JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.108.48.69

23.108.48.69 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	Leaseweb USA, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS393886
Domain Name	leaseweb.com
Country	🇺🇸 United States of America
City	Miami, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.108.48.69

Whois 23.108.48.69

IP Abuse Reports for 23.108.48.69:

This IP address has been reported a total of 16 times from 9 distinct sources. 23.108.48.69 was first reported on April 1st 2024, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2025-10-30 01:34:56 (9 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
Anonymous	2025-10-30 00:46:15 (9 months ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2025-10-27 23:37:35 (9 months ago)	(mod_security) mod_security (id:210831) triggered by 23.108.48.69 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 23.108.48.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 27 19:37:27.805268 2025] [security2:error] [pid 28131:tid 28131] [client 23.108.48.69:41301] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|thechoiceint.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "thechoiceint.com"] [uri "/webalizer/usage_200905.html"] [unique_id "aQACN4dY5j2thxH2Go9STwAAAAs"], referer: http://thechoiceint.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-10-27 12:33:08 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 dynamix	2025-10-27 03:39:09 (9 months ago)	Multiple WAF Violations	Web App Attack
🇪🇸 el-brujo	2025-10-25 08:16:49 (9 months ago)	25/Oct/2025:10:16:49.037522 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 25/Oct/2025:10:16:49.037522 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 23.108.48.69] ModSecurity: Warning. Pattern match "(?:\\\\\\\\bhttp/\\\\\\\\d\|<(?:html\|meta)\\\\\\\\b)" at ARGS:url. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "108"] [id "921130"] [msg "HTTP Response Splitting Attack"] [data "Matched Data: <meta found within ARGS:url: http://[email protected]/?a[]=<a href=http://markets.financialcontent.com/citcomm.kvoram/article/abnewswire-2025-8-20-daigle-roofing-and-construction-strengthens-louisiana-homes-with-trusted-roofing-expertise/>daigle roofing and construction</a><meta http-equiv=refresh content=0;url=http://markets.financialcontent.com/citcomm.kvoram/article/abnewswire-2025-8-20-daigle-roofing-and-construction-strengthens-louisiana-homes-with-trusted-roofing-expert..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-mu ... show less	Hacking Web App Attack
🇵🇱 sefinek.net	2025-10-21 17:48:37 (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 exxos	2025-10-19 15:05:42 (10 months ago)	HTTP1.x attacks	DDoS Attack
🇵🇱 sefinek.net	2025-10-16 13:04:47 (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 dynamix	2025-10-14 06:36:29 (10 months ago)	Multiple WAF Violations	Web App Attack
Anonymous	2025-10-12 18:32:47 (10 months ago)	Forum/form spam	Web Spam
🇵🇱 sefinek.net	2025-10-07 06:18:19 (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 oncord	2024-04-05 07:34:22 (2 years ago)	Form spam	Web Spam
🇨🇭 backslash	2024-04-03 09:05:20 (2 years ago)		Web Spam
🇦🇺 oncord	2024-04-02 14:07:03 (2 years ago)	Form spam	Web Spam

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 77.90.185.135

🇺🇸 216.25.89.78

🇦🇷 201.220.20.31

🇳🇱 195.178.110.228

🇪🇸 193.46.192.20

🇰🇷 175.207.215.60

🇨🇳 144.123.76.78

🇻🇳 103.154.63.62

🇺🇸 85.239.151.10

🇨🇦 85.217.149.55

🇺🇸 74.82.47.3

🇬🇪 37.232.59.241

🇷🇺 188.168.243.175

🇨🇳 163.125.132.220

🇭🇰 152.32.254.89

🇫🇮 144.31.183.254

🇧🇩 103.148.13.10

🇰🇷 221.162.9.13

🇳🇱 176.65.148.185

🇺🇸 172.59.170.27