JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.82.226.122

41.82.226.122 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 95%: ?

95%

ISP	Sonatel
Usage Type	Fixed Line ISP
ASN	AS8346
Domain Name	sonatel.sn
Country	🇸🇳 Senegal
City	Mermoz Boabab, Dakar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.82.226.122

Whois 41.82.226.122

IP Abuse Reports for 41.82.226.122:

This IP address has been reported a total of 46 times from 23 distinct sources. 41.82.226.122 was first reported on June 12th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-07-08 14:18:10 (4 hours ago)	2.495 requests from abuseipdb.com blacklisted IP (1yr10mos4d)	Brute-Force Bad Web Bot
🇺🇸 jsjdmediallc	2026-07-07 13:20:04 (1 day ago)	Auto-blocked: score 336 (threshold 10). Tier: HIGH. Hits: 66. Flags: xmlrpc, xmlrpc-burst, single-pa ... show more Auto-blocked: score 336 (threshold 10). Tier: HIGH. Hits: 66. Flags: xmlrpc, xmlrpc-burst, single-path-flood. Paths: /xmlrpc.php, /xmlrpc.php, /xmlrpc.php, /xmlrpc.php, /xmlrpc.php show less	Bad Web Bot Web App Attack
🇩🇪 abdubhai	2026-07-07 11:13:09 (1 day ago)	41.82.226.122 - - [07/Jul/2026:1 ...	Brute-Force
🇺🇸 TPI-Abuse	2026-07-06 16:24:46 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 41.82.226.122 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 41.82.226.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 12:24:38.175424 2026] [security2:error] [pid 21734:tid 21734] [client 41.82.226.122:54939] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.82.226.122 (+1 hits since last alert)\|puckerbikini.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "puckerbikini.com"] [uri "/xmlrpc.php"] [unique_id "akvWxs9xaleIA0lKQf2QXQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 15:22:54 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 41.82.226.122 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 41.82.226.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 11:22:46.418983 2026] [security2:error] [pid 9221:tid 9221] [client 41.82.226.122:60465] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.82.226.122 (+1 hits since last alert)\|speedgo.mx\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "speedgo.mx"] [uri "/xmlrpc.php"] [unique_id "akvIRnDS01KqRKpJbDQ2kQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 13:59:02 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 41.82.226.122 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 41.82.226.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 09:58:56.661389 2026] [security2:error] [pid 23484:tid 23484] [client 41.82.226.122:57552] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.82.226.122 (+1 hits since last alert)\|wwfstudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "wwfstudio.com"] [uri "/xmlrpc.php"] [unique_id "aku0oE9saTWKrkeSxs0n7AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-06 12:09:33 (2 days ago)	41.82.226.122 - - [06/Jul/2026:14:09:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack by W ... show more 41.82.226.122 - - [06/Jul/2026:14:09:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" 41.82.226.122 - - [06/Jul/2026:14:09:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" 41.82.226.122 - - [06/Jul/2026:14:09:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" show less	Hacking Web App Attack
🇬🇧 Greg Poulson	2026-07-06 11:54:53 (2 days ago)	Our website was hit by this DDOS at a rate of 6 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇫🇷 SpaceHost-Server	2026-07-06 11:54:05 (2 days ago)	41.82.226.122 - - [06/Jul/2026:13:53:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack by W ... show more 41.82.226.122 - - [06/Jul/2026:13:53:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack by WordPress.com" 41.82.226.122 - - [06/Jul/2026:13:53:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack/13.0; WordPress/6.3; http://site32933179.com" 41.82.226.122 - - [06/Jul/2026:13:54:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 10:59:33 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 41.82.226.122 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 41.82.226.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 06:59:27.308404 2026] [security2:error] [pid 32018:tid 32018] [client 41.82.226.122:52540] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.82.226.122 (+1 hits since last alert)\|slattery-law.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "slattery-law.com"] [uri "/xmlrpc.php"] [unique_id "akuKjziwwptUXOKGyROHRQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-03 10:33:21 (5 days ago)	(xmlrpc) Failed xmlrpc access from 41.82.226.122 (SN/Senegal/-): 5 in the last 3600 secs (0-122)	Hacking
🇺🇸 TPI-Abuse	2026-07-02 08:32:09 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 41.82.226.122 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 41.82.226.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 04:32:03.862655 2026] [security2:error] [pid 19129:tid 19129] [client 41.82.226.122:56357] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.82.226.122 (+1 hits since last alert)\|globaldentalservices.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "globaldentalservices.com"] [uri "/xmlrpc.php"] [unique_id "akYiA_6NbKTtsRfL7oEFqAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-01 11:43:22 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-01 11:20:54 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 41.82.226.122 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 41.82.226.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 07:20:50.412059 2026] [security2:error] [pid 9129:tid 9141] [client 41.82.226.122:57660] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.82.226.122 (+1 hits since last alert)\|tnccivic.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tnccivic.org"] [uri "/xmlrpc.php"] [unique_id "akT4Ejo-V3vyuFmltulf4AAAAEo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-01 09:58:45 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.227

🇧🇩 59.152.97.176

🇧🇷 45.236.226.112

🇺🇸 17.241.75.145

🇧🇪 198.235.24.200

🇭🇰 154.221.20.92

🇺🇸 147.185.132.147

🇷🇴 89.32.41.52

🇺🇸 57.141.18.71

🇺🇸 40.83.182.122

🇳🇱 213.176.16.28

🇧🇷 200.196.50.91

🇸🇰 188.167.253.166

🇺🇸 172.120.112.195

🇭🇰 152.32.134.89

🇨🇳 123.57.89.104

🇮🇹 82.47.252.84

🇧🇬 78.128.114.58

🇮🇳 65.1.100.229

🇨🇳 60.173.205.14