JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.236.172.125

23.236.172.125 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 35%: ?

35%

ISP	Server Mania Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55286
Domain Name	servermania.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.236.172.125

Whois 23.236.172.125

IP Abuse Reports for 23.236.172.125:

This IP address has been reported a total of 12 times from 6 distinct sources. 23.236.172.125 was first reported on June 12th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-07-02 11:42:31 (2 days ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-42.23.236.172.125.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-42.23.236.172.125.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 Lino Project	2026-07-02 06:59:03 (2 days ago)	23.236.172.125 - - [02/Jul/2026:08:59:00 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6539 "http ... show more 23.236.172.125 - - [02/Jul/2026:08:59:00 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6539 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-06-28 21:58:39 (5 days ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-58.23.236.172.125.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-58.23.236.172.125.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-06-28 09:46:35 (6 days ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-46.23.236.172.125.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-46.23.236.172.125.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-06-25 10:53:08 (1 week ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack
🇬🇧 relianoid.com	2026-06-23 19:47:45 (1 week ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇱🇻 garmtech.com	2026-06-23 04:17:17 (1 week ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-17.23.236.172.125.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-17.23.236.172.125.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-06-19 12:40:36 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-40.23.236.172.125.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-40.23.236.172.125.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇪🇸 el-brujo	2026-06-16 06:20:19 (2 weeks ago)	Cloudflare WAF: Request Path: /register2.html Request Query: Host: foro.elhacker.net userAgent: Moz ... show more Cloudflare WAF: Request Path: /register2.html Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0 Action: managed_challenge Source: firewallCustom ASN Description: B2 Net Solutions Inc. Country: US Method: POST Timestamp: 2026-06-16T06:20:19Z ruleId: 5012d84c6d9f467499149a3cd38d0b9d. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 18:59:41 (2 weeks ago)	(mod_security) mod_security (id:240950) triggered by 23.236.172.125 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240950) triggered by 23.236.172.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 14:59:37.220221 2026] [security2:error] [pid 18768:tid 18768] [client 23.236.172.125:44828] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)\|\|www.nancyscafeandcatering.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-content/themes/eatery/nav.php"] [unique_id "ajBLmaANIcaVg-Q4sT2xkQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 relianoid.com	2026-06-15 16:13:10 (2 weeks ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇩🇪 LRob	2026-06-12 06:15:05 (3 weeks ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 118.26.104.179

🇳🇱 93.174.93.12

🇸🇬 18.143.137.95

🇭🇰 194.187.178.160

🇷🇺 188.120.250.100

🇸🇬 172.217.44.210

🇺🇸 162.216.150.215

🇫🇮 147.185.133.137

🇺🇸 147.185.132.203

🇧🇬 78.128.114.118

🇱🇹 62.60.130.219

🇧🇷 45.205.1.246

🇮🇳 45.64.85.109

🇯🇵 8.216.4.184

🇺🇸 195.184.76.175

🇺🇸 195.184.76.168

🇲🇽 189.203.228.114

🇺🇸 162.216.149.91

🇩🇪 150.241.77.28

🇳🇮 138.97.163.62