JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 57.141.16.41

57.141.16.41 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 0%: ?

ISP	Meta Platforms Ireland Limited
Usage Type	Commercial
ASN	AS32934
Domain Name	facebook.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 57.141.16.41 is an IP address from within our whitelist belonging to the subnet 57.141.16.0/24, which we identify as: "Facebook".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 57.141.16.41

Whois 57.141.16.41

IP Abuse Reports for 57.141.16.41:

This IP address has been reported a total of 31 times from 15 distinct sources. 57.141.16.41 was first reported on January 24th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-19 11:03:17 (1 month ago)	Spoofing detected - pretending to be FacebookBot	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-15 20:00:52 (1 month ago)	SIMASN Account Signin during non bussiness hour.. Threat Score: 7.6/10 (HIGH). Confidence: 60%. CVSS ... show more SIMASN Account Signin during non bussiness hour.. Threat Score: 7.6/10 (HIGH). Confidence: 60%. CVSS v3.1: 7.3/10 (High). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 85%. MITRE ATT&CK: T1071 (Application Layer Protocol). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-15 19:00:53 (1 month ago)	SIMASN Account Signin during non bussiness hour.. Threat Score: 7.8/10 (HIGH). Confidence: 60%. CVSS ... show more SIMASN Account Signin during non bussiness hour.. Threat Score: 7.8/10 (HIGH). Confidence: 60%. CVSS v3.1: 7.3/10 (High). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 85%. MITRE ATT&CK: T1071 (Application Layer Protocol). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-13 20:00:53 (1 month ago)	User access to sensitive menu during non-business hours. Threat Score: 5.1/10 (MEDIUM). Confidence: ... show more User access to sensitive menu during non-business hours. Threat Score: 5.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-13 19:00:53 (1 month ago)	User access to sensitive menu during non-business hours. Threat Score: 5.2/10 (MEDIUM). Confidence: ... show more User access to sensitive menu during non-business hours. Threat Score: 5.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇸 mnsf	2026-05-06 10:06:10 (2 months ago)	Request Overload (158)	Brute-Force Web App Attack
🇩🇪 LRob	2026-04-30 07:30:11 (2 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇯🇵 beon	2026-04-30 01:37:48 (2 months ago)	[DateTime=>2026-04-30T01:37:48Z to 2026-04-30T16:25:16Z (UTC)] , [irregular_query_Hits=>11 times] , ... show more [DateTime=>2026-04-30T01:37:48Z to 2026-04-30T16:25:16Z (UTC)] , [irregular_query_Hits=>11 times] , [total_Hits=>11 times] , [Keyword=>irregular query] show less	Bad Web Bot Web App Attack
🇮🇩 hermawan	2026-04-20 03:47:01 (3 months ago)	[Mon Apr 20 10:47:00.150890 2026] [security2:error] [pid 5932:tid 139797361309376] [client 57.141.16 ... show more [Mon Apr 20 10:47:00.150890 2026] [security2:error] [pid 5932:tid 139797361309376] [client 57.141.16.41:56960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "295"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /plant-t.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/plant-t.webp"] [unique_id "aeWhtEwG6JUZ_sjZVqd2JgAAAQg"] [staklim-malang.info] [staklim-malang.info] top=[5941] [gSSkJtzRhTk] [aeWhtEwG6JUZ_sjZVqd2JgAAAQg] keep_alive=[1] [2026-04-20 10:47:00.150896] [R:aeWhtEwG6JUZ_sjZVqd2JgAAAQg] UA:'meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)' Host:'staklim-malang.info' ACCEPT:'/' ... show less	Email Spam Hacking
🇫🇷 pyrogoto	2026-04-20 02:04:40 (3 months ago)	Do not respect robots.txt	Bad Web Bot
🇮🇩 hermawan	2026-04-12 06:30:57 (3 months ago)	[Sun Apr 12 13:30:57.026542 2026] [security2:error] [pid 466818:tid 140136187635392] [client 57.141. ... show more [Sun Apr 12 13:30:57.026542 2026] [security2:error] [pid 466818:tid 140136187635392] [client 57.141.16.41:42968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "293"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Dasarian/2019/03/Infografis-Dasarian_Update_10_Maret_2019.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Dasarian/2019/03/Infografis-Dasarian_Update_10_Maret_2019.jpg"] [unique_id "ads8IEsfQBycrbBf0wdmIAAADA8"] [staklim-malang.info] [staklim-malang.info] top=[466834] [xVU4gv3ZCR0] [ads8IEsfQBycrbBf0wdmIAAADA8] keep_alive=[1] ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-04-09 02:30:53 (3 months ago)	1775701030.935127 57.141.16.41 103.166.156.58 65535_2-4-8-1-3_1380_8 2026-04-09 09:17:10 WIB ...	Email Spam Hacking
🇱🇻 garmtech.com	2026-04-02 16:20:51 (3 months ago)	IM360 WAF: Rate limit exceeded for Meta-ExternalAgent Bot MV:1	Web App Attack
🇮🇩 hermawan	2026-04-01 16:04:52 (3 months ago)	1775059484.453291 CJLqSr6CqDH1hcLpl 57.141.16.41 40018 103.166.156.58 443 tcp - 4.123008 0 0 S0 F F ... show more 1775059484.453291 CJLqSr6CqDH1hcLpl 57.141.16.41 40018 103.166.156.58 443 tcp - 4.123008 0 0 S0 F F 0 S 5 300 0 0 - 6 887529742752151_51 (empty) 65535_2-4-8-1-3_1380_8 (empty) 04/01/2026-23:04:44.453291 ... show less	Email Spam Hacking
🇺🇸 Rip	2026-03-31 15:31:31 (3 months ago)	Automated recon attempt targeting restricted and sensitive paths.	Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 185.177.72.56

🇫🇷 185.177.72.53

🇵🇭 180.194.195.188

🇺🇸 173.255.210.89

🇧🇷 168.195.27.229

🇮🇳 168.144.145.195

🇧🇷 168.0.224.215

🇩🇪 130.12.182.227

🇨🇳 122.96.28.199

🇺🇿 95.46.64.63

🇺🇸 66.207.184.232

🇺🇸 65.49.1.93

🇵🇪 45.230.251.86

🇺🇸 18.97.5.67

🇮🇳 223.181.103.65

🇰🇭 203.144.76.160

🇹🇼 198.235.24.48

🇬🇧 193.32.209.234

🇳🇮 186.77.205.242

🇫🇷 185.177.72.16