JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.13.176.132

41.13.176.132 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 3%: ?

ISP	Vodacom
Usage Type	Mobile ISP
ASN	AS29975
Hostname(s)	vc-nat-kzn-41-13-176-132.umts.vodacom.co.za vc-gp-n-41-13-176-132.umts.vodacom.co.za
Domain Name	vodacom.com
Country	🇿🇦 South Africa
City	Durban, KwaZulu-Natal

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.13.176.132

Whois 41.13.176.132

IP Abuse Reports for 41.13.176.132:

This IP address has been reported a total of 4 times from 3 distinct sources. 41.13.176.132 was first reported on November 20th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-25 05:30:44 (1 week ago)	Large-scale coordinated botnet (2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/13677/form_key/2wUz9Gj2oqZhoBNn/ \| UA: Mozilla/5.0 (iPod; U; CPU iPhone OS 4_3 like Mac OS X; es-CO) AppleWebKit/532.29.2 (KHTML, like Gecko) Version/3.0.5 Mobile/8B116 Safari/6532.29.2 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-01-11 15:21:22 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 16:22:22 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 41.13.176.132 (vc-gp-n-41-13-176-132.umts.vodac ... show more (mod_security) mod_security (id:210730) triggered by 41.13.176.132 (vc-gp-n-41-13-176-132.umts.vodacom.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 11:22:19.037853 2025] [security2:error] [pid 7299:tid 7299] [client 41.13.176.132:63487] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|home.agingworkforcenews.com\|F\|2"] [data ".myceridian.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "home.agingworkforcenews.com"] [uri "/2005/08/http/www.myceridian.com"] [unique_id "aScpO4U4vUKft1-GduSFeQAAABI"], referer: https://home.agingworkforcenews.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-20 23:02:49 (9 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:534:1000:fc62:8fa4:d8c1:f209

🇬🇧 5.252.83.240

🇧🇷 205.210.31.136

🇮🇳 151.185.42.183

🇺🇸 147.185.132.105

🇨🇳 119.96.158.238

🇫🇮 46.62.239.161

🇬🇧 216.226.76.30

🇹🇼 198.235.24.65

🇺🇸 147.185.132.108

🇧🇷 138.36.215.108

🇮🇩 103.101.224.37

🇴🇲 38.199.59.248

🇹🇷 212.174.62.233

🇧🇷 177.130.250.31

🇳🇱 144.31.203.145

🇩🇪 136.243.220.213

🇺🇸 104.28.201.73

🇺🇸 71.19.192.246

🇩🇪 64.89.163.81