JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.142.237.130

41.142.237.130 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 62%: ?

62%

ISP	ADSL_Maroc_telecom
Usage Type	Fixed Line ISP
ASN	AS36903
Domain Name	menara.ma
Country	🇲🇦 Morocco
City	Meknes, Fes-Meknes

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.142.237.130

Whois 41.142.237.130

IP Abuse Reports for 41.142.237.130:

This IP address has been reported a total of 12 times from 10 distinct sources. 41.142.237.130 was first reported on August 30th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-31 01:29:24 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 41.142.237.130 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 41.142.237.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 21:29:18.497473 2026] [security2:error] [pid 20343:tid 20343] [client 41.142.237.130:54257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agupgrade.net"] [uri "/.git/config"] [unique_id "apTY7mdAB7bcbbvGyEX0agAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 23:58:20 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 41.142.237.130 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 41.142.237.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 19:58:15.660184 2026] [security2:error] [pid 3240141:tid 3240247] [client 41.142.237.130:59520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "apada.com"] [uri "/.git/config"] [unique_id "apTDl7FULgoX57KyQ4pWnAAAAFY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 22:49:42 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 41.142.237.130 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 41.142.237.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 18:49:36.036080 2026] [security2:error] [pid 6294:tid 6294] [client 41.142.237.130:63082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssion.com"] [uri "/.git/config"] [unique_id "apSzgPrRnjlYDEcNGVnSqQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-08-30 18:36:34 (2 days ago)	.env scanning [BY]	Web App Attack
🇮🇹 CoreTech srl	2026-08-30 17:58:56 (2 days ago)	cloudlinux2 fail2ban: 2026-08-30 19:53:58,949 fail2ban.filter [1459]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-30 19:53:58,949 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 78.166.68.240 - 2026-08-30 19:53:58cloudlinux2 fail2ban: 2026-08-30 19:54:33,755 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 216.234.213.156 - 2026-08-30 19:54:33cloudlinux2 fail2ban: 2026-08-30 19:55:37,341 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 180.153.236.37 - 2026-08-30 19:55:37cloudlinux2 fail2ban: 2026-08-30 19:55:48,068 fail2ban.filter [1459]: INFO [recidive] Found 216.234.213.156 - 2026-08-30 19:55:48cloudlinux2 fail2ban: 2026-08-30 19:55:47,700 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 216.234.213.156 - 2026-08-30 19:55:47cloudlinux2 fail2ban: 2026-08-30 19:55:48,061 fail2ban.actions [1459]: NOTICE [plesk-modsecurity] Ban 216.234.213.156cloudlinux2 fail2ban: 2026-08-30 19:56:04,109 fail2ban.filter [1459]: INFO [plesk-wordpress] Found 195.154.31.143 - 2026-08-30 19:56:03cloudlinux2 fail2ban show less	Web App Attack
🇫🇷 ELYAZ	2026-08-30 16:31:15 (2 days ago)	(y3) Failed access -byebye- from 41.142.237.130 (MA/Morocco/-): (CF_ENABLE)	Hacking
🇺🇸 WellSpring	2026-08-30 15:22:44 (3 days ago)	env leak on 208.today/prod/.env — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇫🇷 dynamix	2026-08-30 14:11:32 (3 days ago)	Multiple WAF Violations	Web App Attack
🇷🇺 DZBOT	2026-08-30 05:54:26 (3 days ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇮🇹 VHosting	2026-08-30 05:10:03 (3 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 nyt	2026-08-30 04:35:13 (3 days ago)	Path Traversal, Accessing AWS credentials endpoint, returns 404	Web App Attack
🇩🇪 EGP Abuse Dept	2026-08-30 04:13:22 (3 days ago)	Scanning for web/db/file exploits on www.ngs.nl	SQL Injection Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.115.100.138

🇨🇳 106.15.238.36

🇷🇴 89.121.255.194

🇺🇸 71.62.71.151

🇶🇦 34.18.205.136

🇨🇦 20.104.49.130

🇬🇧 5.226.140.18

🇮🇳 2404:6800:4013:804::127

🇫🇮 157.22.72.191

🇲🇾 149.118.158.8

🇺🇸 137.184.179.158

🇨🇳 115.231.78.11

🇫🇷 85.217.140.29

🇳🇱 62.93.178.66

🇳🇬 41.207.248.198

🇧🇩 27.147.249.147

🇨🇦 24.244.93.239

🇦🇷 191.103.51.11

🇨🇳 175.9.220.17

🇳🇱 172.253.95.214