JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.223.118.41

41.223.118.41 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 47%: ?

47%

ISP	Core Network – For Internet
Usage Type	Mobile ISP
ASN	AS36962
Domain Name	mtnzambia.co.zm
Country	🇿🇲 Zambia
City	Kitwe, Copperbelt

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.223.118.41

Whois 41.223.118.41

IP Abuse Reports for 41.223.118.41:

This IP address has been reported a total of 17 times from 14 distinct sources. 41.223.118.41 was first reported on June 16th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 YF	2026-06-13 19:01:04 (1 day ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2026-06-13 16:48:41 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 41.223.118.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 41.223.118.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 12:48:31.682042 2026] [security2:error] [pid 7239:tid 7239] [client 41.223.118.41:12939] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.223.118.41 (+1 hits since last alert)\|indoorsfinishing.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "indoorsfinishing.com"] [uri "/xmlrpc.php"] [unique_id "ai2J3-bu0eIQvnUk3Zs0GAAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-06-13 15:22:04 (1 day ago)	Wordfence waf block on flintlocal432	Web App Attack
🇳🇱 maxxsense	2026-06-13 14:20:50 (1 day ago)	(wordpress) Failed wordpress login from 41.223.118.41 (ZM/Zambia/-)	Brute-Force
🇩🇪 Vegascosmetics	2026-06-10 08:37:17 (4 days ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-05-29 10:38:01 (2 weeks ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-12 17:18:47 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇺🇸 xmission.com	2026-05-06 17:39:39 (1 month ago)	Blocked by UFW (TCP on 1) Source port: 20022 TTL: 37 Packet length: 64 TOS: 0x08 This report (for 4 ... show more Blocked by UFW (TCP on 1) Source port: 20022 TTL: 37 Packet length: 64 TOS: 0x08 This report (for 41.223.118.41) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 mutebot.net	2026-01-09 17:40:49 (5 months ago)	SRC=41.223.118.41, PROTO=TCP, SPT=23122, DPT=23	Port Scan
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (6 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
🇩🇪 SMARTNET	2025-11-26 07:00:13 (6 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
🇺🇸 xmission.com	2025-09-13 10:54:44 (9 months ago)	Blocked by UFW (TCP on 55756) Source port: 3615 TTL: 37 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 55756) Source port: 3615 TTL: 37 Packet length: 60 TOS: 0x08 This report (for 41.223.118.41) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 exxos	2025-09-11 15:03:01 (9 months ago)	Attacks with Bad user agents	Hacking
🇮🇩 hermawan	2025-09-04 15:05:41 (9 months ago)	[Thu Sep 04 22:04:52.746973 2025] [security2:error] [pid 454695:tid 139836202567360] [client 41.223. ... show more [Thu Sep 04 22:04:52.746973 2025] [security2:error] [pid 454695:tid 139836202567360] [client 41.223.118.41:13406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Sogou" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Sogou found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 9; MI 9 Build/PKQ1.181121.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/92.0.4478.99 Mobile Safari/537.36 AWP/2.0 SogouMSE,SogouMobileBrowser/5.22.4 request_line = GET /index.php/prakiraan-bulanan/4177-prakiraan-curah-hujan-bulanan/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-bulanan-curah-hujan-di-propinsi-jawa-timur-tahun-2023/555560632-prakiraan-bulanan-curah-hujan-bulan-janu..."] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-bulanan/4177-prakiraan- ... show less	Hacking Web App Attack
🇳🇱 exxos	2025-08-02 02:34:21 (10 months ago)	http-no-verb	Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 194.176.114.36

🇺🇸 185.251.19.42

🇺🇸 150.107.36.120

🇺🇸 66.132.186.211

🇳🇱 45.148.10.147

🇯🇵 20.78.0.33

🇵🇱 146.59.1.225

🇺🇸 107.150.111.215

🇺🇸 107.150.110.13

🇸🇪 31.208.108.219

🇰🇷 1.231.199.96

🇺🇸 195.184.76.75

🇩🇪 167.94.145.24

🇨🇳 118.196.129.25

🇺🇸 71.229.1.186

🇳🇱 45.148.10.152

🇩🇪 176.65.132.39

🇧🇬 79.124.62.230

🇩🇪 64.89.163.28

🇹🇼 61.222.211.114