JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.206.254.122

116.206.254.122 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 4%: ?

ISP	One Net Communication Ltd
Usage Type	Fixed Line ISP
ASN	AS63844
Domain Name	1netbd.com
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.206.254.122

Whois 116.206.254.122

IP Abuse Reports for 116.206.254.122:

This IP address has been reported a total of 26 times from 18 distinct sources. 116.206.254.122 was first reported on January 19th 2023, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 stechusa	2026-07-07 07:25:26 (22 hours ago)	[Askari] \| country=BD	Bad Web Bot DDoS Attack
🇬🇧 www.elivecd.org	2026-04-22 17:19:37 (2 months ago)	116.206.254.122 - - [22/Apr/2026:17:33:27 +0100] "GET /newsletters/?reflect_303_month=11&reflect_303 ... show more 116.206.254.122 - - [22/Apr/2026:17:33:27 +0100] "GET /newsletters/?reflect_303_month=11&reflect_303_year=2011&reflect_303_day=false&reflect_303_start=0&reflect_525_month=5&reflect_525_year=2008&reflect_525_day=false&reflect_525_start=0 HTTP/2.0" 499 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" ... show less	DDoS Attack
🇺🇸 quilla	2026-03-28 23:35:00 (3 months ago)	Botnet infected device observed in honeypot (Vector: TCP HANDSHAKE ATTACK)	DDoS Attack
🇨🇦 polycoda	2026-02-03 18:36:26 (5 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
Anonymous	2025-12-12 20:57:26 (6 months ago)	botnet	DDoS Attack
Anonymous	2025-11-25 10:12:39 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-19 08:20:55 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-16 20:02:11 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇫🇷 ᴀʀᴛ	2025-07-24 11:03:28 (11 months ago)	Triggered Cloudflare WAF (l7ddos) from BD. ASN: 63844 (ONCL-BD One Net Communication Ltd) Protocol: ... show more Triggered Cloudflare WAF (l7ddos) from BD. ASN: 63844 (ONCL-BD One Net Communication Ltd) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇩🇪 conseilgouz	2025-07-06 19:36:01 (1 year ago)	coe-17 : Block hidden directories=>/.env(/)	Hacking
Anonymous	2024-04-19 07:38:03 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-03-13 03:29:43 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 116.206.254.122 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 116.206.254.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 12 23:29:32.024305 2024] [security2:error] [pid 1868] [client 116.206.254.122:53540] [client 116.206.254.122] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ninapinta.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ninapinta.org"] [uri "/1.sql"] [unique_id "ZfEdnK2DrcuuXHaQk8whlgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-01-01 19:40:02 (2 years ago)	\| SQL injection attempt.	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2023-11-14 10:41:58 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 116.206.254.122 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 116.206.254.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 14 05:41:49.019134 2023] [security2:error] [pid 5145] [client 116.206.254.122:55713] [client 116.206.254.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.christianebooks.com"] [uri "/.env"] [unique_id "ZVNO7Qj-66ZPOnA-vSup-wAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2023-09-30 15:00:10 (2 years ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.99

🇧🇴 190.181.44.194

🇿🇲 165.56.9.114

🇺🇸 151.247.66.37

🇺🇸 144.126.216.218

🇺🇸 100.49.117.77

🇧🇬 93.94.141.115

🇳🇱 81.19.216.93

🇧🇷 45.170.230.55

🇳🇱 45.142.193.166

🇬🇧 45.133.173.208

🇬🇧 35.203.211.130

🇬🇧 35.203.211.47

🇸🇬 34.126.132.229

🇯🇵 20.89.233.37

🇺🇸 20.15.162.87

🇰🇷 1.220.64.218

🇺🇸 206.72.242.253

🇭🇰 199.45.155.77

🇳🇱 193.176.31.207