JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.234.106.104

23.234.106.104 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 100%: ?

100%

ISP	u1-radio.net
Usage Type	Data Center/Web Hosting/Transit
ASN	AS11878
Hostname(s)	static-23-234-106-104.cust.tzulo.com
Domain Name	u1-radio.net
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.234.106.104

Whois 23.234.106.104

IP Abuse Reports for 23.234.106.104:

This IP address has been reported a total of 70 times from 25 distinct sources. 23.234.106.104 was first reported on January 20th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Octopuce	2026-07-18 00:34:53 (11 hours ago)	Aggressive web search of vulnerable pages: /ueditor/ueditor.config.js/x.php /include/ueditor/ueditor ... show more Aggressive web search of vulnerable pages: /ueditor/ueditor.config.js/x.php /include/ueditor/ueditor.config.js/x.php /app/app/ueditor/ueditor.c ... show less	Web App Attack
🇨🇿 huginet	2026-07-18 00:01:59 (12 hours ago)	23.234.106.104 - - [18/Jul/2026:02:01:57 +0200] "GET /Public/admin/lib/webuploader/0.1.5/webuploader ... show more 23.234.106.104 - - [18/Jul/2026:02:01:57 +0200] "GET /Public/admin/lib/webuploader/0.1.5/webuploader.js HTTP/1.1" 404 82739 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.2745.125 Safari/537.36" 23.234.106.104 - - [18/Jul/2026:02:01:58 +0200] "GET /sy/base/frame/plugs/webuploader-0.1.5/webuploader.js HTTP/1.1" 404 82742 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.2745.125 Safari/537.36" ... show less	Web Spam Web App Attack
Anonymous	2026-07-17 23:50:12 (12 hours ago)	Bot / seems abusive / Apache connections: 21	DDoS Attack Web Spam Bad Web Bot Web App Attack
Anonymous	2026-07-17 20:04:19 (16 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Clou ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Cloud secrets probing show less	Bad Web Bot Web App Attack
🇬🇧 ISPLtd	2026-07-17 12:41:44 (23 hours ago)	23.234.106.104 [17/Jul/2026:09:41:43 -0300] target.domain:80 URL:/Public/PII/lib/webuploader/0.1.5/w ... show more 23.234.106.104 [17/Jul/2026:09:41:43 -0300] target.domain:80 URL:/Public/PII/lib/webuploader/0.1.5/webuploader.js "GET /Public/PII/lib/webuploader/0.1.5/webuploader.js 23.234.106.104 [17/Jul/2026:09:41:44 -0300] target.domain:443 URL:/Public/PII/lib/webuploader/0.1.5/webuploader.js "GET /Public/PII/lib/webuploader/0.1.5/webuploader.js ... show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-07-17 11:34:36 (1 day ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-07-17 07:34:20 (1 day ago)	PSCSERV WPSCAN 23.234.106.104	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-16 21:49:11 (1 day ago)	Path Traversal Attack (/../) or (/.../). Pattern match "(?:^\| (930110-193)	Hacking
🇮🇪 Jim Keir	2026-07-16 17:34:22 (1 day ago)	2026-07-16 17:34:21 23.234.106.104 File scanning, blocking 23.234.106.104 for 5 minutes	Web App Attack
🇳🇱 ConsulHosting	2026-07-16 15:27:56 (1 day ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-07-16 15:08:02 (1 day ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-16 14:18:47 (1 day ago)	CrowdSec: crowdsecurity/http-probing \| req: /include/ueditor/ueditor.config.js/x.php \| 11 distinct p ... show more CrowdSec: crowdsecurity/http-probing \| req: /include/ueditor/ueditor.config.js/x.php \| 11 distinct paths \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.394.84 Safari/537.36 show less	Port Scan Web App Attack
🇺🇸 Lee Daniel	2026-07-16 13:37:12 (1 day ago)	23.234.106.104 - - [16/Jul/2026:09:37:09 -0400] "GET /app/admincp/ui/ueditor/ueditor.config.js/x.php ... show more 23.234.106.104 - - [16/Jul/2026:09:37:09 -0400] "GET /app/admincp/ui/ueditor/ueditor.config.js/x.php HTTP/1.1" 404 47614 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.335.31 Safari/537.36" 23.234.106.104 - - [16/Jul/2026:09:37:09 -0400] "GET /Public/ueditor/ueditor.config.js/x.php HTTP/1.1" 404 47580 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.335.31 Safari/537.36" 23.234.106.104 - - [16/Jul/2026:09:37:10 -0400] "GET /plugin/ueditor/ueditor.config.js/x.php HTTP/1.1" 404 47580 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.335.31 Safari/537.36" 23.234.106.104 - - [16/Jul/2026:09:37:11 -0400] "GET /includes/ueditor/ueditor.config.js/x.php HTTP/1.1" 404 47588 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.335.31 Safari/537.36" 23.234.106.104 - - [16/Jul/2026:09:37:11 -0400] "GET /ewebeditor/ueditor/uedit ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-16 13:16:01 (1 day ago)	Remote Command Execution: Direct Unix Command Execution. Pattern match "(?i)(?:^\|b (932250-195)	Hacking
🇫🇷 masterguru	2026-07-16 12:30:21 (1 day ago)	PHP Injection Attack: Configuration Directive Found. Pattern match "(?i)\\\\b(?:a(?:llow_url_(?:fope ... show more PHP Injection Attack: Configuration Directive Found. Pattern match "(?i)\\\\b(?:a(?:llow_url_(?:fopen\|include)\|pc.(?:coredump_unmap\|en(?:able(?:_cli\|d)\|tries_hint)\|(?:gc_)?ttl\|mmap_file_mask\|preload_path\|s(?:erializer\|hm_s(?:egments\|ize)\|lam_defense)\|use_request_time)\|rg_separator.(?:in\|out)put\|ssert.(?:active\|(?:bai\|qui ..." at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. (933120-196) show less	Hacking

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 194.50.235.136

🇺🇸 172.232.3.17

🇰🇷 121.184.144.232

🇷🇴 92.118.39.77

🇺🇸 216.25.89.115

🇨🇦 207.219.222.29

🇹🇼 198.235.24.26

🇳🇱 195.178.110.137

🇿🇦 165.73.181.202

🇺🇸 155.103.69.40

🇱🇹 77.90.185.16

🇩🇪 69.5.169.231

🇺🇸 67.205.182.193

🇧🇪 66.249.93.142

🇫🇷 51.210.7.44

🇳🇱 45.148.10.147

🇮🇷 5.200.251.126

🇮🇩 2.27.165.137

🇹🇷 195.87.217.26

🇬🇧 192.248.150.180