JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.104.162.101

23.104.162.101

Neutral Activity

13 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

LeaseWeb USA, Inc. Los Angeles

Usage Type

Data Center/Web Hosting/Transit

ASN

AS395954

Domain Name

leaseweb.com

Country

🇺🇸 United States of America

City

Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

23.104.162.101 has been reported 13 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 23.104.162.101:

This IP address has been reported a total of 13 times from 4 distinct sources. 23.104.162.101 was first reported on May 18th 2021, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-04-05 01:21:31 (5 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-21.23.104.162.101.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-21.23.104.162.101.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-01-25 11:37:54 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 25 06:37:47.755753 2025] [security2:error] [pid 1735455:tid 1735455] [client 23.104.162.101:36524] [client 23.104.162.101] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|cedricwillems.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "cedricwillems.com"] [uri "/guestbookwrite.htm/trackback/"] [unique_id "Z5TNC3Hi3oCKNtQvTvx5kAAAAA0"], referer: http://cedricwillems.com/guestbookwrite.htm/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-17 11:51:30 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 17 06:51:23.026871 2025] [security2:error] [pid 32591:tid 32591] [client 23.104.162.101:52570] [client 23.104.162.101] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.greatwesternfirearms.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.greatwesternfirearms.com"] [uri "/wp-comments-post.php"] [unique_id "Z4pEO5sK8SpuscnxalzjIAAAAAk"], referer: http://www.greatwesternfirearms.com/history/? show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-15 22:19:59 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 15 17:19:56.192572 2024] [security2:error] [pid 18537:tid 18604] [client 23.104.162.101:33744] [client 23.104.162.101] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|whitecrosslibrary.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "whitecrosslibrary.com"] [uri "/revolutionary-advice-from-global-leaders-1/trackback/"] [unique_id "Z19WDOVq5mjwFxX82Ei5IgAAAcU"], referer: http://whitecrosslibrary.com/revolutionary-advice-from-global-leaders-1/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-14 09:33:16 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 14 04:33:10.213949 2024] [security2:error] [pid 13093:tid 13093] [client 23.104.162.101:41116] [client 23.104.162.101] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|bigchus.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "bigchus.com"] [uri "/caleidoscopia/wp-trackback.php"] [unique_id "Z11Q1uI1jjIZYaebRVr8dAAAAAA"], referer: http://bigchus.com/caleidoscopia/wp-trackback.php?p=513 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-18 22:17:50 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 18 17:17:43.047020 2024] [security2:error] [pid 518659:tid 518659] [client 23.104.162.101:38249] [client 23.104.162.101] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|systemcapacityoptimization.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "systemcapacityoptimization.com"] [uri "/kasanda/trackback/"] [unique_id "Zzu9B1EQrNGC_OL2dikfLgAAAAg"], referer: http://systemcapacityoptimization.com/kasanda/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-18 18:40:28 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 18 13:40:20.349631 2024] [security2:error] [pid 2208:tid 2226] [client 23.104.162.101:42259] [client 23.104.162.101] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.chelseyrae.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.chelseyrae.com"] [uri "/fashion/tuesday-shoeday/trackback/"] [unique_id "ZzuKFCO29jnJ7-3WRGsC5gAAAI4"], referer: http://www.chelseyrae.com/fashion/tuesday-shoeday/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-13 05:09:17 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 13 00:09:09.128201 2024] [security2:error] [pid 28241:tid 28241] [client 23.104.162.101:50177] [client 23.104.162.101] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|itecsis.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "itecsis.com"] [uri "/contacto.html/trackback/"] [unique_id "ZzQ0dbaPrtfTldvN-5VaQgAAAAo"], referer: http://itecsis.com/contacto.html/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-12 19:09:25 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 14:09:16.307421 2024] [security2:error] [pid 30913:tid 30913] [client 23.104.162.101:40660] [client 23.104.162.101] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|craftammie.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "craftammie.com"] [uri "/contact.html/trackback/"] [unique_id "ZzOn3LvtECUCeUpK2Xjw-wAAAAE"], referer: http://craftammie.com/contact.html/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-12 07:41:58 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 02:41:50.673281 2024] [security2:error] [pid 14156:tid 14156] [client 23.104.162.101:32825] [client 23.104.162.101] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|kadimasecurity.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "kadimasecurity.com"] [uri "/trackback/"] [unique_id "ZzMGvv2Lg73z4ymk9iY0ZwAAAAw"], referer: http://kadimasecurity.com/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-30 12:09:07 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 23.104.162.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 30 08:09:01.044753 2024] [security2:error] [pid 26138:tid 26138] [client 23.104.162.101:60264] [client 23.104.162.101] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|home.agingworkforcenews.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "home.agingworkforcenews.com"] [uri "/2008/11/case-study-how-one-uk-business.html/trackback/"] [unique_id "ZyIh3a7t2Wcuelu5sDB43gAAAA8"], referer: http://home.agingworkforcenews.com/2008/11/case-study-how-one-uk-business.html/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2024-03-20 06:31:01 (2 years ago)		Bad Web Bot
🇺🇸 HJ5Ss4Ju	2021-05-18 18:13:34 (5 years ago)	WordPress comment spam -- YLJpWaS -- 2021-05-19T05:02:51+00:00	Blog Spam

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 186.12.244.146

🇺🇸 179.61.137.23

🇺🇸 142.93.10.31

🇮🇳 115.242.226.54

🇹🇼 111.70.3.108

🇺🇸 65.49.1.232

🇺🇸 47.88.18.115

🇺🇦 176.98.71.101

🇺🇸 147.185.132.200

🇨🇳 111.26.115.124

🇨🇳 111.14.105.62

🇩🇪 104.248.134.221

🇺🇸 104.236.202.215

🇧🇩 103.213.238.91

🇷🇺 94.25.40.30

🇨🇦 50.21.22.50

🇺🇸 35.222.32.63

🇮🇳 27.61.153.32

🇳🇱 195.178.110.218

🇧🇷 187.60.191.227