JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.228.131.6

23.228.131.6 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 0%: ?

ISP	Google Fiber Inc.
Usage Type	Fixed Line ISP
ASN	AS16591
Hostname(s)	23-228-131-6.mci.googlefiber.net
Domain Name	gfiber.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.228.131.6

Whois 23.228.131.6

IP Abuse Reports for 23.228.131.6:

This IP address has been reported a total of 112 times from 19 distinct sources. 23.228.131.6 was first reported on April 6th 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 1gz	2025-08-24 10:44:32 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /auth/register UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/28.0 Chrome/130.0.0.0 Mobile Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-03-18 22:40:00 (1 year ago)	Multiple unauthorized attempt to access to non-existent path	Web App Attack
Anonymous	2025-03-18 00:40:00 (1 year ago)	Multiple unauthorized attempt to access to non-existent path	Web App Attack
🇺🇸 TPI-Abuse	2025-03-06 14:54:37 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 23.228.131.6 (23-228-131-6.mci.googlefiber.net) ... show more (mod_security) mod_security (id:210730) triggered by 23.228.131.6 (23-228-131-6.mci.googlefiber.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 06 09:54:31.822489 2025] [security2:error] [pid 817725:tid 817725] [client 23.228.131.6:61342] [client 23.228.131.6] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|web50.dnchosting.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "web50.dnchosting.com"] [uri "/mailman/listinfo/board_playbbsa.com"] [unique_id "Z8m3J2fm_RDoaIMVyYaRFQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-14 17:31:36 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 23.228.131.6 (23-228-131-6.mci.googlefiber.net) ... show more (mod_security) mod_security (id:210730) triggered by 23.228.131.6 (23-228-131-6.mci.googlefiber.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 14 12:31:30.514687 2025] [security2:error] [pid 28965:tid 28965] [client 23.228.131.6:58698] [client 23.228.131.6] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|web221.dnchosting.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "web221.dnchosting.com"] [uri "/mailman/admindb/lizandjeff_jeffreycopeland.com"] [unique_id "Z4afclClgjQe1cc7z0fHoAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-11 18:27:21 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 23.228.131.6 (23-228-131-6.mci.googlefiber.net) ... show more (mod_security) mod_security (id:210730) triggered by 23.228.131.6 (23-228-131-6.mci.googlefiber.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 11 13:27:15.142724 2025] [security2:error] [pid 3713196:tid 3713196] [client 23.228.131.6:58136] [client 23.228.131.6] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|web142.dnchosting.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "web142.dnchosting.com"] [uri "/mailman/admindb/hardmanfamily_coolestfamilyever.com"] [unique_id "Z4K4A4HE5igFvtx_xhfl6wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-19 14:55:51 (1 year ago)	Excessive HTTP/HTTPS connections.	Bad Web Bot
🇯🇵 mygnuos.tk	2024-09-28 16:42:47 (1 year ago)	Actively scanning for abnormal web paths	Bad Web Bot Web App Attack
🇩🇪 bescared	2024-07-08 14:41:00 (2 years ago)	Malicious activity detected: URL probing.	Hacking Bad Web Bot Web App Attack
Anonymous	2024-07-02 07:40:28 (2 years ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
Anonymous	2024-06-29 04:05:55 (2 years ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
Anonymous	2024-06-27 21:48:32 (2 years ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
Anonymous	2024-06-26 07:43:04 (2 years ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
Anonymous	2024-06-24 06:33:42 (2 years ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
Anonymous	2024-06-23 06:29:28 (2 years ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.126.147

🇵🇰 223.123.43.254

🇦🇪 217.165.124.55

🇧🇷 205.210.31.224

🇺🇸 205.169.39.21

🇺🇸 205.169.39.14

🇺🇸 165.232.152.240

🇨🇦 85.217.149.40

🇨🇴 45.181.189.218

🇺🇸 20.84.90.119

🇺🇸 205.169.39.18

🇷🇴 193.46.255.86

🇧🇷 191.234.167.23

🇱🇸 129.232.19.240

🇷🇺 92.124.162.188

🇫🇷 91.231.89.117

🇸🇬 47.84.141.156

🇬🇧 35.203.210.202

🇸🇬 2a02:6ea0:d13e:1::e017

🇳🇱 185.223.235.61