23.93.66.21

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
35% Elevated
19 reports
16 reporters · latest 1 week ago
ISP
Sonic.net, Inc.
Usage Type
Fixed Line ISP
ASN
AS46375
Hostname(s)
23-93-66-21.fiber.dynamic.sonic.net
Domain Name
sonic.com
Country
🇺🇸 United States of America
City
San Jose, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
19 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇳🇱 Netherlands 2 🇺🇸 United States of America 2
Most common categories Brute-Force 5 Web App Attack 4 Hacking 2 Bad Web Bot 2 Exploited Host 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 wlt-blocker
Attempts to login to mail server with wrong username and/or password
Brute-Force
🇩🇪 Vegascosmetics
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: Cluster Berater de17848 (8 IPs/15 Min)
Hacking Bad Web Bot Web App Attack
Anonymous
23.93.66.21 (US/United States/23-93-66-21.fiber.dynamic.sonic.net), 10 distributed imapd attacks on account [redacted]
Brute-Force
Anonymous
Unauthorized bot with fake user agent
Hacking
🇩🇪 netclix.gr
(imapd) Failed IMAP login from 23.93.66.21 (US/United States/23-93-66-21.fiber.dynamic.sonic.net)
Brute-Force
🇩🇪 LRob
Web page flood (L7) | path: /calendrier-2/action~agenda/time_limit~1755986400/tag_ids~726,792/request_format~json/
DDoS Attack Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting
Web App Attack
🇮🇹 Progetto1
Mail - Multiple failed login attempts
Brute-Force Exploited Host
🇩🇪 nyuuzyou
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-09T04:55:14Z.
Bad Web Bot
🇺🇸 LARL-Stompro-2024
Evergreen ILS - Mylist Bot Abuse - HTTP Port 443 - Fake UserAgent. Requests:1
Bad Web Bot
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
Exploited Host Bad Web Bot
🇺🇸 stechusa
[Askari] | Behavior: Targeting specific pages, Slow-read attack, Concurrent page load during attack, HTTP/1.1 over TLS, Outdated browser
Bad Web Bot DDoS Attack
🇺🇸 stechusa
ELEVATED_THREAT | 693 IPs targeting /brand.html | URL template shared by 258 IPs: /brand.html?bulb_shape_type=*&bulb_shape=*&bulb_type=*&mode=list&p=* | Facet request during elevated threat (facet_ratio=1.00, unique_ips=989)
Bad Web Bot DDoS Attack
🇮🇩 xveil
2026-04-02T02:21:39.359124 mail-honeypot postfix/submission/smtpd[23041]: warning: 23-93-66-21.fiber.dynamic.sonic.net[23.93.66.21]: SASL LOGIN authentication failed: authentication failure ...
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 193.32.162.15
🇧🇷 177.84.11.52
🇺🇸 172.86.87.10
🇺🇾 167.62.1.129
🇵🇰 103.31.93.153
🇪🇸 93.93.112.98
🇫🇮 89.47.55.96
🇨🇦 70.51.153.89
🇧🇪 35.210.237.62
🇰🇿 185.97.59.49
🇨🇱 181.43.149.21
🇺🇸 147.185.132.168
🇨🇳 117.34.125.173
🇨🇭 104.251.180.156
🇧🇭 89.148.42.194
🇺🇦 81.162.240.241
🇺🇸 71.76.203.71
🇺🇸 64.62.197.139
🇺🇸 45.42.40.74
🇧🇪 35.210.132.194
feedback