JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.141.247.52

41.141.247.52 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 89%: ?

89%

ISP	ADSL_Maroc_telecom
Usage Type	Fixed Line ISP
ASN	AS36903
Domain Name	menara.ma
Country	🇲🇦 Morocco
City	Marrakesh, Marrakesh-Safi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.141.247.52

Whois 41.141.247.52

IP Abuse Reports for 41.141.247.52:

This IP address has been reported a total of 23 times from 16 distinct sources. 41.141.247.52 was first reported on June 3rd 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 conseilgouz	2026-07-08 09:59:42 (4 hours ago)	ame-12 : Block return, carriage return, ... characters=>/manifestations/programme-2025/ceremonie-du- ... show more ame-12 : Block return, carriage return, ... characters=>/manifestations/programme-2025/ceremonie-du-souvenir-2025?catid=%3C%2Fscript%3E%27%5C%22%3E%3Cimg+sr...(>) show less	Hacking
🇧🇪 cmbplf	2026-07-08 09:33:46 (4 hours ago)	509 requests with url.path phpinfo.php 493 requests with url.path /phpinfo.php 399 requests with ... show more 509 requests with url.path phpinfo.php 493 requests with url.path /phpinfo.php 399 requests with url.path *.env show less	Brute-Force Bad Web Bot
Anonymous	2026-07-08 09:00:02 (5 hours ago)	suspicious request in access.log	Web App Attack
🇺🇸 Ar1s	2026-07-08 08:01:58 (6 hours ago)	[1:2019526] ET WEB_SERVER WEB-PHP phpinfo access ::: Port: 80/TCP	Exploited Host
🇨🇭 backslash	2026-07-08 08:00:00 (6 hours ago)		Web App Attack
🇺🇸 interbiznw.com	2026-07-08 06:59:50 (7 hours ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 06:39:34 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 41.141.247.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 41.141.247.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 02:39:25.783922 2026] [security2:error] [pid 6368:tid 6368] [client 41.141.247.52:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barryherbach.com"] [uri "/.env"] [unique_id "ak3wnaRG4VWQO-vdGx8nvwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 pm33	2026-07-08 06:12:30 (7 hours ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 06:00:31 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 41.141.247.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 41.141.247.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 02:00:25.781903 2026] [security2:error] [pid 12347:tid 12347] [client 41.141.247.52:59180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ballantinepaintinganddrywall.com"] [uri "/.env"] [unique_id "ak3nefsHbCpu8rHxOW6UvAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 Jim Keir	2026-07-08 05:52:26 (8 hours ago)	2026-07-08 05:52:25 41.141.247.52 File scanning, blocking 41.141.247.52 for 5 minutes	Web App Attack
🇺🇸 Lee Daniel	2026-07-08 05:51:05 (8 hours ago)	41.141.247.52 - - [08/Jul/2026:01:51:05 -0400] "GET /.env HTTP/1.1" 403 4786 "https://bajanpro.com/. ... show more 41.141.247.52 - - [08/Jul/2026:01:51:05 -0400] "GET /.env HTTP/1.1" 403 4786 "https://bajanpro.com/.env" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 05:31:04 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 41.141.247.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 41.141.247.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 01:30:59.455720 2026] [security2:error] [pid 13666:tid 13666] [client 41.141.247.52:49849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "babylontravelone.com"] [uri "/.env"] [unique_id "ak3gkxCEup3XDgA6u_NJfwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 04:53:17 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 41.141.247.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 41.141.247.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 00:53:14.013940 2026] [security2:error] [pid 3704:tid 3704] [client 41.141.247.52:56961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avrknives.com"] [uri "/.env"] [unique_id "ak3XuiGOHSWSXu4LbcjZhgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Mundo Bueno	2026-07-08 04:40:00 (9 hours ago)	[ISILIA Protection v2.1] Tentative d'accès: /info.php \| Pays: MA \| UA: Mozilla/5.0 (X11; Ubuntu; Lin ... show more [ISILIA Protection v2.1] Tentative d'accès: /info.php \| Pays: MA \| UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 04:36:30 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 41.141.247.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 41.141.247.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 00:36:27.317248 2026] [security2:error] [pid 1129:tid 1129] [client 41.141.247.52:53846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autumn-kennedy.com"] [uri "/.env"] [unique_id "ak3TyyEE_JTRoldvcJhpUgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇿 94.20.141.135

🇳🇱 161.35.83.56

🇺🇸 147.182.135.71

🇨🇳 116.179.37.33

🇷🇺 80.244.43.101

🇷🇺 78.107.31.154

🇺🇸 70.120.203.193

🇬🇧 45.82.76.114

🇧🇦 31.176.151.130

🇺🇸 198.11.177.243

🇲🇾 183.171.49.158

🇺🇸 181.215.65.188

🇧🇷 179.84.134.42

🇺🇸 104.243.35.120

🇭🇰 103.103.245.61

🇳🇱 91.92.242.54

🇫🇷 62.84.188.37

🇳🇱 45.148.10.157

🇲🇼 41.70.94.2

🇰🇷 13.209.21.110