JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.95.80.137

23.95.80.137 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 31%: ?

31%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	23-95-80-137-host.colocrossing.com
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.95.80.137

Whois 23.95.80.137

IP Abuse Reports for 23.95.80.137:

This IP address has been reported a total of 12 times from 4 distinct sources. 23.95.80.137 was first reported on June 23rd 2026, and the most recent report was 31 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-06-26 01:11:21 (31 minutes ago)	Try to access /.vscode/sftp.json	Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 17:58:20 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 13:58:13.204314 2026] [security2:error] [pid 7132:tid 7132] [client 23.95.80.137:62680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dawnmazur.com"] [uri "/sftp-config.json"] [unique_id "aj1sNWF6IgUc-mA2jFsoVwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 16:43:27 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 12:43:22.230848 2026] [security2:error] [pid 16981:tid 16981] [client 23.95.80.137:32526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidsonmanagement.net"] [uri "/sftp-config.json"] [unique_id "aj1aqpega4ONF_VrzQA2MQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 Valhalla	2026-06-25 15:51:04 (9 hours ago)	/sftp-config.json	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 09:42:23 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 05:42:16.462711 2026] [security2:error] [pid 4100:tid 4100] [client 23.95.80.137:41388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dougwong.net"] [uri "/sftp-config.json"] [unique_id "ajz3-CgwB7c6bVBim5cbVwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 05:13:14 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 01:13:10.714373 2026] [security2:error] [pid 11201:tid 11201] [client 23.95.80.137:18412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doreenkimura.com"] [uri "/sftp-config.json"] [unique_id "ajy45t-NCxoa7RbD928LsgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 15:44:59 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 11:44:52.942804 2026] [security2:error] [pid 21984:tid 21984] [client 23.95.80.137:43104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doctorspainmanagement.com"] [uri "/sftp-config.json"] [unique_id "ajv7dMn9PqyZ0DCuSCJmrQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 15:14:47 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 11:14:42.283411 2026] [security2:error] [pid 20866:tid 20866] [client 23.95.80.137:12544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doctorc.net"] [uri "/sftp-config.json"] [unique_id "ajv0YkbF-jvZIa4duhR7JgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 00:47:50 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 20:47:45.629602 2026] [security2:error] [pid 8679:tid 8679] [client 23.95.80.137:3902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "disneyweddinginvitations.com"] [uri "/sftp-config.json"] [unique_id "ajspMXhtEVKAzK6hA_egSwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 14:52:26 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 10:52:19.985469 2026] [security2:error] [pid 14687:tid 14687] [client 23.95.80.137:33128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digitaltom.com"] [uri "/sftp-config.json"] [unique_id "ajqdo5pm9iL-rIIv3wRtlgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 14:22:59 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.co ... show more (mod_security) mod_security (id:210492) triggered by 23.95.80.137 (23-95-80-137-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 10:22:51.611474 2026] [security2:error] [pid 12680:tid 12680] [client 23.95.80.137:11626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digitalracemedia.com"] [uri "/sftp-config.json"] [unique_id "ajqWu30wlLxtm8LPj3MmmQAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 nyt	2026-06-23 14:06:18 (2 days ago)	Deploy Config Probe	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 172.253.6.16

🇰🇬 139.28.28.143

🇷🇺 93.94.146.9

🇺🇸 66.132.172.249

🇺🇸 65.49.1.226

🇧🇷 205.210.31.199

🇲🇽 201.114.104.95

🇵🇦 190.219.102.26

🇺🇸 166.62.41.190

🇨🇳 121.29.84.37

🇹🇷 88.236.180.214

🇺🇸 71.235.27.139

🇸🇨 45.194.67.27

🇫🇷 45.84.88.64

🇭🇰 42.200.66.164

🇨🇳 39.152.118.160

🇧🇩 36.255.68.137

🇺🇸 35.236.7.141

🇰🇷 34.64.207.33

🇨🇳 27.188.184.13