JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.23.239.239

198.23.239.239 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 0%: ?

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	198-23-239-239-host.colocrossing.com
Domain Name	colocrossing.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.23.239.239

Whois 198.23.239.239

IP Abuse Reports for 198.23.239.239:

This IP address has been reported a total of 12 times from 9 distinct sources. 198.23.239.239 was first reported on January 13th 2023, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-12-02 22:07:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 198.23.239.239 (198-23-239-239-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.23.239.239 (198-23-239-239-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:07:52.750918 2025] [security2:error] [pid 12204:tid 12204] [client 198.23.239.239:50009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.farmers123.com"] [uri "/sample.htaccess"] [unique_id "aS9jOJJC98KvXG0P8ql-lAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-01 01:58:55 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 198.23.239.239 (198-23-239-239-host.colocrossin ... show more (mod_security) mod_security (id:210730) triggered by 198.23.239.239 (198-23-239-239-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 21:58:48.311194 2025] [security2:error] [pid 4167172:tid 4167199] [client 198.23.239.239:46089] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.kettlehill.net\|F\|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.kettlehill.net"] [uri "/server.key"] [unique_id "aLT92OryNSoVQ-6inckxbAAAAU4"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2025-08-18 09:41:50 (9 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
🇩🇪 SCHAPPY	2025-07-16 19:00:10 (10 months ago)	IP was involved in L7 DDoS attack.	DDoS Attack
🇺🇸 ChamberofCommerce.com	2023-11-06 02:27:16 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-11-02 04:25:23 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-30 20:29:41 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
Anonymous	2023-10-04 11:02:23 (2 years ago)	Common attack or app scan event detected and blocked	Port Scan Hacking Web App Attack
Anonymous	2023-08-02 01:43:00 (2 years ago)	"Illegal file type"	Brute-Force
Anonymous	2023-07-28 07:17:27 (2 years ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
🇫🇷 Dorian GRANDHAY	2023-04-21 00:45:30 (3 years ago)	198.23.239.239 (US/United States/198-23-239-239-host.colocrossing.com), 5 distributed cpanel attacks ... show more 198.23.239.239 (US/United States/198-23-239-239-host.colocrossing.com), 5 distributed cpanel attacks on account [admin] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: 154.92.122.114 - admin [04/21/2023:00:45:24 -0000] "POST" FAILED LOGIN cpdavd: Could not fetch system home directory for admin 198.23.239.239 - admin [04/21/2023:00:44:11 -0000] "POST" FAILED LOGIN cpdavd: Could not fetch system home directory for admin 104.227.76.36 - admin [04/21/2023:00:44:12 -0000] "POST" FAILED LOGIN cpdavd: Could not fetch system home directory for admin 171.22.132.70 - admin [04/21/2023:00:44:13 -0000] "GET" FAILED LOGIN cpdavd: Could not fetch system home directory for admin 161.123.151.219 - admin [04/21/2023:00:44:28 -0000] "GET" FAILED LOGIN cpdavd: Could not fetch system home directory for admin IP Addresses Blocked: 154.92.122.114 (RO/Romania/-) show less	Port Scan
Anonymous	2023-01-13 11:28:09 (3 years ago)	Malicious activity detected	Hacking Brute-Force

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.118

🇭🇰 199.45.154.115

🇮🇷 185.83.88.248

🇳🇱 176.65.149.30

🇺🇸 47.251.252.169

🇺🇸 34.162.100.166

🇬🇧 195.140.214.28

🇬🇧 194.50.235.147

🇨🇳 180.112.81.188

🇧🇷 179.48.4.14

🇳🇱 176.65.139.56

🇱🇾 160.19.103.218

🇺🇸 150.107.38.225

🇨🇭 85.5.148.125

🇺🇸 50.16.68.7

🇲🇾 49.124.151.85

🇺🇸 2607:f8b0:4001:c32::12e

🇺🇸 2604:a880:400:d1:0:4:8c0c:1

🇹🇷 176.91.181.25

🇸🇪 138.124.71.25