JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.142.184.104

41.142.184.104 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 98%: ?

98%

ISP	ADSL_Maroc_telecom
Usage Type	Fixed Line ISP
ASN	AS36903
Domain Name	menara.ma
Country	🇲🇦 Morocco
City	Nador, Oriental

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.142.184.104

Whois 41.142.184.104

IP Abuse Reports for 41.142.184.104:

This IP address has been reported a total of 18 times from 18 distinct sources. 41.142.184.104 was first reported on July 30th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 jeannelboutique	2026-07-30 16:40:39 (18 hours ago)	(smtpauth) Failed SMTP AUTH login from 41.142.184.104 (MA/Morocco/-)	Brute-Force
🇩🇪 jomu	2026-07-30 16:39:59 (18 hours ago)	2026-07-30T16:39:48.777612+00:00 jomu postfix/postscreen[3593436]: HANGUP after 0 from [41.142.184.1 ... show more 2026-07-30T16:39:48.777612+00:00 jomu postfix/postscreen[3593436]: HANGUP after 0 from [41.142.184.104]:53819 in tests before SMTP handshake 2026-07-30T16:39:50.348902+00:00 jomu postfix/postscreen[3593436]: PREGREET 13 after 0.63 from [41.142.184.104]:54722: EHLO RIFTON\r\n 2026-07-30T16:39:58.059482+00:00 jomu postfix/smtpd[3593437]: warning: unknown[41.142.184.104]: SASL login authentication failed: (reason unavailable), sasl_username=noauth ... show less	Brute-Force
🇺🇸 TAY	2026-07-30 16:22:19 (19 hours ago)	2026-07-31 00:21:25 auth-worker(305365): Info: sql(spam,41.142.184.104): unknown user 2026-07-31 00: ... show more 2026-07-31 00:21:25 auth-worker(305365): Info: sql(spam,41.142.184.104): unknown user 2026-07-31 00:21:39 auth-worker(305365): Info: sql(test,41.142.184.104): unknown user 2026-07-31 00:21:58 auth-worker(305365): Info: sql(info,41.142.184.104): unknown user 2026-07-31 00:22:17 auth-worker(305365): Info: sql(administrator,41.142.184.104): unknown user ... show less	Brute-Force
🇩🇪 evilazrael.de	2026-07-30 15:10:50 (20 hours ago)	SPF Fail sender not permitted to send mail for @evilazrael.net	Email Spam
🇫🇷 Faeeth	2026-07-30 15:09:14 (20 hours ago)	Multiple hits on Honeypot UID:PTRW50NM46 Port:Smtp (25)	Brute-Force
🇫🇷 0xNath	2026-07-30 14:42:27 (20 hours ago)	2026-07-30T16:42:07.099310+02:00 srv1.renaudna.fr postfix/smtpd[1165048]: NOQUEUE: reject: RCPT from ... show more 2026-07-30T16:42:07.099310+02:00 srv1.renaudna.fr postfix/smtpd[1165048]: NOQUEUE: reject: RCPT from unknown[41.142.184.104]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<RIFTON> 2026-07-30T16:42:14.575284+02:00 srv1.renaudna.fr postfix/smtpd[1165048]: NOQUEUE: reject: RCPT from unknown[41.142.184.104]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<RIFTON> 2026-07-30T16:42:25.807414+02:00 srv1.renaudna.fr postfix/smtpd[1165048]: NOQUEUE: reject: RCPT from unknown[41.142.184.104]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<RIFTON> ... show less	Brute-Force
🇷🇴 EasyNet Consulting	2026-07-30 14:40:33 (20 hours ago)	2026-07-30T17:40:27.246557+03:00 EmailStorage postfix/smtpd[2995012]: warning: unknown[41.142.184.10 ... show more 2026-07-30T17:40:27.246557+03:00 EmailStorage postfix/smtpd[2995012]: warning: unknown[41.142.184.104]: SASL login authentication failed: (reason unavailable), sasl_username=noauth 2026-07-30T17:40:27.247094+03:00 EmailStorage postfix/smtpd[2995013]: warning: unknown[41.142.184.104]: SASL login authentication failed: (reason unavailable), sasl_username=noauth 2026-07-30T17:40:27.247417+03:00 EmailStorage postfix/smtpd[2995010]: warning: unknown[41.142.184.104]: SASL login authentication failed: (reason unavailable), sasl_username=noauth 2026-07-30T17:40:27.247736+03:00 EmailStorage postfix/smtpd[2995011]: warning: unknown[41.142.184.104]: SASL login authentication failed: (reason unavailable), sasl_username=noauth 2026-07-30T17:40:28.248185+03:00 EmailStorage postfix/smtpd[2995014]: warning: unknown[41.142.184.104]: SASL login authentication failed: (reason unavailable), sasl_username=noauth 2026-07-30T17:40:33.100818+03:00 EmailStorage postfix/smtpd[2995014]: warning: unknown[41.142.1 ... show less	Brute-Force SSH
