JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.106.169.120

23.106.169.120 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 75%: ?

75%

ISP	Leaseweb USA, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS7203
Domain Name	leaseweb.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.106.169.120

Whois 23.106.169.120

IP Abuse Reports for 23.106.169.120:

This IP address has been reported a total of 60 times from 35 distinct sources. 23.106.169.120 was first reported on February 27th 2022, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-08-17 19:34:40 (5 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-08-17 18:36:37 (5 days ago)	(wordpress) Failed wordpress login from 23.106.169.120 (US/United States/-)	Brute-Force
🇳🇱 DrLex0	2026-08-17 18:08:44 (5 days ago)	BnL003: POST attempt on xmlrpc.php, likely botnet drone 23.106.169.120 443 - [17/Aug/2026:18:08:44 ... show more BnL003: POST attempt on xmlrpc.php, likely botnet drone 23.106.169.120 443 - [17/Aug/2026:18:08:44 +0000] "POST /xmlrpc.php HTTP/1.1" 400 5411 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/78.0.0.0 Safari/537.36" show less	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇺🇦 URAN Publishing Service	2026-08-17 11:48:51 (5 days ago)	[17/Aug/2026:14:48:50 +0300] -- 23.106.169.120 Ban reason: Scanner [CMS_GENERIC] \| Request: POST /xm ... show more [17/Aug/2026:14:48:50 +0300] -- 23.106.169.120 Ban reason: Scanner [CMS_GENERIC] \| Request: POST /xmlrpc.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-08-17 11:40:00 (5 days ago)	IPBlock protected site ID [4730-fr]. Public forum SPAM	Blog Spam
🇫🇷 SpaceHost-Server	2026-08-14 02:40:28 (1 week ago)	23.106.169.120 - - [14/Aug/2026:04:39:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6477 "-" "Mozilla/5. ... show more 23.106.169.120 - - [14/Aug/2026:04:39:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6477 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.0.0 Safari/537.36" 23.106.169.120 - - [14/Aug/2026:04:39:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6477 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" 23.106.169.120 - - [14/Aug/2026:04:40:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6477 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/65.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 billfor	2026-08-12 22:29:53 (1 week ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-08-12 14:33:33 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 23.106.169.120 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 23.106.169.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 10:33:27.757139 2026] [security2:error] [pid 2324923:tid 2324923] [client 23.106.169.120:39534] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|reallifelearninghub.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "reallifelearninghub.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anyENxUyyV1ob3uNVLbZ_wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-08-12 11:45:56 (1 week ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 billfor	2026-08-10 14:09:56 (1 week ago)	23.106.169.120 - - [10/Aug/2026:10:09:53 -0400] "POST /xmlrpc.php HTTP/1.1" 404 1496 "-" "Mozilla/5. ... show more 23.106.169.120 - - [10/Aug/2026:10:09:53 -0400] "POST /xmlrpc.php HTTP/1.1" 404 1496 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/88.0.0.0 Safari/537.36" show less	Web App Attack
🇳🇱 Site.eu	2026-08-05 02:37:20 (2 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 big-cloud.nl	2026-08-04 15:48:35 (2 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-08-04 15:27:01 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 23.106.169.120 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 23.106.169.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 11:26:56.722851 2026] [security2:error] [pid 18123:tid 18123] [client 23.106.169.120:60486] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|modmove.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "modmove.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anIEwPYbKAkR5g804dfwAAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-08-04 13:46:14 (2 weeks ago)	(wordpress) Failed wordpress login from 23.106.169.120 (US/United States/-): (CF_ENABLE)	Brute-Force
🇳🇱 BlueWire Hosting	2026-08-04 13:42:19 (2 weeks ago)	Probing websites for vulnerabilities	Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.253

🇱🇹 213.176.26.87

🇨🇴 181.53.70.126

🇺🇸 170.187.163.133

🇳🇬 102.89.69.82

🇩🇪 89.163.254.46

🇫🇷 85.217.140.12

🇺🇸 66.132.186.246

🇶🇦 34.153.64.80

🇺🇸 20.65.194.54

🇺🇸 8.34.210.33

🇨🇦 4.204.200.136

🇳🇱 213.165.255.62

🇨🇳 183.224.160.34

🇺🇸 162.216.149.96

🇺🇸 154.30.107.237

🇺🇸 148.135.0.242

🇺🇸 64.62.156.180

🇬🇧 35.203.210.170

🇹🇼 211.20.14.156