JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.234.93.119

23.234.93.119 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 58%: ?

58%

ISP	Urban GIS, Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS11878
Hostname(s)	static-23-234-93-119.cust.tzulo.com
Domain Name	urbangis.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.234.93.119

Whois 23.234.93.119

IP Abuse Reports for 23.234.93.119:

This IP address has been reported a total of 60 times from 20 distinct sources. 23.234.93.119 was first reported on June 10th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 actrix	2026-09-17 15:17:29 (2 days ago)	Sophos XGS VPN portal credential stuffing: 13 failed authentication attempts across 7 distinct usern ... show more Sophos XGS VPN portal credential stuffing: 13 failed authentication attempts across 7 distinct usernames over 6 separate days since 2026-09-13. Low-and-slow distributed attack. show less	Brute-Force Web App Attack
Anonymous	2026-09-15 09:04:08 (4 days ago)	[osotir.org] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.env \| /app/.env \| /.env.de ... show more [osotir.org] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.env \| /app/.env \| /.env.dev show less	Hacking Web App Attack
🇫🇷 david.houstin	2026-09-15 07:56:01 (4 days ago)	23.234.93.119 - - [15/Sep/2026:09:55:57 +0200] "GET /laravel/.env HTTP/2.0" 404 777 "-" "Mozilla/5.0 ... show more 23.234.93.119 - - [15/Sep/2026:09:55:57 +0200] "GET /laravel/.env HTTP/2.0" 404 777 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 21121 - 23.234.93.119 - - [15/Sep/2026:09:55:57 +0200] "GET /backend/.env HTTP/2.0" 404 3323 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 21723 - 23.234.93.119 - - [15/Sep/2026:09:55:57 +0200] "GET /app/.env HTTP/2.0" 404 776 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 22753 - 23.234.93.119 - - [15/Sep/2026:09:55:57 +0200] "GET /api/.env HTTP/2.0" 404 799 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23315 - 23.234.93.119 - - [15/Sep/2026:09:55:58 +0200] "GET /info.php HTTP/2.0" 404 3315 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebK ... show less	Web App Attack Bad Web Bot
Anonymous	2026-09-15 07:42:40 (4 days ago)	Probing\(3\) HTTP Ports ...	Bad Web Bot Web App Attack
🇺🇸 mccsoft.io	2026-09-15 06:47:03 (5 days ago)	Web application attack / vulnerability scanning. Source sent 10 HTTP request(s) (10 distinct paths) ... show more Web application attack / vulnerability scanning. Source sent 10 HTTP request(s) (10 distinct paths) to our public nginx web server on TCP 80/443, probing blocked/sensitive paths; all returned HTTP 444 (connection closed by security rule, jail nginx-444). Sample requests: GET /api/.env \| GET /app/.env \| GET /backend/.env \| GET /.env \| GET /.env.backup. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chr. Observed 2026-09-15 06:47:01 UTC. TCP handshake completed (requests fully received). Categories: Web App Attack / Bad Web Bot. show less	Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-09-15 06:13:58 (5 days ago)	Attempted access to sensitive endpoint (/.env.dev) detected. Automated scan or unauthorized probing.	Web App Attack
🇩🇪 DyhnenTv	2026-09-15 03:09:33 (5 days ago)	CrowdSec webserver: crowdsecurity/http-sensitive-files	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-15 03:05:40 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 23.234.93.119 (static-23-234-93-119.cust.tzulo. ... show more (mod_security) mod_security (id:210492) triggered by 23.234.93.119 (static-23-234-93-119.cust.tzulo.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 23:05:36.347305 2026] [security2:error] [pid 7044:tid 7044] [client 23.234.93.119:37920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.9"] [uri "/.env"] [unique_id "aqi2AHaZ1F3W6pnApcjK-gAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-09-15 02:52:56 (5 days ago)	23.234.93.119 - - [14/Sep/2026:20:52:55 -0600] "POST /wp-login.php HTTP/2.0" 200 2481 "-" "Mozilla/5 ... show more 23.234.93.119 - - [14/Sep/2026:20:52:55 -0600] "POST /wp-login.php HTTP/2.0" 200 2481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" 23.234.93.119 - - [14/Sep/2026:20:52:56 -0600] "POST /wp-login.php?redirect_to=https%3A%2F%2Fdooce.com%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 2481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" 23.234.93.119 - - [14/Sep/2026:20:52:56 -0600] "POST /wp-login.php?redirect_to=https%3A%2F%2Fdooce.com%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 2481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" ... show less	Brute-Force
🇹🇭 thaizone.com	2026-09-15 01:24:23 (5 days ago)	Hacking attempts against websites (D1) #1	Web App Attack Hacking
🇺🇸 aks4226	2026-08-31 05:32:55 (2 weeks ago)	Bot search, attacking common web applications.	Web App Attack
Anonymous	2026-08-31 04:50:16 (2 weeks ago)	[osotir.org] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.env.backup	Hacking Web App Attack
🇩🇪 CELOS-SOC	2026-02-14 20:34:06 (7 months ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇩🇪 CELOS-SOC	2026-02-13 16:33:10 (7 months ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇩🇪 CELOS-SOC	2026-02-12 00:34:23 (7 months ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇦 2001:16a4:292:5911:8d78:95e2:45b7:8851

🇺🇸 205.185.118.81

🇳🇱 185.234.9.243

🇲🇾 183.171.49.135

🇮🇩 182.8.249.19

🇺🇸 172.236.228.208

🇺🇸 172.236.228.38

🇺🇸 167.172.233.31

🇹🇭 165.154.120.211

🇭🇰 165.154.45.62

🇺🇸 162.216.150.205

🇺🇸 158.94.187.70

🇨🇦 138.197.167.164

🇸🇪 130.78.189.159

🇨🇳 112.26.99.93

🇧🇬 109.160.32.77

🇵🇰 103.162.41.179

🇻🇳 103.78.0.229

🇱🇹 91.224.92.115

🇫🇷 86.75.172.162