JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.129.64.147

23.129.64.147 was found in our database!

This IP was reported 7,953 times. Confidence of Abuse is 73%: ?

73%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Emerald Onion
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396507
Domain Name	emeraldonion.org
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.129.64.147

Whois 23.129.64.147

IP Abuse Reports for 23.129.64.147:

This IP address has been reported a total of 7,953 times from 908 distinct sources. 23.129.64.147 was first reported on June 7th 2021, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-11 03:01:59 (11 hours ago)	Blocked by UFW (TCP on 42387) Source port: 32087 TTL: 57 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 42387) Source port: 32087 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 23.129.64.147) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇲🇽 Centynova Corp.	2026-06-10 10:18:35 (1 day ago)	Blocked by threat detection service. Centynova Security	Port Scan Email Spam Brute-Force SSH
🇺🇸 xmission.com	2026-06-10 08:45:39 (1 day ago)	Blocked by UFW (TCP on 46787) Source port: 63363 TTL: 57 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 46787) Source port: 63363 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 23.129.64.147) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-10 06:50:51 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 23.129.64.147 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 23.129.64.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 02:50:47.977607 2026] [security2:error] [pid 8879:tid 8879] [client 23.129.64.147:22879] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|test.nationalccl.com\|F\|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "test.nationalccl.com"] [uri "/blog/wp-comments-post.php.old"] [unique_id "aikJR7LnQi9Nb0rxUr_hqQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-09 19:15:19 (1 day ago)	Blocked by UFW (TCP on 53389) Source port: 58201 TTL: 57 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 53389) Source port: 58201 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 23.129.64.147) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-09 06:03:59 (2 days ago)	Blocked by UFW (TCP on 46787) Source port: 18075 TTL: 57 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 46787) Source port: 18075 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 23.129.64.147) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-08 13:11:59 (3 days ago)	Blocked by UFW (TCP on 46787) Source port: 11585 TTL: 57 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 46787) Source port: 11585 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 23.129.64.147) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-07 19:26:39 (3 days ago)	Blocked by UFW (TCP on 53303) Source port: 12621 TTL: 57 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 53303) Source port: 12621 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 23.129.64.147) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 avgsmoe	2026-06-05 07:00:31 (6 days ago)	REPEAT offender. Observed 591 times.	Port Scan Brute-Force
🇦🇺 oncord	2026-06-02 04:15:21 (1 week ago)	Form spam	Web Spam
Anonymous	2026-06-01 20:21:00 (1 week ago)	malicious link spam from 127.0.0.1 (unknown [23.129.64.147]) Mon, 1 Jun 2026 13:10:27 -0700 (PDT) ... show more malicious link spam from 127.0.0.1 (unknown [23.129.64.147]) Mon, 1 Jun 2026 13:10:27 -0700 (PDT) Subject: YOUR WITHDRAWAL IS STILL PENDING — PLEASE REVIEW Time is running out on this offer. <a href=3D"https://telegra.ph/Entry-No-fv8pYKcM-06-01">open your account</a> show less	Fraud Orders Email Spam Spoofing Exploited Host Phishing
🇺🇸 xmission.com	2026-06-01 11:47:19 (1 week ago)	Blocked by UFW (TCP on 38670) Source port: 9443 TTL: 57 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 38670) Source port: 9443 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 23.129.64.147) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-31 11:10:39 (1 week ago)	Blocked by UFW (TCP on 6881) Source port: 16253 TTL: 57 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 6881) Source port: 16253 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 23.129.64.147) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-30 13:52:19 (1 week ago)	Blocked by UFW (TCP on 6881) Source port: 34919 TTL: 57 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 6881) Source port: 34919 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 23.129.64.147) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-30 04:06:05 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 23.129.64.147 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 23.129.64.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 00:05:58.864129 2026] [security2:error] [pid 20567:tid 20578] [client 23.129.64.147:8159] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|retnetsos.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "retnetsos.com"] [uri "/dump.sql"] [unique_id "ahpiJlLrvbQuFhRJXm3GhAAAAIk"], referer: retnetsos.com/dump.sql show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 7953 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 185.226.228.251

🇩🇪 130.12.182.140

🇨🇳 111.228.33.68

🇷🇴 80.94.92.71

🇳🇱 45.148.10.151

🇪🇹 196.188.253.132

🇨🇳 120.48.11.36

🇭🇰 103.230.240.59

🇭🇰 74.125.179.148

🇨🇦 54.39.133.107

🇩🇪 49.13.54.235

🇬🇧 45.82.76.129

🇺🇸 20.168.7.107

🇨🇦 199.167.138.45

🇪🇸 196.196.150.124

🇺🇸 162.216.149.132

🇸🇬 161.118.220.167

🇺🇸 104.234.208.15

🇵🇭 103.224.94.79

🇸🇪 83.233.149.204