JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.106.248.251

23.106.248.251 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 3%: ?

ISP	Leaseweb Asia Pacific pte. ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59253
Domain Name	leaseweb.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.106.248.251

Whois 23.106.248.251

IP Abuse Reports for 23.106.248.251:

This IP address has been reported a total of 26 times from 11 distinct sources. 23.106.248.251 was first reported on April 24th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-06-23 13:00:53 (1 day ago)	SIMASN Account Signin from Blacklisted IP., User login to application from malicious IP 23.106.248.2 ... show more SIMASN Account Signin from Blacklisted IP., User login to application from malicious IP 23.106.248.251.. Threat Score: 7.5/10 (HIGH). Confidence: 50%. CVSS v3.1: 6.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 93%. MITRE ATT&CK: T1071 (Application Layer Protocol). Tactic: TA0001. Freshness: Fresh. Source Reputation: SUSPICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-23 12:00:09 (1 day ago)	SIMASN Account Signin from Blacklisted IP.. Threat Score: 6.8/10 (MEDIUM). Reported by TangerangKota ... show more SIMASN Account Signin from Blacklisted IP.. Threat Score: 6.8/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-23 06:01:03 (1 day ago)	User login to application from malicious IP 23.106.248.251.. Threat Score: 4.1/10 (MEDIUM). Confiden ... show more User login to application from malicious IP 23.106.248.251.. Threat Score: 4.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 57%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-23 05:00:09 (1 day ago)	User login to application from malicious IP 23.106.248.251.. Threat Score: 0/10 (INFORMATIONAL). Rep ... show more User login to application from malicious IP 23.106.248.251.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-22 12:00:13 (2 days ago)	SIMASN Account Signin from Blacklisted IP.. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota ... show more SIMASN Account Signin from Blacklisted IP.. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-22 11:00:09 (2 days ago)	SIMASN Account Signin from Blacklisted IP.. Threat Score: 6.7/10 (MEDIUM). Reported by TangerangKota ... show more SIMASN Account Signin from Blacklisted IP.. Threat Score: 6.7/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-22 10:00:09 (2 days ago)	SIMASN Account Signin from Blacklisted IP.. Threat Score: 6.8/10 (MEDIUM). Reported by TangerangKota ... show more SIMASN Account Signin from Blacklisted IP.. Threat Score: 6.8/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-12 02:01:01 (1 week ago)	User login to application from malicious IP 23.106.248.251.. Threat Score: 4.7/10 (MEDIUM). Confiden ... show more User login to application from malicious IP 23.106.248.251.. Threat Score: 4.7/10 (MEDIUM). Confidence: 55%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 84%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-17 18:00:41 (2 months ago)	Deep night login (00:00-05:30) - Maximum risk Jakarta timezone (WIB). Threat Score: 8.9/10 (CRITICAL ... show more Deep night login (00:00-05:30) - Maximum risk Jakarta timezone (WIB). Threat Score: 8.9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 hermawan	2026-03-24 04:40:15 (3 months ago)	1774327208.026575 C83Y8G3YOssGUT4Dck 23.106.248.251 37089 103.166.156.58 443 tcp - 3.048706 0 0 S0 F ... show more 1774327208.026575 C83Y8G3YOssGUT4Dck 23.106.248.251 37089 103.166.156.58 443 tcp - 3.048706 0 0 S0 F F 0 S 3 180 0 0 - 6 887163604529617_56 (empty) 64240_2-4-8-1-3_1460_7 (empty) 03/24/2026-11:40:08.026575 ... show less	Email Spam Hacking
🇸🇬 securejdprop	2026-03-14 15:31:29 (3 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
🇸🇬 securejdprop	2026-02-02 09:16:32 (4 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
🇩🇪 Reinhard	2026-01-29 15:48:54 (4 months ago)	Collecting information for hacking, but too many attacks.	Hacking
🇮🇩 sockominfo	2025-12-18 22:03:33 (6 months ago)	[WAZUH] SUPPRESSED: IP 23.106.248.251 blocked - 8 times fired in 6 hour	Hacking Web App Attack
🇮🇩 sockominfo	2025-12-02 19:59:46 (6 months ago)	[WAZUH] SUPPRESSED: IP 23.106.248.251 blocked - 8 times fired in 6 hour	Hacking Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.229

🇫🇮 147.185.133.242

🇺🇸 98.93.29.242

🇺🇸 74.196.34.137

🇺🇸 52.53.254.0

🇺🇸 44.225.140.199

🇮🇱 34.165.121.78

🇺🇸 20.14.73.168

🇺🇸 18.209.175.165

🇺🇸 18.205.60.185

🇯🇵 15.168.18.170

🇮🇳 13.233.158.20

🇬🇧 13.40.63.116

🇳🇱 213.177.179.79

🇫🇷 207.180.226.155

🇧🇷 205.210.31.246

🇳🇱 172.71.102.72

🇨🇳 125.77.73.145

🇺🇸 54.82.123.228

🇰🇿 37.151.58.74