AbuseIPDB » 41.70.44.30
41.70.44.30
This IP was reported 9 times. Confidence of
Abuse
is 0% : ?
ISP
University of Malawi.
Usage Type
University/College/School
ASN
AS37215
Domain Name
unima.ac.mw
Country
🇲🇼
Malawi
City
Zomba, Southern Region
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 41.70.44.30 :
This IP address has been reported a total of
9
times from
7 distinct
sources.
41.70.44.30 was first reported on
April 1st 2026 , and the most recent report was
3 months ago
Old Reports:
The most recent abuse report for this IP address is from
3 months ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
Burayot
2026-05-24 09:45:28
(3 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 41.70.44.30 (MW/Malawi/-): 1 in the ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 41.70.44.30 (MW/Malawi/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 17:40:45
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 41.70.44.30 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 41.70.44.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 13:40:40.819716 2026] [security2:error] [pid 3210:tid 3210] [client 41.70.44.30:58018] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||clayrivers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "clayrivers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahCVGD_zYFTvDMuayTgv1QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-05-19 16:23:31
(3 months ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
factor1
2026-05-10 23:48:58
(4 months ago)
Fail2ban at apollo Reports Abuse.
Bad Web Bot
🇨🇭
4server
2026-05-10 22:45:11
(4 months ago)
[MonMay1100:45:08.7384662026][security2:error][pid1398388:tid1398411][client41.70.44.30:0]ModSecurit ...
show more
[MonMay1100:45:08.7384662026][security2:error][pid1398388:tid1398411][client41.70.44.30:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"eutecne.ch\"][uri\"/xmlrpc.php\"][unique_id\"agEKdKL8_dGO8Sg81RUvSAAAAVQ\"]
show less
Hacking
Web App Attack
🇬🇧
foxxelabs
2026-05-07 04:51:24
(4 months ago)
Automated report from FoxxeLabs Sentinel. Path probed: /xmlrpc.php | Project: anseo | Reason(s): Kno ...
show more
Automated report from FoxxeLabs Sentinel. Path probed: /xmlrpc.php | Project: anseo | Reason(s): Known exploit path: /xmlrpc.php | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/77
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-04 05:43:43
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 41.70.44.30 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 41.70.44.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 01:43:37.757562 2026] [security2:error] [pid 10354:tid 10354] [client 41.70.44.30:63946] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mariettacaseyclub.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mariettacaseyclub.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afgyCZ5SpXoHSw9Qf3gswQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
AbuseBaer
2026-04-20 10:16:06
(4 months ago)
access attempt detected by IDS script (B)
Web App Attack
🇺🇸
factor1
2026-04-01 07:21:12
(5 months ago)
Fail2ban at atlas Reports Abuse.
Bad Web Bot
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: