JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.184.242.237

41.184.242.237 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 55%: ?

55%

ISP	ipNX NIGERIA LIMITED
Usage Type	Fixed Line ISP
ASN	AS29091
Hostname(s)	41-184-242-237.rv.ipnxtelecoms.com
Domain Name	ipnxnigeria.net
Country	🇳🇬 Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.184.242.237

Whois 41.184.242.237

IP Abuse Reports for 41.184.242.237:

This IP address has been reported a total of 14 times from 9 distinct sources. 41.184.242.237 was first reported on June 18th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-07-15 15:45:49 (1 hour ago)	Try to access /xmlrpc.php	Web App Attack
Anonymous	2026-07-15 06:44:12 (10 hours ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-14 22:51:40 (18 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-07-14 08:01:49 (1 day ago)	[TueJul1410:01:42.6651332026][security2:error][pid2061359:tid2061377][client41.184.242.237:0]ModSecu ... show more [TueJul1410:01:42.6651332026][security2:error][pid2061359:tid2061377][client41.184.242.237:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"stmconsulenze.ch\"][uri\"/xmlrpc.php\"][unique_id\"alXs5gjdsi2zVqTpdUlydAAAAEg\"] show less	Hacking Web App Attack
🇪🇸 Gem	2026-07-11 14:35:35 (4 days ago)	Unauthorized web scan.	Web App Attack
🇩🇪 ghostwarriors	2026-07-10 11:20:49 (5 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 15:14:04 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 41.184.242.237 (41-184-242-237.rv.ipnxtelecoms. ... show more (mod_security) mod_security (id:225170) triggered by 41.184.242.237 (41-184-242-237.rv.ipnxtelecoms.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 11:13:59.045455 2026] [security2:error] [pid 16065:tid 16065] [client 41.184.242.237:60684] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ibermar.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ibermar.info"] [uri "/wp-json/wp/v2/users"] [unique_id "ak-6t66iTS46r67rocWoVgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 08:19:48 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 41.184.242.237 (41-184-242-237.rv.ipnxtelecoms. ... show more (mod_security) mod_security (id:225170) triggered by 41.184.242.237 (41-184-242-237.rv.ipnxtelecoms.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 04:19:43.631423 2026] [security2:error] [pid 9902:tid 9902] [client 41.184.242.237:61410] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|uccryakima.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "uccryakima.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ak9Zn4mwM6AwchtzX0CrHwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 16:22:15 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 41.184.242.237 (41-184-242-237.rv.ipnxtelecoms. ... show more (mod_security) mod_security (id:225170) triggered by 41.184.242.237 (41-184-242-237.rv.ipnxtelecoms.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 12:22:08.007647 2026] [security2:error] [pid 2433:tid 2433] [client 41.184.242.237:64072] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cliniquecavalancia.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cliniquecavalancia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akvWMDDZssF_0RHZ-VxQtgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-07-06 15:54:58 (1 week ago)	Unauthorized access to webpage admin	Web App Attack
🇩🇪 stinpriza	2026-07-06 14:39:22 (1 week ago)	Web App Attack	Web App Attack
🇮🇹 ciccio diddo	2026-06-29 14:42:36 (2 weeks ago)	CMS/WP Exploit xmlrpc port:Tcp/80,443	Brute-Force Web App Attack
🇳🇱 wlt-blocker	2026-06-29 13:02:30 (2 weeks ago)	Unauthorized access to webpage admin	Web App Attack
🇨🇭 4server	2026-06-18 10:33:03 (3 weeks ago)	[ThuJun1812:32:59.2815112026][security2:error][pid1649326:tid1649752][client41.184.242.237:0]ModSecu ... show more [ThuJun1812:32:59.2815112026][security2:error][pid1649326:tid1649752][client41.184.242.237:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"manishimwe.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajPJWwfSh_L-6r6YfG0FgwAAARY\"] show less	Hacking Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 194.102.73.93

🇧🇷 177.155.133.175

🇺🇸 154.38.185.170

🇺🇸 3.129.187.38

🇺🇸 207.46.13.6

🇧🇷 187.95.232.182

🇧🇷 179.179.195.213

🇯🇵 153.120.120.109

🇩🇪 87.106.29.151

🇱🇹 81.30.98.142

🇺🇸 31.77.227.251

🇺🇸 23.95.25.133

🇰🇷 211.254.212.59

🇬🇧 169.197.113.221

🇺🇸 167.172.203.111

🇮🇳 139.59.6.237

🇨🇳 120.53.2.123

🇫🇷 91.231.89.245

🇫🇷 91.231.89.136

🇳🇱 89.248.172.10