.php HTTP/1.1" 404 2619 "-" "Mozilla/5.0 ... show more 41.66.219.61 - - [24/Dec/2024:19:16:00 +0200] "GET /wp-login.php HTTP/1.1" 404 2619 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 41.66.219.61 - - [24/Dec/2024:19:16:01 +0200] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
Anonymous	2024-12-24 15:32:42 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-12-16 11:59:35 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 41.66.219.61 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 41.66.219.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 16 06:59:31.745755 2024] [security2:error] [pid 24497:tid 24497] [client 41.66.219.61:52722] [client 41.66.219.61] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.quickasawink.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.quickasawink.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Z2AWI9M7vTOnpNIDDIR-RwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-12-11 14:02:44 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-12-03 14:04:01 (1 year ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇦 URAN Publishing Service	2024-12-02 18:54:47 (1 year ago)	41.66.219.61 - - [02/Dec/2024:20:54:31 +0200] "GET /wp-login.php HTTP/1.1" 404 2622 "-" "Mozilla/5.0 ... show more 41.66.219.61 - - [02/Dec/2024:20:54:31 +0200] "GET /wp-login.php HTTP/1.1" 404 2622 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 41.66.219.61 - - [02/Dec/2024:20:54:41 +0200] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
🇦🇺 MAGIC	2024-11-27 19:05:50 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇦 URAN Publishing Service	2024-11-26 08:57:50 (1 year ago)	41.66.219.61 - - [26/Nov/2024:10:57:35 +0200] "GET /wp-login.php HTTP/1.1" 404 2617 "-" "Mozilla/5.0 ... show more 41.66.219.61 - - [26/Nov/2024:10:57:35 +0200] "GET /wp-login.php HTTP/1.1" 404 2617 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 41.66.219.61 - - [26/Nov/2024:10:57:49 +0200] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2024-11-25 22:33:27 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 41.66.219.61 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 41.66.219.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 25 17:33:19.070840 2024] [security2:error] [pid 10874:tid 10874] [client 41.66.219.61:17823] [client 41.66.219.61] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bonegym.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bonegym.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Z0T7LwwGvvEuxQ2SkjystAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ManagedStack	2024-11-22 09:58:52 (1 year ago)	Wordpress Attack	Web App Attack
Anonymous	2024-11-21 14:05:34 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.106.133.202

🇧🇷 205.210.31.183

🇧🇷 186.195.236.29

🇺🇸 172.191.178.196

🇺🇸 162.216.150.117

🇺🇸 143.42.1.185

🇷🇺 95.220.218.204

🇫🇷 80.14.10.34

🇬🇧 77.67.26.219

🇬🇧 5.226.140.100

🇺🇿 213.230.127.104

🇬🇧 200.138.46.64

🇳🇱 192.42.116.118

🇫🇷 178.238.234.112

🇷🇴 80.94.92.55

🇺🇸 68.225.62.190

🇨🇳 59.50.190.203

🇳🇱 45.148.10.151

🇩🇪 45.3.44.254

🇺🇾 179.27.97.205