JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.95.150.174

23.95.150.174 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 10%: ?

10%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	23-95-150-174-host.colocrossing.com
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.95.150.174

Whois 23.95.150.174

IP Abuse Reports for 23.95.150.174:

This IP address has been reported a total of 8 times from 3 distinct sources. 23.95.150.174 was first reported on October 28th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-01 02:14:29 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 23.95.150.174 (23-95-150-174-host.colocrossing. ... show more (mod_security) mod_security (id:210730) triggered by 23.95.150.174 (23-95-150-174-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:14:12.551991 2026] [security2:error] [pid 12707:tid 12720] [client 23.95.150.174:51221] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.kettlehill.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kettlehill.com"] [uri "/admin/errors.log"] [unique_id "ahzq9Pr1zQOtbkd9viUp1QAAAAk"], referer: http://www.kettlehill.com/admin/errors.log show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-05-21 13:15:44 (4 weeks ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-07 12:31:22 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 23.95.150.174 (23-95-150-174-host.colocrossing. ... show more (mod_security) mod_security (id:210730) triggered by 23.95.150.174 (23-95-150-174-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 07:31:15.806360 2026] [security2:error] [pid 11880:tid 11880] [client 23.95.150.174:41645] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.nbcnewsradio.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/config.php.bak"] [unique_id "aYcwk2KziH_dQu3hHySexQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-01 12:43:51 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 23.95.150.174 (23-95-150-174-host.colocrossing. ... show more (mod_security) mod_security (id:210730) triggered by 23.95.150.174 (23-95-150-174-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 07:43:49.216405 2026] [security2:error] [pid 12299:tid 12338] [client 23.95.150.174:41657] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kettlehill.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.com"] [uri "/admin/errors.log"] [unique_id "aX9Khc_CAppeKcdveJ3inwAAAJQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 22:56:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 23.95.150.174 (23-95-150-174-host.colocrossing. ... show more (mod_security) mod_security (id:210492) triggered by 23.95.150.174 (23-95-150-174-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:56:48.506917 2025] [security2:error] [pid 14143:tid 14143] [client 23.95.150.174:33955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.farmers123.com"] [uri "/wp-config.php.bak"] [unique_id "aS9usJS0QrMUQdYEbmDMjwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-01 06:08:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 23.95.150.174 (23-95-150-174-host.colocrossing. ... show more (mod_security) mod_security (id:210492) triggered by 23.95.150.174 (23-95-150-174-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 01:08:16.294160 2025] [security2:error] [pid 31256:tid 31275] [client 23.95.150.174:37777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.com"] [uri "/.env.bak"] [unique_id "aS0w0G28JkE_f6YcP873TAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-18 16:50:03 (7 months ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-10-28 23:14:32 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 23.95.150.174 (23-95-150-174-host.colocrossing. ... show more (mod_security) mod_security (id:210492) triggered by 23.95.150.174 (23-95-150-174-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 19:14:25.589901 2025] [security2:error] [pid 26493:tid 26493] [client 23.95.150.174:33825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nbcnewsradio.com"] [uri "/.env"] [unique_id "aQFOUSoechtyawxPJXdDmwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 101.126.85.58

🇺🇸 2600:1700:e300:4590:d973:7ce:377a:b293

🇺🇸 209.141.41.212

🇲🇽 187.157.88.115

🇺🇸 88.216.68.162

🇺🇸 2607:f8b0:4004:1007::121

🇨🇳 180.167.207.234

🇧🇷 179.228.151.4

🇺🇸 162.216.150.199

🇬🇧 118.193.65.212

🇵🇰 103.186.77.66

🇵🇭 154.18.197.35

🇨🇳 117.35.104.62

🇨🇳 111.164.43.236

🇺🇸 71.6.237.247

🇳🇱 45.156.87.254

🇺🇸 3.220.70.171

🇪🇸 212.227.235.203

🇺🇸 150.107.38.218

🇨🇳 101.126.22.12