🇨🇭 GAS	2026-07-30 14:38:07 (20 hours ago)	Spamhouse blocked IPs attempts. 2026-07-30T16:37:06.600900+02:00 mail postfix/postscreen[73716]: DNS ... show more Spamhouse blocked IPs attempts. 2026-07-30T16:37:06.600900+02:00 mail postfix/postscreen[73716]: DNSBL rank 5 for [41.142.184.104]:65197 2026-07-30T16:37:21.161295+02:00 mail postfix/postscreen[73716]: DNSBL rank 5 for [41.142.184.104]:53245 2026-07-30T16:37:36.784224+02:00 mail postfix/postscreen[73716]: DNSBL rank 5 for [41.142.184.104]:56759 2026-07-30T16:37:51.249133+02:00 mail postfix/postscreen[73716]: DNSBL rank 5 for [41.142.184.104]:64561 2026-07-30T16:38:07.008574+02:00 mail postfix/postscreen[73716]: DNSBL rank 5 for [41.142.184.104]:54014 ... show less	Email Spam
🇩🇪 Herrminator	2026-07-30 14:22:22 (21 hours ago)	2026-07-30T16:21:15.223904+02:00 tjpi09 postfix/smtpd[13112]: warning: unknown[41.142.184.104]: SASL ... show more 2026-07-30T16:21:15.223904+02:00 tjpi09 postfix/smtpd[13112]: warning: unknown[41.142.184.104]: SASL login authentication failed: (reason unavailable), sasl_username=noauth 2026-07-30T16:21:15.615955+02:00 tjpi09 postfix/smtpd[13112]: NOQUEUE: reject: RCPT from unknown[41.142.184.104]: 504 5.5.2 <RIFTON>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<RIFTON> 2026-07-30T16:21:16.033341+02:00 tjpi09 postfix/smtpd[13112]: disconnect from unknown[41.142.184.104] ehlo=1 auth=0/1 mail=1 rcpt=0/1 commands=2/4 2026-07-30T16:21:25.287405+02:00 tjpi09 postfix/smtpd[13112]: warning: unknown[41.142.184.104]: SASL login authentication failed: (reason unavailable), sasl_username=spam 2026-07-30T16:21:26.659897+02:00 tjpi09 postfix/smtpd[13112]: NOQUEUE: reject: RCPT from unknown[41.142.184.104]: 504 5.5.2 <RIFTON>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected] ... show less	Brute-Force Email Spam
🇭🇺 Lacika555	2026-07-30 13:32:15 (22 hours ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
Anonymous	2026-07-30 13:19:03 (22 hours ago)	Kept connecting and disconnecting without issuing any commands	DDoS Attack
🇫🇷 EggEek	2026-07-30 12:42:07 (22 hours ago)	2026-07-30T12:41:57.976829+00:00 hyperion postfix/smtpd[983070]: NOQUEUE: reject: RCPT from unknown[ ... show more 2026-07-30T12:41:57.976829+00:00 hyperion postfix/smtpd[983070]: NOQUEUE: reject: RCPT from unknown[41.142.184.104]: 554 5.7.1 Service unavailable; Client host [41.142.184.104] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/41.142.184.104; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<RIFTON> 2026-07-30T12:41:58.335561+00:00 hyperion postfix/smtpd[983070]: NOQUEUE: reject: RCPT from unknown[41.142.184.104]: 554 5.7.1 Service unavailable; Client host [41.142.184.104] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/41.142.184.104; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<RIFTON> 2026-07-30T12:41:58.652047+00:00 hyperion postfix/smtpd[983070]: NOQUEUE: reject: RCPT from unknown[41.142.184.104]: 554 5.7.1 Service unavailable; Client host [41.142.184.104] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/41.142.184 ... show less	Brute-Force SSH
🇷🇺 webserfer	2026-07-30 12:38:09 (22 hours ago)	[f2b] smtp: denied by acl [W0:1:90d]	Email Spam Exploited Host
Anonymous	2026-07-30 12:37:41 (22 hours ago)	(UserAttack) User Attack From 41.142.184.104 (MA/Morocco/-): 1 in the last 3600 secs; Ports: ; Dir ... show more (UserAttack) User Attack From 41.142.184.104 (MA/Morocco/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026-07-30 12:37:37 auth_login authenticator failed for (RIFTON) [41.142.184.104]: 535 Incorrect authentication data (set_id=noauth) show less	Port Scan
Anonymous	2026-07-30 12:27:26 (23 hours ago)	Kept connecting and disconnecting without issuing any commands	DDoS Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.154.172.72

🇪🇸 158.158.41.79

🇬🇧 104.248.173.120

🇺🇸 18.189.74.1

🇺🇸 13.72.110.24

🇮🇳 216.10.242.215

🇷🇺 213.155.195.65

🇳🇿 202.50.176.8

🇺🇸 198.199.87.216

🇵🇦 190.140.118.232

🇯🇵 168.138.213.229

🇩🇪 167.94.145.23

🇺🇸 162.216.150.115

🇺🇸 162.216.150.58

🇨🇳 119.3.162.103

🇮🇳 103.44.52.154

🇫🇷 85.217.140.54

🇫🇷 85.217.140.28

🇵🇱 51.68.151.167

🇦🇲 38.191.248.41