AbuseIPDB » 41.143.159.223

41.143.159.223 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 50%: ?

50%

ISP	ADSL_Maroc_telecom
Usage Type	Fixed Line ISP
Domain Name	menara.ma
Country	Morocco
City	Kenitra, Rabat-Sale-Kenitra

Report 41.143.159.223

Whois 41.143.159.223

IP Abuse Reports for 41.143.159.223:

This IP address has been reported a total of 42 times from 14 distinct sources. 41.143.159.223 was first reported on November 12th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2024-11-14 20:53:19 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2024-11-13 20:53:19 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
tecnicorioja	2024-11-12 23:00:29 (3 weeks ago)	(Mod_security) [12/Nov/2024:10:47:52.601287	Brute-Force Bad Web Bot Web App Attack
backslash	2024-11-12 22:00:09 (3 weeks ago)	block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6	Bad Web Bot
TPI-Abuse	2024-11-12 19:30:13 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 41.143.159.223 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 41.143.159.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 14:30:06.894619 2024] [security2:error] [pid 19423:tid 19423] [client 41.143.159.223:54497] [client 41.143.159.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "serconpri.com"] [uri "/.env"] [unique_id "ZzOsvvD55Z4w9hXsq2VwQQAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-12 18:26:01 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 41.143.159.223 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 41.143.159.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 13:25:54.989926 2024] [security2:error] [pid 29433:tid 29433] [client 41.143.159.223:51287] [client 41.143.159.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegrousewoods.com"] [uri "/.env"] [unique_id "ZzOdsgd_0XUgvogoSA6e-QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-12 17:55:58 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 41.143.159.223 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 41.143.159.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 12:55:55.967098 2024] [security2:error] [pid 27642:tid 27642] [client 41.143.159.223:54576] [client 41.143.159.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "etemcolak.com"] [uri "/.env"] [unique_id "ZzOWq_7CWo3eryiotuhxQwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-12 17:15:56 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 41.143.159.223 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 41.143.159.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 12:15:52.574502 2024] [security2:error] [pid 18408:tid 18408] [client 41.143.159.223:52719] [client 41.143.159.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seizethisseason.com"] [uri "/.env"] [unique_id "ZzONSBhvXrBkEpFt2XFmMwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-12 16:40:46 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 41.143.159.223 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 41.143.159.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 11:40:39.199785 2024] [security2:error] [pid 880337:tid 880337] [client 41.143.159.223:60735] [client 41.143.159.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "braleygroup.com"] [uri "/.env"] [unique_id "ZzOFB_1mea_O9eHH6CvqpgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-12 15:43:22 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 41.143.159.223 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 41.143.159.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 10:43:16.275829 2024] [security2:error] [pid 3879:tid 3879] [client 41.143.159.223:49572] [client 41.143.159.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zabdisrl.com"] [uri "/.env"] [unique_id "ZzN3lAZPC8PfFtP60MFAowAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-12 15:20:45 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 41.143.159.223 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 41.143.159.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 10:20:39.867680 2024] [security2:error] [pid 29337:tid 29337] [client 41.143.159.223:61426] [client 41.143.159.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anxietyquest.com"] [uri "/.env"] [unique_id "ZzNyR7M32vfntw232lasbQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
BlueWire Hosting	2024-11-12 15:10:08 (3 weeks ago)	Detected as a bad bot	Bad Web Bot
ghostwarriors	2024-11-12 14:50:03 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-12 14:45:21 (3 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
ksol-hostmaster	2024-11-12 14:34:38 (3 weeks ago)	2024/11/12 15:34:37 [error] 93679#299571: 112 access forbidden by rule, client: 41.143.159.223, ser ... show more2024/11/12 15:34:37 [error] 93679#299571: 112 access forbidden by rule, client: 41.143.159.223, server: revolutionbim.com, request: "GET /.env HTTP/1.1", host: "revolutionbim.com" ... show less	Web Spam