JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.23.141.23

64.23.141.23 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 75%: ?

75%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.23.141.23

Whois 64.23.141.23

IP Abuse Reports for 64.23.141.23:

This IP address has been reported a total of 22 times from 18 distinct sources. 64.23.141.23 was first reported on May 29th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-21 21:59:19 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-20. show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-08-20 22:00:00 (3 days ago)	Auto-ban: >3000 req/min op 2026-08-20	Web App Attack SSH Hacking
🇦🇺 screwlooseit.com.au	2026-08-20 21:57:51 (3 days ago)	Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/-	Web App Attack
🇬🇧 foxxelabs	2026-08-20 21:31:39 (3 days ago)	Automated report from FoxxeLabs Sentinel. Path probed: /.env \| Project: anseo \| Reason(s): Known exp ... show more Automated report from FoxxeLabs Sentinel. Path probed: /.env \| Project: anseo \| Reason(s): Known exploit path: /.env \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Sa show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 21:16:36 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 64.23.141.23 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.23.141.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 17:16:30.521974 2026] [security2:error] [pid 4176:tid 4176] [client 64.23.141.23:43936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alosi.us"] [uri "/.env"] [unique_id "aoduri3HhhpnWkf8zYxvMwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 19:14:52 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 64.23.141.23 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.23.141.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 15:14:49.070944 2026] [security2:error] [pid 7508:tid 7508] [client 64.23.141.23:57026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allieleejieun.click"] [uri "/.env"] [unique_id "aodSKQzYUz1ksiMpebXNuAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-20 17:21:59 (4 days ago)	64.23.141.23 - - [20/Aug/2026:17:21:59 +0000] "GET /.env HTTP/1.1" 404 4245 "-" "Mozilla/5.0 (Window ... show more 64.23.141.23 - - [20/Aug/2026:17:21:59 +0000] "GET /.env HTTP/1.1" 404 4245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-08-20 16:37:02 (4 days ago)	[20/Aug/2026:19:37:02 +0300] -- 64.23.141.23 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /. ... show more [20/Aug/2026:19:37:02 +0300] -- 64.23.141.23 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /.env HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 16:25:20 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 64.23.141.23 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.23.141.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 12:25:05.403330 2026] [security2:error] [pid 15344:tid 15344] [client 64.23.141.23:53196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alfadventurecenter.org"] [uri "/.env"] [unique_id "aocqYa-1w5fVm76cXvMvgAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-08-20 13:02:46 (4 days ago)	Try to access /.env	Web App Attack
🇨🇿 akac	2026-08-20 13:01:45 (4 days ago)	Web vulnerability scanning: HTTP/1.1 GET /.env	Hacking Brute-Force Bad Web Bot Web App Attack
🇵🇱 lns.bz	2026-08-20 13:00:15 (4 days ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇫🇷 Baking333	2026-08-20 10:36:22 (4 days ago)	[redacted] 64.23.141.23 - - [20/Aug/2026:11:36:19 +0100] "GET /_profiler/phpinfo HTTP/2.0" 301 229 " ... show more [redacted] 64.23.141.23 - - [20/Aug/2026:11:36:19 +0100] "GET /_profiler/phpinfo HTTP/2.0" 301 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" [redacted] 64.23.141.23 - - [20/Aug/2026:11:36:20 +0100] "GET /fr/_profiler/phpinfo/ HTTP/2.0" 404 34484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-08-20 06:20:06 (4 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇬🇧 consul.to	2026-08-20 04:06:17 (4 days ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇳 180.149.125.237

🇩🇪 165.232.78.150

🇺🇸 152.32.235.180

🇺🇸 143.42.173.101

🇷🇺 91.78.169.57

🇨🇳 240e:39a:1246:53b0:7933:2d3b:10f8:401

🇬🇧 217.146.80.126

🇱🇹 213.176.26.114

🇦🇷 186.22.62.226

🇨🇳 182.242.168.73

🇮🇸 82.221.131.86

🇺🇸 73.222.215.102

🇺🇸 20.118.227.29

🇫🇮 147.185.133.182

🇨🇳 116.179.32.90

🇳🇱 104.248.199.32

🇺🇸 73.24.69.81

🇱🇹 213.176.26.113

🇺🇸 206.189.217.224

🇸🇪 192.36.166.72