AbuseIPDB » 23.95.239.136
23.95.239.136
This IP was reported 8 times. Confidence of
Abuse
is 0% : ?
ISP
Lixux OU (VATID EE101773168)
Usage Type
Data Center/Web Hosting/Transit
ASN
AS36352
Hostname(s)
23-95-239-136-host.colocrossing.com
Domain Name
rue8.com
Country
🇺🇸
United States of America
City
Buffalo, New York
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 23.95.239.136 :
This IP address has been reported a total of
8
times from
4 distinct
sources.
23.95.239.136 was first reported on
January 15th 2024 , and the most recent report was
2 years ago
Old Reports:
The most recent abuse report for this IP address is from
2 years ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇻🇳
Xuan Can
2024-04-12 10:55:32
(2 years ago)
(mod_security) mod_security (id:6) triggered by 23.95.239.136 (US/United States/23-95-239-136-host.c ...
show more
(mod_security) mod_security (id:6) triggered by 23.95.239.136 (US/United States/23-95-239-136-host.colocrossing.com): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 12 17:55:22.737684 2024] [security2:error] [pid 23292:tid 47990866761472] [client 23.95.239.136:36728] [client 23.95.239.136] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZhkTGmhGrPLQWEDr0ltqJwAAAEA"], referer: https://kb.pavietnam.vn/wp-login.php?action=register
show less
Brute-Force
SSH
🇦🇺
MAGIC
2024-04-02 00:08:13
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇻🇳
Xuan Can
2024-03-14 12:16:17
(2 years ago)
(mod_security) mod_security (id:6) triggered by 23.95.239.136 (US/United States/23-95-239-136-host.c ...
show more
(mod_security) mod_security (id:6) triggered by 23.95.239.136 (US/United States/23-95-239-136-host.colocrossing.com): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 14 19:16:06.977628 2024] [security2:error] [pid 20275:tid 46961511077632] [client 23.95.239.136:56290] [client 23.95.239.136] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZfLqhjTQzY5mI2mRRaHL0gAAAQA"], referer: https://kb.pavietnam.vn/wp-login.php?action=register
show less
Brute-Force
SSH
🇻🇳
Xuan Can
2024-03-14 11:07:50
(2 years ago)
(mod_security) mod_security (id:6) triggered by 23.95.239.136 (US/United States/23-95-239-136-host.c ...
show more
(mod_security) mod_security (id:6) triggered by 23.95.239.136 (US/United States/23-95-239-136-host.colocrossing.com): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 14 18:07:43.864372 2024] [security2:error] [pid 40730:tid 46961544697600] [client 23.95.239.136:40065] [client 23.95.239.136] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZfLaf8gk0sd3gZy2nD3tfgAAAFA"], referer: https://kb.pavietnam.vn/
show less
Brute-Force
SSH
🇦🇺
MAGIC
2024-03-14 09:06:17
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇻🇳
Xuan Can
2024-03-06 08:57:39
(2 years ago)
(mod_security) mod_security (id:6) triggered by 23.95.239.136 (US/United States/23-95-239-136-host.c ...
show more
(mod_security) mod_security (id:6) triggered by 23.95.239.136 (US/United States/23-95-239-136-host.colocrossing.com): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 06 15:57:25.821231 2024] [security2:error] [pid 2668:tid 47337260992256] [client 23.95.239.136:53270] [client 23.95.239.136] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "Zegv9RgVlCGdpIUKSHEUngAAAAU"], referer: https://kb.pavietnam.vn/
show less
Brute-Force
SSH
🇳🇱
Roderic
2024-02-03 00:33:46
(2 years ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 23.95.239.136 (CA/Canada ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 23.95.239.136 (CA/Canada/23-95-239-136-host.colocrossing.com)
show less
Port Scan
🇺🇸
TPI-Abuse
2024-01-15 10:03:26
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 23.95.239.136 (23-95-239-136-host.colocrossing. ...
show more
(mod_security) mod_security (id:210730) triggered by 23.95.239.136 (23-95-239-136-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 15 05:03:23.049599 2024] [security2:error] [pid 6241] [client 23.95.239.136:51296] [client 23.95.239.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.maycockfamily.com|F|2"] [data ".rozblog.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.maycockfamily.com"] [uri "/blog/uncategorized/hello-world/>http:/buy-backlinks.rozblog.com"] [unique_id "ZaUC6zH03lDhoz99bychjAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: