AbuseIPDB » 23.239.3.51
23.239.3.51
This IP was reported 5 times. Confidence of
Abuse
is 17% : ?
ISP
Linode
Usage Type
Data Center/Web Hosting/Transit
ASN
AS63949
Hostname(s)
prod-meitnerium-us-us-west-26.li.binaryedge.ninja
Domain Name
linode.com
Country
🇺🇸
United States of America
City
Fremont, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 23.239.3.51 :
This IP address has been reported a total of
5
times from
3 distinct
sources.
23.239.3.51 was first reported on
May 22nd 2026 , and the most recent report was
6 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-25 19:59:32
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 23.239.3.51 (prod-meitnerium-us-us-west-26.li.b ...
show more
(mod_security) mod_security (id:210492) triggered by 23.239.3.51 (prod-meitnerium-us-us-west-26.li.binaryedge.ninja): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 15:59:26.272298 2026] [security2:error] [pid 17614:tid 17614] [client 23.239.3.51:38036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.25"] [uri "/sftp-config.json"] [unique_id "aj2Injl6jdZML01ixJ_ejgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 15:03:47
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 23.239.3.51 (prod-meitnerium-us-us-west-26.li.b ...
show more
(mod_security) mod_security (id:210492) triggered by 23.239.3.51 (prod-meitnerium-us-us-west-26.li.binaryedge.ninja): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 11:03:40.760753 2026] [security2:error] [pid 16589:tid 16589] [client 23.239.3.51:39056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.muddypuddy.com"] [uri "/.env"] [unique_id "ajQIzM6vElLEZJ-iUsbmmAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2026-06-08 08:03:50
(3 weeks ago)
Blocked by UFW (TCP on 38352)
Source port: 44865
TTL: 246
Packet length: 44
TOS: 0x00
This report ( ...
show more
Blocked by UFW (TCP on 38352)
Source port: 44865
TTL: 246
Packet length: 44
TOS: 0x00
This report (for 23.239.3.51) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
xmission.com
2026-06-08 07:47:49
(3 weeks ago)
Blocked by UFW (TCP on 65045)
Source port: 44881
TTL: 245
Packet length: 44
TOS: 0x00
This report ( ...
show more
Blocked by UFW (TCP on 65045)
Source port: 44881
TTL: 245
Packet length: 44
TOS: 0x00
This report (for 23.239.3.51) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
leasj
2026-05-22 14:56:00
(1 month ago)
protect/readme.txt","/bin/login/XWiki/XWikiLogin","/js/zimbraMail/share/model/ZmSettings.js","/admin ...
show more
protect/readme.txt","/bin/login/XWiki/XWikiLogin","/js/zimbraMail/share/model/ZmSettings.js","/admin/config.php","/admin_login.html","/MagicInfo/login.htm","/docs/introduction.html","/docs/RELEASE-NOTES.txt","/my.policy","/cgi-mod/index.cgi","/systemui/welcome.php","/adminui/welcome.php","/userui/welcome.php","/mics/login.jsp","/cupadmin/showHome.do","/ccmadmin/showHome.do","/cuadmin/home.do","/cmplatform/showHome.do","/cucreports/showHome.do"]
0
/robots.txt
1
/+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2BCSCOE%2B/portal_inc.lua
2
/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php
3
/wp-content/plugins/really-simple-ssl/readme.txt
4
/wp-content/plugins/clea
show less
Bad Web Bot
Web App Attack
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: