JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.81.81.216

23.81.81.216 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 36%: ?

36%

ISP	LeaseWeb USA, Inc. Pheonix
Usage Type	Data Center/Web Hosting/Transit
ASN	AS19148
Hostname(s)	ip216.ip-23-81-81.mpp.az.com
Domain Name	leaseweb.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.81.81.216

Whois 23.81.81.216

IP Abuse Reports for 23.81.81.216:

This IP address has been reported a total of 19 times from 6 distinct sources. 23.81.81.216 was first reported on May 9th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 dtorrer	2026-06-16 16:41:55 (1 day ago)	Brute-force general attack.	Brute-Force
🇪🇸 el-brujo	2026-06-15 20:48:23 (2 days ago)	Cloudflare WAF: Request Path: /register2.html Request Query: Host: foro.elhacker.net userAgent: Moz ... show more Cloudflare WAF: Request Path: /register2.html Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: Leaseweb USA, Inc. Country: US Method: POST Timestamp: 2026-06-15T20:48:23Z ruleId: 5012d84c6d9f467499149a3cd38d0b9d. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
Anonymous	2026-06-14 12:47:31 (3 days ago)	Spam registration attempt on forum.	Web Spam Blog Spam
🇱🇻 garmtech.com	2026-06-14 07:50:07 (3 days ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-50.23.81.81.216.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-50.23.81.81.216.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-06-14 07:19:21 (3 days ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-19.23.81.81.216.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-19.23.81.81.216.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇪🇸 el-brujo	2026-06-13 00:48:26 (5 days ago)	Cloudflare WAF: Request Path: /register2.html Request Query: Host: foro.elhacker.net userAgent: Moz ... show more Cloudflare WAF: Request Path: /register2.html Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: Leaseweb USA, Inc. Country: US Method: POST Timestamp: 2026-06-13T00:48:26Z ruleId: 5012d84c6d9f467499149a3cd38d0b9d. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇱🇻 garmtech.com	2026-06-10 09:10:12 (1 week ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-10.23.81.81.216.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-10.23.81.81.216.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-28 09:08:01 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-08.23.81.81.216.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-08.23.81.81.216.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 Lino Project	2026-05-22 18:57:44 (3 weeks ago)	23.81.81.216 - - [22/May/2026:20:57:43 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6488 "https: ... show more 23.81.81.216 - - [22/May/2026:20:57:43 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6488 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-05-20 03:35:41 (4 weeks ago)	[Wed May 20 13:35:40.579031 2026] [security2:error] [pid 384719] [client 23.81.81.216:17601] [client ... show more [Wed May 20 13:35:40.579031 2026] [security2:error] [pid 384719] [client 23.81.81.216:17601] [client 23.81.81.216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/xmlrpc.php"] [unique_id "ag0sDI2ZP8Wmvy6intb72wAAAAc"], referer: https://paulshipley.com.au/xmlrpc.php?rsd ... show less	Web App Attack
🇱🇻 garmtech.com	2026-05-19 16:23:35 (4 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-23.23.81.81.216.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-23.23.81.81.216.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 Lino Project	2026-05-19 02:33:07 (4 weeks ago)	23.81.81.216 - - [19/May/2026:04:33:07 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6488 "https: ... show more 23.81.81.216 - - [19/May/2026:04:33:07 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6488 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-05-18 06:17:42 (4 weeks ago)	23.81.81.216 - - [18/May/2026:08:17:35 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primo ... show more 23.81.81.216 - - [18/May/2026:08:17:35 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-05-17 01:24:14 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-24.23.81.81.216.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-24.23.81.81.216.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 Lino Project	2026-05-13 06:47:34 (1 month ago)	23.81.81.216 - - [13/May/2026:08:47:33 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6257 "https: ... show more 23.81.81.216 - - [13/May/2026:08:47:33 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6257 "https://www.primobio.it/mio-account/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 20.65.195.23

🇱🇹 91.224.92.17

🇩🇪 45.43.62.37

🇸🇬 43.160.213.194

🇹🇭 203.154.91.105

🇳🇱 172.94.9.186

🇵🇭 116.50.154.131

🇮🇳 103.206.131.33

🇺🇸 71.6.242.83

🇳🇱 45.142.193.121

🇸🇬 43.156.60.15

🇺🇸 216.25.89.147

🇯🇵 172.207.72.71

🇧🇪 34.14.46.90

🇺🇸 18.226.8.103

🇹🇼 198.235.24.11

🇬🇧 185.216.145.172

🇻🇳 160.191.165.249

🇸🇬 148.72.211.148

🇫🇮 147.185.133.140