JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.26.61.221

23.26.61.221

Neutral Activity

7 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Ace Data Centers, Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS134351

Hostname(s)

23-26-61-221.ips.acedatacenter.com

Domain Name

acedatacenter.com

Country

🇯🇵 Japan

City

Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

23.26.61.221 has been reported 7 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 23.26.61.221:

This IP address has been reported a total of 7 times from 2 distinct sources. 23.26.61.221 was first reported on January 15th 2025, and the most recent report was 7 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-01-17 22:42:21 (7 months ago)	(mod_security) mod_security (id:221260) triggered by 23.26.61.221 (23-26-61-221.ips.acedatacenter.co ... show more (mod_security) mod_security (id:221260) triggered by 23.26.61.221 (23-26-61-221.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 17:42:18.333952 2026] [security2:error] [pid 22967:tid 22967] [client 23.26.61.221:48139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|cpcalendars.nbcnewsradio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/cgi-bin/status"] [unique_id "aWwQSpUGWQmvJ2q2q33yvQAAABQ"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 17:37:11 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 23.26.61.221 (23-26-61-221.ips.acedatacenter.co ... show more (mod_security) mod_security (id:225170) triggered by 23.26.61.221 (23-26-61-221.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 12:34:03.628722 2025] [security2:error] [pid 27845:tid 28147] [client 23.26.61.221:34893] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.staging.kettlehill.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staging.kettlehill.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVK7iy6vKejRiiVeVyVn9AAAAJU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-13 08:50:43 (9 months ago)	(mod_security) mod_security (id:211190) triggered by 23.26.61.221 (23-26-61-221.ips.acedatacenter.co ... show more (mod_security) mod_security (id:211190) triggered by 23.26.61.221 (23-26-61-221.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 03:50:40.505215 2025] [security2:error] [pid 24464:tid 24464] [client 23.26.61.221:46915] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|ftp.nbcnewsradio.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /solr/solrdefault/debug/dump?param=ContentStreams&stream.url=file:///etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/solr/solrdefault/debug/dump"] [unique_id "aRWb4KCifFSGecUx465aXQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 00:10:58 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 23.26.61.221 (23-26-61-221.ips.acedatacenter.co ... show more (mod_security) mod_security (id:210492) triggered by 23.26.61.221 (23-26-61-221.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:09:12.476612 2025] [security2:error] [pid 146057:tid 146126] [client 23.26.61.221:42489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.net"] [uri "/.env.bak"] [unique_id "aIVuKAtdUXc7wYRdaLOzvgAAAYA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-29 19:22:01 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 23.26.61.221 (23-26-61-221.ips.acedatacenter.co ... show more (mod_security) mod_security (id:210492) triggered by 23.26.61.221 (23-26-61-221.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 15:21:53.437615 2025] [security2:error] [pid 3257644:tid 3257644] [client 23.26.61.221:51387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.farmers123.com"] [uri "/sftp-config.json"] [unique_id "aDiz0fDU_el0P_JpTgSzdAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-19 03:14:47 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 23.26.61.221 (23-26-61-221.ips.acedatacenter.co ... show more (mod_security) mod_security (id:210730) triggered by 23.26.61.221 (23-26-61-221.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 18 23:14:28.626989 2025] [security2:error] [pid 21918:tid 21956] [client 23.26.61.221:34575] [client 23.26.61.221] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|blog.spinningdesigns.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "blog.spinningdesigns.com"] [uri "/log/errors.log"] [unique_id "aAMVFAeuzxcxD3NbLt-mSwAAAYM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-15 07:10:38 (1 year ago)	\| A web attack returned code 200 (success).	Hacking SQL Injection Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.17

🇫🇷 172.71.135.49

🇬🇧 45.82.76.115

🇨🇭 34.65.202.80

🇺🇸 20.55.8.116

🇹🇷 213.128.81.156

🇺🇸 193.36.225.4

🇪🇨 181.188.237.221

🇺🇸 162.216.150.25

🇺🇸 152.32.206.246

🇨🇳 111.23.42.49

🇰🇷 61.76.221.51

🇨🇭 51.107.1.72

🇷🇺 37.28.177.141

🇨🇳 36.135.107.57

🇧🇪 34.76.177.150

🇺🇸 18.221.179.104

🇷🇴 2.57.122.238

🇧🇷 201.63.223.140

🇦🇷 190.183.81.171