JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.129.64.169

23.129.64.169 was found in our database!

This IP was reported 400 times. Confidence of Abuse is 91%: ?

91%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Emerald Onion
Usage Type	Fixed Line ISP
ASN	AS396507
Domain Name	emeraldonion.org
Country	🇺🇸 United States of America
City	Oakland, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.129.64.169

Whois 23.129.64.169

IP Abuse Reports for 23.129.64.169:

This IP address has been reported a total of 400 times from 117 distinct sources. 23.129.64.169 was first reported on January 10th 2022, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-06 20:25:19 (3 hours ago)	Blocked by UFW (TCP on 41963) Source port: 55383 TTL: 56 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 41963) Source port: 55383 TTL: 56 Packet length: 60 TOS: 0x00 This report (for 23.129.64.169) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ger-stg-sifi1	2026-07-05 21:14:23 (1 day ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇦🇺 oncord	2026-07-05 07:42:39 (1 day ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-07-04 19:18:01 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 23.129.64.169 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 23.129.64.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 15:17:56.110656 2026] [security2:error] [pid 5638:tid 5638] [client 23.129.64.169:47367] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.stieber.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.stieber.net"] [uri "/"] [unique_id "aklcZLrDoNOsl1jRW24MmAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-07-03 22:09:19 (3 days ago)	Blocked by UFW (TCP on 41963) Source port: 45965 TTL: 56 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 41963) Source port: 45965 TTL: 56 Packet length: 60 TOS: 0x00 This report (for 23.129.64.169) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-02 21:04:39 (4 days ago)	Blocked by UFW (TCP on 41963) Source port: 5677 TTL: 56 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 41963) Source port: 5677 TTL: 56 Packet length: 60 TOS: 0x00 This report (for 23.129.64.169) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 gaztronics	2026-07-02 15:52:19 (4 days ago)	2026-07-02T15:52:17.432160 liberator sendmail[2933137]: 662FqGwZ2933137: [23.129.64.169] did not iss ... show more 2026-07-02T15:52:17.432160 liberator sendmail[2933137]: 662FqGwZ2933137: [23.129.64.169] did not issue MAIL/EXPN/VRFY/ETRN during connection to MSA ... show less	Brute-Force
🇺🇸 xmission.com	2026-07-02 07:21:39 (4 days ago)	Blocked by UFW (TCP on 41963) Source port: 14647 TTL: 56 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 41963) Source port: 14647 TTL: 56 Packet length: 60 TOS: 0x00 This report (for 23.129.64.169) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-01 02:41:39 (5 days ago)	Blocked by UFW (TCP on 1) Source port: 53955 TTL: 56 Packet length: 60 TOS: 0x00 This report (for 2 ... show more Blocked by UFW (TCP on 1) Source port: 53955 TTL: 56 Packet length: 60 TOS: 0x00 This report (for 23.129.64.169) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇬 securejdprop	2026-06-30 23:40:38 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 77). Ip 23.129.64.169 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-30 23:40:37.133219778 +0000 UTC show less	Hacking Web App Attack
🇸🇬 securejdprop	2026-06-30 02:51:07 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 77). Ip 23.129.64.169 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-30 02:51:05.685998554 +0000 UTC show less	Hacking Web App Attack
🇺🇸 xmission.com	2026-06-29 21:17:59 (1 week ago)	Blocked by UFW (TCP on 29929) Source port: 61811 TTL: 56 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 29929) Source port: 61811 TTL: 56 Packet length: 60 TOS: 0x00 This report (for 23.129.64.169) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 anycast_ac	2026-06-28 21:41:23 (1 week ago)	[DDoS Attacker] This IP was attacking website anycast.ac and sent 160 requests on port 443	DDoS Attack Web App Attack
🇺🇸 xmission.com	2026-06-28 05:26:59 (1 week ago)	Blocked by UFW (TCP on 29748) Source port: 13841 TTL: 56 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 29748) Source port: 13841 TTL: 56 Packet length: 60 TOS: 0x00 This report (for 23.129.64.169) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 MatStef132	2026-06-26 11:48:59 (1 week ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot

Showing 1 to 15 of 400 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.232.176.7

🇷🇴 185.100.87.136

🇺🇸 172.202.113.251

🇺🇸 147.182.246.240

🇬🇪 91.239.206.123

🇧🇬 79.124.62.134

🇳🇱 45.148.10.147

🇭🇰 20.205.37.29

🇮🇩 182.10.97.53

🇨🇳 180.76.176.249

🇵🇱 176.53.159.197

🇨🇳 121.40.80.166

🇱🇹 62.60.130.228

🇸🇬 47.79.10.206

🇷🇺 46.44.40.82

🇹🇼 198.235.24.67

🇲🇰 188.44.20.32

🇨🇳 123.139.118.195

🇮🇩 103.99.214.149

🇳🇱 45.148.10.157