JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.23.160.215

104.23.160.215 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Portland, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 104.23.160.215 is an IP address from within our whitelist belonging to the subnet 104.16.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 104.23.160.215

Whois 104.23.160.215

IP Abuse Reports for 104.23.160.215:

This IP address has been reported a total of 28 times from 11 distinct sources. 104.23.160.215 was first reported on November 21st 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-25 18:54:06 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 14:53:58.469739 2026] [security2:error] [pid 4602:tid 4602] [client 104.23.160.215:9994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hollywooddrummers.mikedeutsch.com"] [uri "/.git/HEAD"] [unique_id "ao3kxmuBgOOkIL7Sz1_74gAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 18:13:33 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 14:13:26.976483 2026] [security2:error] [pid 23491:tid 23491] [client 104.23.160.215:9539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.markshvarts.com"] [uri "/.git/config"] [unique_id "ao3bRi8EEJSWjXbLcxbyzwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 15:45:17 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 11:45:08.818548 2026] [security2:error] [pid 5036:tid 5036] [client 104.23.160.215:10628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.pinhole.us"] [uri "/.git/config"] [unique_id "ao24hFh4REg9xHCQdBOuYgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 13:39:31 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 09:39:26.202224 2026] [security2:error] [pid 2062:tid 2062] [client 104.23.160.215:13914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.miroddi.com"] [uri "/.git/config"] [unique_id "ao2bDk4aqsk-8FCmWrAgHwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 13:19:44 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 09:19:40.396300 2026] [security2:error] [pid 14324:tid 14324] [client 104.23.160.215:12907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestattorneys.com"] [uri "/.git/HEAD"] [unique_id "ao2WbKiJ8-loZ2aw01vBrAAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 12:10:08 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 08:10:00.102036 2026] [security2:error] [pid 4294:tid 4294] [client 104.23.160.215:13253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackstarmgmt.mydobdate.net"] [uri "/.git/config"] [unique_id "ao2GGKTj7e7ppCiyBQS-ngAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 08:07:31 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 04:07:28.065560 2026] [security2:error] [pid 1219378:tid 1219509] [client 104.23.160.215:13117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daraluz.net"] [uri "/.git/config"] [unique_id "ao1NQKhAv9q3w9CElHh6-AAAAlE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 01:18:43 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 21:18:38.199679 2026] [security2:error] [pid 28571:tid 28571] [client 104.23.160.215:11335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.michaelsabbey.org"] [uri "/.git/config"] [unique_id "aoztbq52A_ebl7Rj4cUKWQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 23:40:36 (22 hours ago)	(mod_security) mod_security (id:949110) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:949110) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 19:40:33.899788 2026] [security2:error] [pid 28610:tid 28610] [client 104.23.160.215:14156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "clintess.biz"] [uri "/.git/HEAD"] [unique_id "aozWcffS5_K9YG7hAsYpAgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 22:09:24 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 18:09:19.084095 2026] [security2:error] [pid 16728:tid 16728] [client 104.23.160.215:12972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.star-discgolf.com"] [uri "/.git/config"] [unique_id "aozBD4zLOcWgVuUmTgLVFAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-24 22:00:52 (1 day ago)	Auto-ban: >3000 req/min op 2026-08-24	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-08-24 15:06:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.23.160.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 11:06:37.885553 2026] [security2:error] [pid 17013:tid 17013] [client 104.23.160.215:13714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.puduspoems.com"] [uri "/.git/config"] [unique_id "aoxd_SJnsO1y1AFTxj93EwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Little Iguana	2026-08-24 12:09:56 (1 day ago)	Attempt to hack Wordpress Login, XMLRPC or other login	Hacking
🇩🇪 Grossmann-Gruppe	2026-08-22 03:44:09 (3 days ago)	Plesk Fail2Ban: plesk-modsecurity	Hacking Brute-Force
🇧🇪 voormedia	2026-08-21 14:55:27 (4 days ago)	Accessed trap at '/.git/HEAD'	Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2400:cb00:988:1000:8441:1277:3c23:c99e

🇳🇱 185.242.226.19

🇮🇳 103.216.145.2

🇧🇷 179.42.146.179

🇺🇸 172.174.46.118

🇳🇱 45.148.10.240

🇸🇮 31.57.184.42

🇮🇳 152.52.240.162

🇲🇦 105.74.66.217

🇨🇭 82.206.73.133

🇬🇭 74.244.119.98

🇮🇳 74.125.16.184

🇺🇸 66.240.223.214

🇺🇦 2a09:bac6:5958:52d::84:a8

🇭🇰 194.187.178.72

🇺🇸 192.241.171.92

🇻🇪 190.74.215.245

🇦🇷 190.57.217.20

🇹🇭 118.193.56.235

🇸🇬 101.100.194.181