JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

23.81.41.65

Neutral Activity

Abuse Confidence Score

0% Low Risk

65 reports

38 reporters · latest 3 months ago

ISP: Leaseweb Japan K.K.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS134351
Domain Name: leaseweb.com
Country: 🇯🇵 Japan
City: Tokyo, Tokyo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

23.81.41.65 has been reported 65 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

65 from 38 distinct reporters

First reported

February 28th 2025

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-25 06:59:28 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 23.81.41.65 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 02:59:24.482334 2026] [security2:error] [pid 32464:tid 32487] [client 23.81.41.65:51997] ModSe ... show more (mod_security) mod_security (id:210492) triggered by 23.81.41.65 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 02:59:24.482334 2026] [security2:error] [pid 32464:tid 32487] [client 23.81.41.65:51997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.17"] [uri "/.env"] [unique_id "amRezHd9O7iBPKMzdRZXfAAAANQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 06:13:12 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 23.81.41.65 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 02:13:08.903431 2026] [security2:error] [pid 2423817:tid 2423817] [client 23.81.41.65:57633] M ... show more (mod_security) mod_security (id:210492) triggered by 23.81.41.65 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 02:13:08.903431 2026] [security2:error] [pid 2423817:tid 2423817] [client 23.81.41.65:57633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.169"] [uri "/.env"] [unique_id "amRT9DqmTIl9MjhfID2l4AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Mykola Spesivtsev	2026-07-25 06:06:18 UTC · (3 months ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/5	Port Scan Web App Attack Bad Web Bot
🇫🇷 Baking333	2026-07-25 05:23:23 UTC · (3 months ago)	[redacted] 23.81.41.65 - - [25/Jul/2026:06:23:20 +0100] "GET /.env HTTP/1.1" 307 423 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" [redacted] 23.81.41.65 - - [25/Jul/2026:06:23:22 +010 ... show more [redacted] 23.81.41.65 - - [25/Jul/2026:06:23:20 +0100] "GET /.env HTTP/1.1" 307 423 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" [redacted] 23.81.41.65 - - [25/Jul/2026:06:23:22 +0100] "GET /.env HTTP/1.1" 307 5688 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-07-25 05:22:52 UTC · (3 months ago)	Accessed trap at '/.env'	Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 05:18:38 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 23.81.41.65 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 01:18:33.627204 2026] [security2:error] [pid 2528153:tid 2528162] [client 23.81.41.65:50206] M ... show more (mod_security) mod_security (id:210492) triggered by 23.81.41.65 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 01:18:33.627204 2026] [security2:error] [pid 2528153:tid 2528162] [client 23.81.41.65:50206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.123"] [uri "/.env"] [unique_id "amRHKSNXRdMwpzg7avWyJAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Mykola Spesivtsev	2026-07-25 05:06:11 UTC · (3 months ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/5	Port Scan Web App Attack Bad Web Bot
🇫🇮 kumiko	2026-07-25 03:51:44 UTC · (3 months ago)	[2026-07-25 06:51:43] Probing for dotfiles "GET /.env HTTP/1.1" 403	Bad Web Bot Web App Attack
🇫🇷 OrchidsRadiant	2026-07-25 03:47:39 UTC · (3 months ago)	_:80 23.81.41.65 - - [25/Jul/2026:03:47:39 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ...	Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-07-25 03:30:09 UTC · (3 months ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 03:26:39 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 23.81.41.65 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 23:26:34.793110 2026] [security2:error] [pid 1740701:tid 1740701] [client 23.81.41.65:50852] M ... show more (mod_security) mod_security (id:210492) triggered by 23.81.41.65 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 23:26:34.793110 2026] [security2:error] [pid 1740701:tid 1740701] [client 23.81.41.65:50852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.221"] [uri "/.env"] [unique_id "amQs6jIVScTSVet0BwevEAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 02:47:24 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 23.81.41.65 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 22:47:17.240631 2026] [security2:error] [pid 669825:tid 669825] [client 23.81.41.65:56185] Mod ... show more (mod_security) mod_security (id:210492) triggered by 23.81.41.65 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 22:47:17.240631 2026] [security2:error] [pid 669825:tid 669825] [client 23.81.41.65:56185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.242"] [uri "/.env"] [unique_id "amQjtRlM8OXyIBN7kD62cwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 alferez	2026-07-25 02:38:20 UTC · (3 months ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 02:23:39 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 23.81.41.65 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 22:23:32.086774 2026] [security2:error] [pid 2791875:tid 2791875] [client 23.81.41.65:57055] M ... show more (mod_security) mod_security (id:210492) triggered by 23.81.41.65 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 22:23:32.086774 2026] [security2:error] [pid 2791875:tid 2791875] [client 23.81.41.65:57055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.230"] [uri "/.env"] [unique_id "amQeJKX-6KoZH3xD1AAJpQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 psauxit	2026-07-25 02:17:34 UTC · (3 months ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping	Web App Attack Hacking

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 209.38.244.245

🇬🇪 185.99.6.133

🇷🇺 176.50.148.216

🇺🇸 104.22.1.106

🇺🇸 2600:100c:a128:e293:2ea0:8e4d:cfc9:790d

🇧🇪 198.235.24.228

🇳🇱 193.47.62.69

🇲🇽 189.233.112.162

🇨🇳 183.224.97.83

🇩🇪 172.71.164.134

🇩🇪 172.70.248.113

🇺🇸 129.213.151.234

🇰🇷 121.133.167.123

🇯🇵 34.84.158.209

🇺🇸 2001:470:1:c84::19e

🇧🇷 205.210.31.233

🇮🇳 203.193.168.136

🇳🇱 195.178.110.30

🇵🇱 176.53.159.199

🇩🇪 172.71.164.135