JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.223.116.243

41.223.116.243 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 61%: ?

61%

ISP	used on the IT network
Usage Type	Mobile ISP
ASN	AS36962
Domain Name	mtnzambia.co.zm
Country	🇿🇲 Zambia
City	Lusaka, Lusaka Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.223.116.243

Whois 41.223.116.243

IP Abuse Reports for 41.223.116.243:

This IP address has been reported a total of 60 times from 38 distinct sources. 41.223.116.243 was first reported on December 19th 2021, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-25 14:32:13 (4 minutes ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-06-25 13:31:46 (1 hour ago)	(mod_security) mod_security (id:240335) triggered by 41.223.116.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 41.223.116.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 09:31:37.566202 2026] [security2:error] [pid 25858:tid 25858] [client 41.223.116.243:49390] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.223.116.243 (+1 hits since last alert)\|drgtek.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "drgtek.com"] [uri "/xmlrpc.php"] [unique_id "aj0tubEFgbGMP3RyilwQwwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Jason Howell	2026-06-25 11:28:27 (3 hours ago)	41.223.116.243 - - [25/Jun/2026:06:15:15 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4761 "-" "Jetpack by ... show more 41.223.116.243 - - [25/Jun/2026:06:15:15 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4761 "-" "Jetpack by WordPress.com" 41.223.116.243 - - [25/Jun/2026:06:21:56 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4761 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" 41.223.116.243 - - [25/Jun/2026:06:24:04 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4761 "-" "Jetpack/12.0; WordPress/6.1; http://site90563995.com" 41.223.116.243 - - [25/Jun/2026:06:26:14 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4761 "-" "Jetpack by WordPress.com" 41.223.116.243 - - [25/Jun/2026:06:28:27 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4761 "-" "Jetpack by WordPress.com" ... show less	Web App Attack
🇫🇷 YF	2026-06-25 11:15:22 (3 hours ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2026-06-20 10:09:09 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 41.223.116.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 41.223.116.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 06:09:01.138460 2026] [security2:error] [pid 26379:tid 26379] [client 41.223.116.243:45151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.223.116.243 (+1 hits since last alert)\|dancingbearprinting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dancingbearprinting.com"] [uri "/xmlrpc.php"] [unique_id "ajZmvd8HSZ7evATo2DI5wgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-18 09:39:10 (1 week ago)	41.223.116.243 - - [18/Jun/2026:11:38:59 +0200] "GET /favicon.ico HTTP/1.1" 404 437 "https://matetes ... show more 41.223.116.243 - - [18/Jun/2026:11:38:59 +0200] "GET /favicon.ico HTTP/1.1" 404 437 "https://matetesec.site/login.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 41.223.116.243 - - [18/Jun/2026:11:38:59 +0200] "GET /favicon.ico HTTP/1.1" 404 242 "https://matetesec.site/login.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 41.223.116.243 - - [18/Jun/2026:11:39:04 +0200] "GET /uploads/avatars/default.png HTTP/1.1" 404 242 "https://matetesec.site/teacher-dashboard.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 41.223.116.243 - - [18/Jun/2026:11:39:04 +0200] "GET /uploads/avatars/default.png HTTP/1.1" 404 437 "https://matetesec.site/teacher-dashboard.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 41.223.116.2 ... show less	Bad Web Bot Web App Attack
Anonymous	2026-06-16 07:47:23 (1 week ago)	41.223.116.243 - - [16/Jun/2026:09:47:02 +0200] "GET /uploads/avatars/default.png HTTP/1.1" 404 441 ... show more 41.223.116.243 - - [16/Jun/2026:09:47:02 +0200] "GET /uploads/avatars/default.png HTTP/1.1" 404 441 "https://www.matetesec.site/main-dashboard.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" 41.223.116.243 - - [16/Jun/2026:09:47:02 +0200] "GET /uploads/avatars/default.png HTTP/1.1" 404 245 "https://www.matetesec.site/main-dashboard.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" 41.223.116.243 - - [16/Jun/2026:09:47:02 +0200] "GET /uploads/avatars/default.png HTTP/1.1" 404 441 "https://www.matetesec.site/main-dashboard.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36" 41.223.116.243 - - [16/Jun/2026:09:47:02 +0200] "GET /uploads/avatars/default.png HTTP/1.1" 404 245 "https://www.matetesec.site/main-dashboard.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, lik ... show less	Bad Web Bot Web App Attack
🇷🇴 SpamStopper	2026-06-15 23:06:50 (1 week ago)	Fail2Ban - WordPress Bruteforce WordPress logins and Looking for CMS/PHP/SQL vulnerabilities	Brute-Force Bad Web Bot
🇫🇷 dynamix	2026-06-15 10:11:12 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 Vegascosmetics	2026-06-14 18:50:31 (1 week ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇮🇩 hermawan	2026-06-07 18:16:42 (2 weeks ago)	[Mon Jun 08 01:16:38.828931 2026] [authz_core:error] [pid 239952:tid 140410050549440] [client 41.223 ... show more [Mon Jun 08 01:16:38.828931 2026] [authz_core:error] [pid 239952:tid 140410050549440] [client 41.223.116.243:35999] AH01630: client denied by server configuration: /var/www/index.php, referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[239958] [RH4Q5W3gvuE] [aiW1hr9hbQ4S6VArOyOZ0AAACQU] keep_alive=[1] [2026-06-08 01:16:38.828934] [R:aiW1hr9hbQ4S6VArOyOZ0AAACQU] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8' Referer:'https://staklim-jatim.bmkg.go.id/ Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.9 Upgrade-Insecure-Requests:'1 ... show less	Email Spam Hacking
🇬🇧 PeravixGroup	2026-06-07 11:12:38 (2 weeks ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
Anonymous	2026-06-03 17:18:33 (3 weeks ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2026-05-30 08:02:11 (3 weeks ago)	Web attack	Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-05-17 01:37:53 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 43.254.106.204

🇺🇸 96.228.49.136

🇫🇷 85.217.140.39

🇫🇮 45.130.127.173

🇨🇳 221.10.187.253

🇺🇸 216.239.34.223

🇩🇪 185.30.32.114

🇮🇳 157.50.204.163

🇳🇱 146.190.234.167

🇨🇳 111.14.105.62

🇮🇩 34.128.77.56

🇦🇷 200.41.187.210

🇧🇬 151.251.25.100

🇩🇪 138.68.90.99

🇮🇩 125.161.29.48

🇸🇬 101.47.159.125

🇫🇷 92.205.108.122

🇳🇱 203.55.131.3

🇺🇸 173.194.94.147

🇫🇮 147.185.133.234