JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.242.64.18

41.242.64.18 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 23%: ?

23%

ISP	General Telecommunication Networks (NIG) Limited
Usage Type	Fixed Line ISP
ASN	AS37605
Domain Name	arcelornetworks.net
Country	🇳🇬 Nigeria
City	Abeokuta, Ogun State

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.242.64.18

Whois 41.242.64.18

IP Abuse Reports for 41.242.64.18:

This IP address has been reported a total of 4 times from 3 distinct sources. 41.242.64.18 was first reported on July 20th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-07-23 13:29:52 (6 hours ago)	[ThuJul2315:29:46.2881102026][security2:error][pid1711678:tid1711835][client41.242.64.18:0]ModSecuri ... show more [ThuJul2315:29:46.2881102026][security2:error][pid1711678:tid1711835][client41.242.64.18:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"grigorov.ch\"][uri\"/xmlrpc.php\"][unique_id\"amIXSttUE2a5QuFAhKiZNgAAAA8\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-07-23 07:40:48 (12 hours ago)	[ThuJul2309:40:44.9408112026][security2:error][pid1996010:tid1996258][client41.242.64.18:0]ModSecuri ... show more [ThuJul2309:40:44.9408112026][security2:error][pid1996010:tid1996258][client41.242.64.18:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"viaggi-marocco-lugano.ch\"][uri\"/xmlrpc.php\"][unique_id\"amHFfHkfLe5CzBjN1_gf4gAAAMI\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 11:33:01 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 41.242.64.18 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 41.242.64.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 07:32:54.993415 2026] [security2:error] [pid 10961:tid 10961] [client 41.242.64.18:65295] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|abcollie.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abcollie.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al4HZuqVx29YlJfTKN_sRQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-20 11:22:54 (3 days ago)	41.242.64.18 - - [20/Jul/2026:13:22:52 +0200] "POST /xmlrpc.php HTTP/1.1" 402 4832 "-" "Mozilla/5.0 ... show more 41.242.64.18 - - [20/Jul/2026:13:22:52 +0200] "POST /xmlrpc.php HTTP/1.1" 402 4832 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/85.0.0.0 Safari/537.36" ... show less	Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.221

🇦🇷 190.244.39.224

🇨🇳 123.233.235.56

🇨🇳 115.227.26.85

🇮🇳 103.149.197.34

🇨🇦 99.229.18.216

🇷🇺 95.24.197.167

🇺🇸 66.132.186.129

🇺🇸 47.254.87.150

🇻🇳 45.119.81.245

🇰🇷 20.41.117.16

🇨🇳 14.152.85.4

🇨🇳 218.202.91.147

🇧🇷 205.210.31.229

🇳🇱 195.178.110.137

🇫🇷 167.86.114.220

🇧🇯 137.255.13.181

🇱🇹 81.30.98.44

🇨🇭 51.103.133.211

🇺🇸 47.254.122.67