AbuseIPDB » 23.129.64.149

23.129.64.149 was found in our database!

This IP was reported 7,873 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Emerald Onion
Usage Type	Data Center/Web Hosting/Transit
ASN	Unknown
Hostname(s)	emeraldonion.net
Domain Name	emeraldonion.org
Country	United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 23.129.64.149

Whois 23.129.64.149

IP Abuse Reports for 23.129.64.149:

This IP address has been reported a total of 7,873 times from 899 distinct sources. 23.129.64.149 was first reported on June 7th 2021, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-07-10 00:07:35 (14 hours ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-07-09 20:07:36 (18 hours ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ᴀʀᴛ	2025-07-09 14:44:17 (23 hours ago)	Triggered Cloudflare WAF (l7ddos) from T1. ASN: 396507 (EMERALD-ONION) Protocol: HTTP/2 ... show moreTriggered Cloudflare WAF (l7ddos) from T1. ASN: 396507 (EMERALD-ONION) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
sefinek.net	2025-07-09 08:32:22 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from T1. Action taken: MANAGED_CHALLENGE Proto ... show moreTriggered Cloudflare WAF (firewallCustom) from T1. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /blocklist-generator UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
hbrks	2025-07-09 01:31:48 (1 day ago)	UKN method, Illegal access marche-be.com/	Web Spam Hacking Bad Web Bot
UM3	2025-07-08 16:12:02 (1 day ago)	Exim Auth Failed	Brute-Force
Pingger Shikkoken	2025-07-08 14:53:05 (1 day ago)	2025-07-08T14:53:05+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more2025-07-08T14:53:05+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=23.129.64.149 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=3581 DF PROTO=TCP SPT=39688 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2025-07-08T14:53:05+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=23.129.64.149 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=31662 DF PROTO=TCP SPT=39690 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2025-07-08T14:53:06+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=23.129.64.149 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=3582 DF PROTO=TCP SPT=39688 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
ghostwarriors	2025-07-08 14:20:23 (2 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
Anonymous	2025-07-07 14:37:51 (3 days ago)	Aggressive web scan	Web App Attack
unhfree.net	2025-07-06 12:49:29 (4 days ago)	Jul 6 08:22:54 canopus postfix/smtpd[3481601]: NOQUEUE: reject: RCPT from unknown[23.129.64.149]: 5 ... show moreJul 6 08:22:54 canopus postfix/smtpd[3481601]: NOQUEUE: reject: RCPT from unknown[23.129.64.149]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<7G9BEN6ERS2W0NA1C9A23AV9REZS5> Jul 6 08:50:54 canopus postfix/smtpd[3482015]: NOQUEUE: reject: RCPT from unknown[23.129.64.149]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<NOA4NDSE5H7DU37JU7R> Jul 6 11:22:02 canopus postfix/smtpd[3491109]: NOQUEUE: reject: RCPT from unknown[23.129.64.149]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<A9UL93KXIYB1CIDT8BNBU07VO736> Jul 6 13:03:16 canopus postfix/smtpd[3496958]: NOQ ... show less	Brute-Force Exploited Host
Greg Poulson	2025-07-05 19:34:06 (4 days ago)	Our website was hit by this DDOS at a rate of 4 in 5 minutes.	DDoS Attack Web Spam Brute-Force
bmino.pl	2025-07-05 17:19:32 (4 days ago)	Autoban IP(2): 23.129.64.149 - Hostname: emeraldonion.net - City: San Jose - Region: California - Co ... show moreAutoban IP(2): 23.129.64.149 - Hostname: emeraldonion.net - City: San Jose - Region: California - Country: US - Location: 37.3394,-121.8950 - Organization: AS396507 Emerald Onion - failed attempts. show less	Brute-Force
xmission.com	2025-07-05 05:59:10 (5 days ago)	Blocked 10 connection attempts due to RBL reputation in the past hour.	Email Spam
Eurofluid	2025-07-04 17:02:41 (5 days ago)	You shall not pass ! Abusive behavior blocked by EF firewall.	Port Scan Hacking Brute-Force
xmission.com	2025-07-04 16:59:06 (5 days ago)	Blocked 13 connection attempts due to RBL reputation in the past hour.	Email Spam