JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

41.182.167.52

Neutral Activity

Abuse Confidence Score

0% Low Risk

24 reports

13 reporters · latest 2 months ago

ISP: Telecom Namibia
Usage Type: Fixed Line ISP
ASN: AS36996
Domain Name: telecom.na
Country: 🇳🇦 Namibia
City: Oshakati, Oshana Region

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

41.182.167.52 has been reported 24 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

24 from 13 distinct reporters

First reported

August 12th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-15 08:38:48 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 04:38:40.431660 2026] [security2:error] [pid 18257:tid 18257] [client 41.182.167.52:62983] M ... show more (mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 04:38:40.431660 2026] [security2:error] [pid 18257:tid 18257] [client 41.182.167.52:62983] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.182.167.52 (+1 hits since last alert)\|primacomm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "primacomm.com"] [uri "/xmlrpc.php"] [unique_id "aoAlkMPLX_wfIJPdge4BZwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 03:09:56 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 23:09:53.074432 2026] [security2:error] [pid 16043:tid 16043] [client 41.182.167.52:62857] M ... show more (mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 23:09:53.074432 2026] [security2:error] [pid 16043:tid 16043] [client 41.182.167.52:62857] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.182.167.52 (+1 hits since last alert)\|yerevanpress.am\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "yerevanpress.am"] [uri "/xmlrpc.php"] [unique_id "an_YgYtBvZQ70dw8ck8GlQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-15 00:02:17 UTC · (2 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 Marc	2026-08-14 22:51:31 UTC · (2 months ago)	41.182.167.52 - - [15/Aug/2026:00:51:06 +0200] "POST /xmlrpc.php HTTP/1.1" 403 5098 "-" "WordPress.com; https://wordpress.com" 41.182.167.52 - - [15/Aug/2026:00:51:17 +0200] "POST /xmlrpc.php HTTP/1.1" 403 5098 "-" "Jetpack by WordPress.com (Jetpack ... show more 41.182.167.52 - - [15/Aug/2026:00:51:06 +0200] "POST /xmlrpc.php HTTP/1.1" 403 5098 "-" "WordPress.com; https://wordpress.com" 41.182.167.52 - - [15/Aug/2026:00:51:17 +0200] "POST /xmlrpc.php HTTP/1.1" 403 5098 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" 41.182.167.52 - - [15/Aug/2026:00:51:30 +0200] "POST /xmlrpc.php HTTP/1.1" 403 5098 "-" "Jetpack/13.0; WordPress/6.1; http://site86146261.com" show less	Brute-Force Web App Attack
🇮🇹 CoreTech srl	2026-08-14 21:48:56 UTC · (2 months ago)	cloudlinux2 fail2ban: 2026-08-14 23:44:21,662 fail2ban.filter [1695]: INFO [plesk-modsecurity] Found 41.182.167.52 - 2026-08-14 23:44:21cloudlinux2 fail2ban: 2026-08-14 23:44:45,642 fail2ban.filter [1695]: INFO [recidive] Found ... show more cloudlinux2 fail2ban: 2026-08-14 23:44:21,662 fail2ban.filter [1695]: INFO [plesk-modsecurity] Found 41.182.167.52 - 2026-08-14 23:44:21cloudlinux2 fail2ban: 2026-08-14 23:44:45,642 fail2ban.filter [1695]: INFO [recidive] Found 41.182.167.52 - 2026-08-14 23:44:45cloudlinux2 fail2ban: 2026-08-14 23:44:45,283 fail2ban.filter [1695]: INFO [plesk-modsecurity] Found 41.182.167.52 - 2026-08-14 23:44:45cloudlinux2 fail2ban: 2026-08-14 23:44:41,054 fail2ban.filter [1695]: INFO [plesk-proftpd] Found 195.224.203.50 - 2026-08-14 23:44:41cloudlinux2 fail2ban: 2026-08-14 23:44:45,636 fail2ban.actions [1695]: NOTICE [plesk-modsecurity] Ban 41.182.167.52cloudlinux2 fail2ban: 2026-08-14 23:45:08,953 fail2ban.filter [1695]: INFO [plesk-wordpress] Found 188.40.45.118 - 2026-08-14 23:45:08cloudlinux2 fail2ban: 2026-08-14 23:45:24,303 fail2ban.filter [1695]: INFO [plesk-wordpress] Found 54.197.155.32 - 2026-08-14 23:45:23cloudlinux2 fail2ban: 2026-08-14 23 show less	FTP Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-14 21:43:05 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 17:43:00.620895 2026] [security2:error] [pid 18755:tid 18755] [client 41.182.167.52:60158] M ... show more (mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 17:43:00.620895 2026] [security2:error] [pid 18755:tid 18755] [client 41.182.167.52:60158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.182.167.52 (+1 hits since last alert)\|varnadorefamily.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "varnadorefamily.com"] [uri "/xmlrpc.php"] [unique_id "an-L5EraeGc49G9ENlgucwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-14 19:42:03 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 15:41:57.567363 2026] [security2:error] [pid 953148:tid 953307] [client 41.182.167.52:63080] ... show more (mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 15:41:57.567363 2026] [security2:error] [pid 953148:tid 953307] [client 41.182.167.52:63080] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.182.167.52 (+1 hits since last alert)\|woofnrose.