JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.132.164.151

23.132.164.151 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 100%: ?

100%

ISP	10GIG.HOST
Usage Type	Data Center/Web Hosting/Transit
ASN	AS401626
Domain Name	10gig.host
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.132.164.151

Whois 23.132.164.151

IP Abuse Reports for 23.132.164.151:

This IP address has been reported a total of 72 times from 50 distinct sources. 23.132.164.151 was first reported on October 15th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2026-10-22 04:40:58 (5 hours ago)	Activity from blacklisted IP	Hacking
🇩🇪 FeG Deutschland	2026-10-22 03:12:25 (7 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
Anonymous	2026-10-22 02:16:03 (8 hours ago)	Bot / scanning and/or hacking attempts: GET /wp-admin/index.php HTTP/2.0, GET /dex.php HTTP/1.1, GET ... show more Bot / scanning and/or hacking attempts: GET /wp-admin/index.php HTTP/2.0, GET /dex.php HTTP/1.1, GET /blurbs.php HTTP/1.1, GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.rat-holland.nl%, GET /wp-content/wp-setting.php HTTP/1.1, GET /wp-admin/admin-ajax.php HTTP/1.1, GET /wp-admin/css/index.php HTTP/1.1, GET /wp-admin/css/ HTTP/1.1, GET /wp-admin/index.php HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 Agaman	2026-10-22 00:28:11 (9 hours ago)	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-22 00:28 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-22 00:28 UTC. Samples: GET /000.php 444; GET /wp-content/about.php 444; GET /wp-admin/css/admin.php 444. UA: Go-http-client/2.0. Detected by fail2ban. show less	Web App Attack
Anonymous	2026-10-21 20:02:49 (14 hours ago)	23.132.164.151 arduino.ua [21/Oct/2026:23:02:49 +0300] "GET /wp-content/style.php HTTP/2.0" 404 16 " ... show more 23.132.164.151 arduino.ua [21/Oct/2026:23:02:49 +0300] "GET /wp-content/style.php HTTP/2.0" 404 16 "-" "Go-http-client/2.0" 0.001 438 ... show less	Hacking SQL Injection Web App Attack
🇮🇩 soc-yk	2026-10-21 17:30:19 (16 hours ago)	Type: web_scanning Risk: 100 Events: 90 Evidence: - Automated hostile web probing detected - Repeat ... show more Type: web_scanning Risk: 100 Events: 90 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Web App Attack
🇫🇮 as211431.net	2026-10-21 16:57:19 (17 hours ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /php8.php UA: Go-http-client/2.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇸🇪 vaia.cloud	2026-10-21 15:40:03 (18 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇧🇷 dominioz	2026-10-21 15:29:45 (18 hours ago)	2026-10-21 15:29:40 GET /000.php - - 23.132.164.151 HTTP/1.1 Go-http-client/1.1 - 301 507 ...	Bad Web Bot Web App Attack
🇺🇸 Rayulcifer	2026-10-21 14:28:23 (19 hours ago)	[Wed Oct 21 14:27:51.321186 2026] [authz_core:error] [pid 3597238:tid 140117578598080] [client 23.13 ... show more [Wed Oct 21 14:27:51.321186 2026] [authz_core:error] [pid 3597238:tid 140117578598080] [client 23.132.164.151:57576] AH01630: client denied by server configuration: proxy:http://localhost:4000/style.php [Wed Oct 21 14:27:56.230754 2026] [authz_core:error] [pid 3584994:tid 140117603776192] [client 23.132.164.151:58358] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/style.php [Wed Oct 21 14:28:07.036681 2026] [authz_core:error] [pid 3597238:tid 140118132254400] [client 23.132.164.151:59521] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-admin/style.php [Wed Oct 21 14:28:17.930405 2026] [authz_core:error] [pid 3597238:tid 140118140647104] [client 23.132.164.151:60591] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-includes/style.php [Wed Oct 21 14:28:22.651752 2026] [authz_core:error] [pid 3597238:tid 140115984770752] [client 23.132.164.151:61129] AH01630: client denied by server config ... show less	Brute-Force SSH
🇩🇪 Vegascosmetics	2026-10-21 13:06:25 (21 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /[a-z0-9]{1,12}\.php (Match: /style.php) show less	Hacking Exploited Host Web App Attack
🇮🇩 Burayot	2026-10-21 11:32:41 (22 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 23.132.164.151 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 23.132.164.151 (US/United States/-): 2 in the last 3600 secs show less	Web App Attack
🇮🇩 securejdprop	2026-10-21 11:10:29 (23 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 2). show less	Hacking Web App Attack
Anonymous	2026-10-21 11:05:20 (23 hours ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇮🇩 sockominfo	2026-10-21 11:00:09 (23 hours ago)	Active Response: IP 23.132.164.151 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Re ... show more Active Response: IP 23.132.164.151 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 217.60.242.36

🇦🇷 190.230.219.208

🇧🇷 187.17.239.6

🇦🇷 181.26.132.198

🇩🇪 172.70.240.56

🇩🇪 172.70.240.53

🇫🇷 161.97.160.86

🇸🇬 157.245.153.189

🇺🇸 138.197.120.184

🇺🇸 71.82.212.144

🇹🇷 46.2.104.168

🇪🇬 2a09:bac5:d57c:2c5a::46b:26

🇰🇷 210.204.108.217

🇪🇨 181.199.60.17

🇩🇪 172.70.240.52

🇻🇪 170.244.91.42

🇺🇸 162.216.150.187

🇭🇰 154.92.2.59

🇰🇷 121.180.144.35

🇫🇷 84.247.173.90