JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.141.106.251

41.141.106.251

Recent Activity

70 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

ADSL_Maroc_telecom

Usage Type

Fixed Line ISP

ASN

AS36903

Domain Name

menara.ma

Country

🇲🇦 Morocco

City

Marrakesh, Marrakesh-Safi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 41.141.106.251:

This IP address has been reported a total of 70 times from 47 distinct sources. 41.141.106.251 was first reported on September 5th 2026, and the most recent report was 2 hours ago. In the last 60 days, the top reporter locations were: United States of America with 22 reports; Germany with 16 reports; France with 5 reports. The most common categories in these recent reports were: Web App Attack 55 times; Bad Web Bot 33 times; Brute-Force 29 times; Hacking 11 times; Port Scan 8 times; Other 12 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-06 18:27:16 (2 hours ago)	(mod_security) mod_security (id:949110) triggered by 41.141.106.251 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:949110) triggered by 41.141.106.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 14:27:09.186322 2026] [security2:error] [pid 26846:tid 26846] [client 41.141.106.251:62335] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "web239.dnchosting.com"] [uri "/.env"] [unique_id "ap2wfbKe5MQghF3I9BV5jAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-06 17:29:16 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 41.141.106.251 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 41.141.106.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 13:29:10.918989 2026] [security2:error] [pid 2385:tid 2385] [client 41.141.106.251:56648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unified-dispatch.com"] [uri "/.env"] [unique_id "ap2i5vYbOv_IyMY5KzYSMwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 olegio	2026-09-06 16:56:05 (3 hours ago)	41.141.106.251 - - [06/Sep/2026:16:56:03 +0000] "GET /.env HTTP/2.0" 403 168 "-" "Mozilla/5.0 (Windo ... show more 41.141.106.251 - - [06/Sep/2026:16:56:03 +0000] "GET /.env HTTP/2.0" 403 168 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/125.0.0.0 Safari/537.36" 41.141.106.251 - - [06/Sep/2026:16:56:04 +0000] "GET /.env HTTP/2.0" 403 168 "http://trainzland.org/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/123.0.0.0 OPR/109.0.0.0" ... show less	Brute-Force Web App Attack
🇵🇹 Subnet Shadow Specter	2026-09-06 16:33:29 (3 hours ago)	[CRITICAL][Security Alert] Targeted exploit scanning against Textbook Vulnerabilities. Bot hunting f ... show more [CRITICAL][Security Alert] Targeted exploit scanning against Textbook Vulnerabilities. Bot hunting for PHP backdoors. [Method]: => GET. [Request]: => /test.php. Access revoked. [User-Agent]: Mozilla/5.0 (Windows NT 10.0; rv:115.0) Gecko/20100101 Firefox/115.0. [OS]: Windows. [IP Address]: 41.141.106.251. [IoA Datetime]: 2026-09-06 17:10:19 UTC +1. show less	Bad Web Bot Hacking Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-09-06 15:39:58 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 41.141.106.251 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 41.141.106.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 11:39:54.559879 2026] [security2:error] [pid 9664:tid 9664] [client 41.141.106.251:51790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teguer.com"] [uri "/.env"] [unique_id "ap2JSgk1PdYYcI5ozSjzVwAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-06 15:23:03 (5 hours ago)	Enumerating paths that do not exist (scanning) \| method: GET \| path: /info.php \| ua: Mozilla/5.0 (Wi ... show more Enumerating paths that do not exist (scanning) \| method: GET \| path: /info.php \| ua: Mozilla/5.0 (Windows NT 10.0; rv:115.0) Gecko/20100101 Firefox/115.0 \| 2026-09-06 15:23 UTC show less	Port Scan Web App Attack
🇺🇸 SX Communications	2026-09-06 13:37:51 (6 hours ago)	Web vulnerability scanning / probing from 41.141.106.251: automated requests for CMS admin paths, lo ... show more Web vulnerability scanning / probing from 41.141.106.251: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 8 hits; paths: /.env, /info.php, /phpinfo.php, /test.php. show less	Port Scan Hacking Web App Attack
🇺🇸 SX Communications	2026-09-06 13:37:51 (6 hours ago)	HTTP application-layer DoS / botnet traffic from 41.141.106.251: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 41.141.106.251: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇩🇪 big-cloud.nl	2026-09-06 13:12:43 (7 hours ago)	Try to access /.env	Web App Attack
🇮🇩 securejdprop	2026-09-06 13:04:39 (7 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SERVER WEB- ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SERVER WEB-PHP phpinfo access). show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-06 12:36:23 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 41.141.106.251 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 41.141.106.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 08:36:15.886258 2026] [security2:error] [pid 26448:tid 26448] [client 41.141.106.251:63614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sharc.d-sinema.com"] [uri "/.env"] [unique_id "ap1eP5AM68e5yyx3enIsyQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-06 12:04:55 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 41.141.106.251 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 41.141.106.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 08:04:48.415065 2026] [security2:error] [pid 24323:tid 24323] [client 41.141.106.251:55058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "secuencia.com"] [uri "/.env"] [unique_id "ap1W4H2dA6XVBY44_NLdMwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 iulianh	2026-09-06 11:54:49 (8 hours ago)	80,443	Brute-Force SSH
🇩🇰 ScamAware	2026-09-06 11:47:16 (8 hours ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: block. Cloudflare source: firewallCustom. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-06 11:46:59 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 41.141.106.251 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 41.141.106.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 07:46:54.717310 2026] [security2:error] [pid 3418:tid 3418] [client 41.141.106.251:56474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scala-global.com"] [uri "/.env"] [unique_id "ap1SrvmcU-MVAQX3-szyuQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 203.25.124.84

🇹🇼 111.70.49.179

🇷🇴 92.118.39.77

🇫🇷 51.159.111.44

🇳🇱 45.148.10.152

🇺🇸 35.238.121.250

🇺🇸 34.136.68.76

🇺🇸 143.110.157.110

🇳🇱 94.154.43.87

🇫🇷 81.171.72.135

🇹🇼 35.194.171.186

🇹🇼 34.80.185.212

🇸🇬 13.250.57.192

🇭🇰 223.197.178.95

🇺🇸 172.86.89.217

🇨🇳 117.14.112.77

🇧🇬 109.160.32.64

🇨🇦 85.217.149.72

🇸🇬 35.187.239.87

🇺🇸 34.61.87.233