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "woofnrose.com"] [uri "/xmlrpc.php"] [unique_id "an9vhYKbxw9tqlczj6y4vQAAAJg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-14 18:16:24 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 14:16:17.646918 2026] [security2:error] [pid 15342:tid 15366] [client 41.182.167.52:59128] M ... show more (mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 14:16:17.646918 2026] [security2:error] [pid 15342:tid 15366] [client 41.182.167.52:59128] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.182.167.52 (+1 hits since last alert)\|captechinc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "captechinc.com"] [uri "/xmlrpc.php"] [unique_id "an9bcbcnupKTq6Mp17GdqQAAAFY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-08-14 15:12:01 UTC · (2 months ago)	41.182.167.52 - - [14/Aug/2026:11:10:08 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5724 "-" "WordPress.com; https://wordpress.com" 41.182.167.52 - - [14/Aug/2026:11:10:19 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5724 "-" "WordPress.com; https://wordpress.c ... show more 41.182.167.52 - - [14/Aug/2026:11:10:08 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5724 "-" "WordPress.com; https://wordpress.com" 41.182.167.52 - - [14/Aug/2026:11:10:19 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5724 "-" "WordPress.com; https://wordpress.com" 41.182.167.52 - - [14/Aug/2026:11:10:30 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5724 "-" "WordPress.com; https://wordpress.com" 41.182.167.52 - - [14/Aug/2026:11:11:50 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5724 "-" "WordPress.com; https://wordpress.com" 41.182.167.52 - - [14/Aug/2026:11:12:01 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5724 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-14 14:27:47 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 10:27:39.526286 2026] [security2:error] [pid 579860:tid 579860] [client 41.182.167.52:63191] ... show more (mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 10:27:39.526286 2026] [security2:error] [pid 579860:tid 579860] [client 41.182.167.52:63191] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.182.167.52 (+1 hits since last alert)\|weddingmusicguitar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "weddingmusicguitar.com"] [uri "/xmlrpc.php"] [unique_id "an8l243OWEE0I91t4HPJgAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-08-14 12:00:40 UTC · (2 months ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2026-08-14 07:34:21 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 03:34:13.618552 2026] [security2:error] [pid 16291:tid 16291] [client 41.182.167.52:62940] M ... show more (mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 03:34:13.618552 2026] [security2:error] [pid 16291:tid 16291] [client 41.182.167.52:62940] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.182.167.52 (+1 hits since last alert)\|crcponcha.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "crcponcha.com"] [uri "/xmlrpc.php"] [unique_id "an7E9dttZfALr7VSFN2G_QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Apache	2026-08-13 19:52:47 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 41.182.167.52 (NA/Namibia/-): 5 in the last 300 secs	Brute-Force Web App Attack
Anonymous	2026-08-13 19:48:49 UTC · (2 months ago)	(wordpress) Failed wordpress login from 41.182.167.52 (NA/Namibia/Oshana Region/Oshakati/-/[redacted])	Brute-Force
🇺🇸 TPI-Abuse	2026-08-13 11:27:59 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 07:27:52.211957 2026] [security2:error] [pid 1154405:tid 1154405] [client 41.182.167.52:6210 ... show more (mod_security) mod_security (id:240335) triggered by 41.182.167.52 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 07:27:52.211957 2026] [security2:error] [pid 1154405:tid 1154405] [client 41.182.167.52:62103] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.182.167.52 (+1 hits since last alert)\|zezel.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "zezel.com"] [uri "/xmlrpc.php"] [unique_id "an2qOHb67AwbfyUOrAmpKQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇭 179.43.153.10

🇵🇱 172.64.200.168

🇮🇩 163.7.9.55

🇭🇰 124.156.176.9

🇨🇦 85.217.149.0

🇺🇸 45.79.223.14

🇨🇳 36.40.64.74

🇧🇪 35.210.173.193

🇧🇪 35.210.39.217

🇮🇪 34.244.239.174

🇷🇴 2.57.122.168

🇵🇱 2400:cb00:1055:1000:4b74:9cdb:f54e:9acc

🇵🇱 2400:cb00:1055:1000:2c8c:dc20:19e4:6a25

🇸🇪 185.246.130.20

🇫🇮 172.83.254.118

🇺🇸 172.81.135.182

🇵🇱 172.68.159.193

🇺🇸 151.240.106.114

🇫🇮 147.185.133.219

🇧🇪 35.210.135.215