JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.106.44.110

23.106.44.110 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 47%: ?

47%

ISP	Leaseweb USA, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS7203
Domain Name	leaseweb.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.106.44.110

Whois 23.106.44.110

IP Abuse Reports for 23.106.44.110:

This IP address has been reported a total of 15 times from 8 distinct sources. 23.106.44.110 was first reported on June 19th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Philister11	2026-07-02 01:06:31 (20 hours ago)	CrowdSec: crowdsecurity/http-bad-user-agent (US/AS7203)	Bad Web Bot Web App Attack
🇫🇮 oh.mg	2026-06-29 12:51:34 (3 days ago)	[Mon Jun 29 14:51:15.897383 2026] [security2:error] [pid 1652415:tid 1652452] [client 23.106.44.110: ... show more [Mon Jun 29 14:51:15.897383 2026] [security2:error] [pid 1652415:tid 1652452] [client 23.106.44.110:0] [client 23.106.44.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmn.eco"] [uri "/images/images/cache.php"] [unique_id "akJqQ5Wo64eXdtwRQ_49BgAAAUQ"], referer: www.google.com [Mon Jun 29 14:51:33.733484 2026] [security2:error] [pid 1652414:tid 1652417] [client 23.106.44.110:0] [client 23.106.44.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver ... show less	Web App Attack Bad Web Bot
Anonymous	2026-06-29 09:53:41 (3 days ago)	Suspicious user agent	Web App Attack
🇨🇭 Origon	2026-06-29 07:11:41 (3 days ago)	http-bad-user-agent - IP: 23.106.44.110 - time="2026-06-29T09:11:40+02:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 23.106.44.110 - time="2026-06-29T09:11:40+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 23.106.44.110 (US/7203) : 4h ban on Ip 23.106.44.110" module=db show less	Bad Web Bot
🇩🇪 Philister11	2026-06-27 00:19:10 (5 days ago)	CrowdSec: crowdsecurity/http-bad-user-agent (US/AS7203)	Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-06-26 15:28:33 (6 days ago)	Found User-Agent associated with security scanner. Matched phrase "Mozlila" at REQUEST_HEADERS:User- ... show more Found User-Agent associated with security scanner. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. (913100-mnz6-1) show less	Hacking Bad Web Bot
🇮🇪 Coolnagour	2026-06-26 01:02:55 (6 days ago)	http-probing: /images/images/cache.php	Web App Attack
🇨🇦 dispensight	2026-06-24 16:31:41 (1 week ago)	SSL log traffic to dispensight.com: 12 req(s). URIs: /. UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892 ... show more SSL log traffic to dispensight.com: 12 req(s). URIs: /. UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892. Flag: high-volume root-only scanning. show less	Port Scan Bad Web Bot
🇫🇮 oh.mg	2026-06-24 15:03:12 (1 week ago)	[Wed Jun 24 17:02:43.925699 2026] [security2:error] [pid 739259:tid 739302] [client 23.106.44.110:0] ... show more [Wed Jun 24 17:02:43.925699 2026] [security2:error] [pid 739259:tid 739302] [client 23.106.44.110:0] [client 23.106.44.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmn.eco"] [uri "/images/images/cache.php"] [unique_id "ajvxk7bXqmuUPYvlgqm2GQAAAg4"], referer: www.google.com [Wed Jun 24 17:03:11.639388 2026] [security2:error] [pid 739258:tid 739280] [client 23.106.44.110:0] [client 23.106.44.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWA ... show less	Web App Attack Bad Web Bot
Anonymous	2026-06-24 04:31:12 (1 week ago)	Suspicious user agent	Web App Attack
🇨🇭 Origon	2026-06-23 17:13:07 (1 week ago)	http-bad-user-agent - IP: 23.106.44.110 - time="2026-06-23T19:13:06+02:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 23.106.44.110 - time="2026-06-23T19:13:06+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 23.106.44.110 (US/7203) : 4h ban on Ip 23.106.44.110" module=db show less	Bad Web Bot
🇫🇮 oh.mg	2026-06-20 11:48:08 (1 week ago)	[Sat Jun 20 13:47:49.616936 2026] [security2:error] [pid 4187559:tid 4187571] [client 23.106.44.110: ... show more [Sat Jun 20 13:47:49.616936 2026] [security2:error] [pid 4187559:tid 4187571] [client 23.106.44.110:0] [client 23.106.44.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmn.eco"] [uri "/images/images/cache.php"] [unique_id "ajZ95QF-ek99Y0lO29HhtAAAAEo"], referer: www.google.com [Sat Jun 20 13:48:08.251364 2026] [security2:error] [pid 4185262:tid 4185284] [client 23.106.44.110:0] [client 23.106.44.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver ... show less	Web App Attack Bad Web Bot
Anonymous	2026-06-20 03:03:11 (1 week ago)	Suspicious user agent	Web App Attack
🇨🇭 Origon	2026-06-19 21:15:59 (1 week ago)	http-bad-user-agent - IP: 23.106.44.110 - time="2026-06-19T23:15:59+02:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 23.106.44.110 - time="2026-06-19T23:15:59+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 23.106.44.110 (US/7203) : 4h ban on Ip 23.106.44.110" module=db show less	Bad Web Bot
Anonymous	2026-06-19 08:24:15 (1 week ago)	Multiple web server 400 error codes from same source ip	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.231.89.209

🇧🇷 190.115.84.25

🇺🇦 185.5.254.152

🇱🇹 81.30.98.144

🇱🇹 45.227.254.170

🇺🇸 34.21.103.187

🇺🇸 20.163.26.91

🇺🇸 18.214.186.220

🇺🇦 95.46.142.80

🇻🇪 38.74.245.13

🇷🇺 213.110.228.81

🇵🇱 194.180.49.108

🇺🇸 166.62.41.190

🇧🇷 160.19.241.126

🇨🇳 150.255.39.49

🇧🇬 78.128.113.46

🇰🇷 59.24.133.197

🇧🇷 20.226.36.195

🇭🇰 20.205.12.152

🇺🇸 216.180.246.155