AbuseIPDB » 5.161.41.123
5.161.41.123 was found in our database!
This IP was reported 42 times. Confidence of
Abuse
is 33% : ?
ISP
Hetzner Online GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS213230
Hostname(s)
static.123.41.161.5.clients.your-server.de
Domain Name
hetzner.com
Country
๐บ๐ธ
United States of America
City
Ashburn, Virginia
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 5.161.41.123 :
This IP address has been reported a total of
42
times from
9 distinct
sources.
5.161.41.123 was first reported on
April 3rd 2026 , and the most recent report was
21 hours ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ซ๐ท
Sklurk
2026-07-03 12:21:26
(21 hours ago)
Web App Attack
Web App Attack
๐ฉ๐ช
HandyTreff.de
2026-07-02 01:10:37
(2 days ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -52.88 (Bad < -10 / Very Bad < -20 / ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -52.88 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.
show less
Web App Attack
Bad Web Bot
๐ซ๐ท
Sklurk
2026-07-01 11:17:47
(2 days ago)
Web App Attack
Web App Attack
๐ซ๐ท
Sklurk
2026-06-29 10:33:15
(4 days ago)
Web App Attack
Web App Attack
๐ซ๐ท
Sklurk
2026-06-26 16:02:50
(1 week ago)
Web App Attack
Web App Attack
๐ซ๐ท
Sklurk
2026-06-25 13:23:34
(1 week ago)
Web App Attack
Web App Attack
๐ซ๐ท
Sklurk
2026-06-24 09:10:44
(1 week ago)
Web App Attack
Web App Attack
๐ซ๐ท
Sklurk
2026-06-22 22:38:08
(1 week ago)
Web App Attack
Web App Attack
๐ซ๐ท
Sklurk
2026-06-21 10:18:17
(1 week ago)
Web App Attack
Web App Attack
๐ฌ๐ท
setupgr
2026-06-21 06:39:03
(1 week ago)
(mod_security) mod_security (id:11000011) triggered by 5.161.41.123 (US/United States/Virginia/Ashbu ...
show more
(mod_security) mod_security (id:11000011) triggered by 5.161.41.123 (US/United States/Virginia/Ashburn/-/[AS213230 HETZNER-CLOUD2-AS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 21 09:38:59.578995 2026] [security2:error] [pid 554249:tid 554258] [remote 5.161.41.123:47282] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.123.41.161.5.clients.your-server.de"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/%CF%84%CE%B1_%CE%B5%CE%AF%CE%B4%CE%B7_%CF%84%CE%BF%CF%85_%CE%BE%CF%8D%CE%BB%CE%BF%CF%85/%CF%84%CF%81%CE%B1%CF%87%CE%B5%CE%AF%CE%B1-%CF%80%CE%B5%CF%8D%CE%BA%CE%B7/"] [unique_id "ajeHA-6odY7VUE--6TE_CAAAygY"]
show less
Port Scan
๐ฌ๐ท
setupgr
2026-06-20 04:52:08
(2 weeks ago)
(mod_security) mod_security (id:11000011) triggered by 5.161.41.123 (US/United States/Virginia/Ashbu ...
show more
(mod_security) mod_security (id:11000011) triggered by 5.161.41.123 (US/United States/Virginia/Ashburn/-/[AS213230 HETZNER-CLOUD2-AS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 20 07:52:06.554867 2026] [security2:error] [pid 554249:tid 554257] [remote 5.161.41.123:56426] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.123.41.161.5.clients.your-server.de"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/%CE%BD%CF%84%CE%BF%CF%85%CE%BB%CE%AC%CF%80%CE%B1/"] [unique_id "ajYcdu6odY7VUE--6THjZAAA0wU"]
show less
Port Scan
๐ซ๐ท
Sklurk
2026-06-14 11:37:37
(2 weeks ago)
Web App Attack
Web App Attack
๐ซ๐ท
Sklurk
2026-06-13 09:39:35
(3 weeks ago)
Web App Attack
Web App Attack
๐ซ๐ท
Sklurk
2026-06-10 14:06:41
(3 weeks ago)
Web App Attack
Web App Attack
๐ซ๐ท
Sklurk
2026-06-07 23:59:47
(3 weeks ago)
Web App Attack
Web App Attack
Showing 1 to
15
of 42 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: