AbuseIPDB » 23.137.248.192

23.137.248.192 was found in our database!

This IP was reported 237 times. Confidence of Abuse is 71%: ?

71%

ISP	IncogNET LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210630
Hostname(s)	tor-nl.as210630.net
Domain Name	incognet.io
Country	Netherlands
City	Zaandam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 23.137.248.192

Whois 23.137.248.192

IP Abuse Reports for 23.137.248.192:

This IP address has been reported a total of 237 times from 47 distinct sources. 23.137.248.192 was first reported on January 16th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ScanThe.Net	2025-06-20 23:27:09 (3 days ago)	ID: 2662111800 | PORT: 1900 | https://23-137-248-192.scanthe.net	Port Scan
ScanThe.Net	2025-06-19 12:36:52 (5 days ago)	ID: 2638044319 | PORT: 1900 | https://23-137-248-192.scanthe.net	Port Scan
TPI-Abuse	2025-06-19 06:32:45 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 23.137.248.192 (tor-nl.as210630.net): 1 in the ... show more(mod_security) mod_security (id:210492) triggered by 23.137.248.192 (tor-nl.as210630.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 19 02:32:42.324991 2025] [security2:error] [pid 3669190:tid 3669190] [client 23.137.248.192:32944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.grandviewlabradorretrievers.com.grandvistalabs.com"] [uri "/.git/config"] [unique_id "aFOvCih4qkOCFVnSCARjxwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-18 21:43:14 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 23.137.248.192 (tor-nl.as210630.net): 1 in the ... show more(mod_security) mod_security (id:210492) triggered by 23.137.248.192 (tor-nl.as210630.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 18 17:43:09.594531 2025] [security2:error] [pid 3275350:tid 3275368] [client 23.137.248.192:33250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greaternorthmiamihistory.org"] [uri "/wp-config.php.save.10"] [unique_id "aFMy7e5tgkEA9D1S-q5GXgAAAUQ"] show less	Brute-Force Bad Web Bot Web App Attack
ScanThe.Net	2025-06-18 07:09:49 (6 days ago)	ID: 2621492861 | PORT: 1900 | https://23-137-248-192.scanthe.net	Port Scan
ipblock.com	2025-06-16 00:47:00 (1 week ago)	IPBlock protected site ID [4055-d][s=02]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=02]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
ScanThe.Net	2025-06-14 21:22:13 (1 week ago)	ID: 2568628571 | PORT: 1900 | https://23-137-248-192.scanthe.net	Port Scan
Anonymous	2025-06-14 15:14:42 (1 week ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
ipblock.com	2025-06-14 03:34:00 (1 week ago)	IPBlock protected site ID [4055-d][s=04]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=04]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
Anonymous	2025-06-13 15:28:46 (1 week ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
LTM	2025-06-13 06:20:02 (1 week ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
ThreatBook.io	2025-06-12 22:20:31 (1 week ago)	ThreatBook Intelligence: tor_proxy,Zombie more details on https://threatbook.io/ip/23.137.248.192<br ... show moreThreatBook Intelligence: tor_proxy,Zombie more details on https://threatbook.io/ip/23.137.248.192 2025-06-12 04:00:07 / show less	Web App Attack
ipblock.com	2025-06-12 13:28:00 (1 week ago)	IPBlock protected site ID [4055-d][s=07]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=07]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
ScanThe.Net	2025-06-12 11:39:23 (1 week ago)	ID: 2530097681 | PORT: 1900 | https://23-137-248-192.scanthe.net	Port Scan
sefinek.net	2025-06-10 05:45:25 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from T1. Action taken: MANAGED_CHALLENGE Proto ... show moreTriggered Cloudflare WAF (firewallCustom) from T1. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