JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 123.0.16.41

123.0.16.41 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 38%: ?

38%

ISP	Icon Infotech Limited
Usage Type	Fixed Line ISP
ASN	AS56054
Domain Name	icon-infotech.net
Country	🇧🇩 Bangladesh
City	Sylhet, Sylhet Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 123.0.16.41

Whois 123.0.16.41

IP Abuse Reports for 123.0.16.41:

This IP address has been reported a total of 12 times from 7 distinct sources. 123.0.16.41 was first reported on August 16th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 milcraft.nl	2026-09-30 07:45:20 (9 hours ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇺🇸 kosada.com	2026-09-30 03:20:24 (13 hours ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=27&topics%5B2%5D=29&topics%5B3%5D=25&topics%5B4%5D=69 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0") show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-28 18:12:35 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 123.0.16.41 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 123.0.16.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:12:25.262053 2026] [security2:error] [pid 1576:tid 1576] [client 123.0.16.41:57264] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.healthmarkcounseling.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.healthmarkcounseling.com"] [uri "/wp-admin"] [unique_id "arquCTBGBHFpVwU5RPsznwAAAAY"], referer: https://healthmarkcounseling.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 10:19:05 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 123.0.16.41 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 123.0.16.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 06:19:00.972469 2026] [security2:error] [pid 609:tid 609] [client 123.0.16.41:39508] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|bikiniadvice.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bikiniadvice.com"] [uri "/"] [unique_id "aro_FNCtZoido1K1ougRVAAAABo"], referer: https://dacheckertoolfree.site/dir/custom-seo-backlinks-23855 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-09-20 03:24:24 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=30&topics%5B1%5D=34&topics%5B2%5D=47&topics%5B3%5D=37 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15") show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-18 15:38:31 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 123.0.16.41 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 123.0.16.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 11:38:25.470352 2026] [security2:error] [pid 15391:tid 15391] [client 123.0.16.41:59136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|kinhung.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kinhung.com"] [uri "/"] [unique_id "aq1a8XFXzJ773FijFifCHAAAAAI"], referer: https://backlinkanalysistool.shop/dir/backlinks-for-google-ranking-114146 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-09-07 04:14:00 (3 weeks ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A495&f%5B1%5D=digest_key_terms%3A506&f%5B2%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B358%5D=358 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇮🇹 VHosting	2026-09-05 17:45:03 (3 weeks ago)	Detected mail brute force attack from different servers	Brute-Force
🇫🇷 bigorre.org	2026-09-02 16:37:13 (4 weeks ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 kosada.com	2026-08-24 23:23:16 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 garrymenata	2026-08-24 01:18:45 (1 month ago)	123.0.16.41 - - [24/Aug/2026:02:07:34 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; ... show more 123.0.16.41 - - [24/Aug/2026:02:07:34 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 123.0.16.41 - - [24/Aug/2026:02:07:36 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 123.0.16.41 - - [24/Aug/2026:02:07:38 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
Anonymous	2026-08-16 05:50:53 (1 month ago)	denied traffic to a non-approved destination port. destination port 62547.	Port Scan

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 152.32.245.215

🇪🇸 103.23.61.174

🇳🇱 34.6.50.130

🇳🇱 89.105.192.102

🇧🇷 69.6.222.101

🇱🇹 62.60.130.242

🇮🇳 52.140.37.85

🇳🇱 45.148.10.151

🇺🇸 172.174.235.111

🇺🇸 129.121.140.71

🇸🇬 101.47.15.26

🇺🇦 91.208.194.40

🇨🇦 84.20.25.137

🇳🇱 77.239.124.155

🇨🇳 58.42.8.7

🇦🇷 38.52.89.22

🇬🇧 35.234.136.205

🇻🇪 201.249.192.30

🇹🇳 197.244.85.123

🇬🇧 195.206.182.196