JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.137.254.25

23.137.254.25 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 26%: ?

26%

ISP	INCOGNET LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS40663
Domain Name	incognet.io
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.137.254.25

Whois 23.137.254.25

IP Abuse Reports for 23.137.254.25:

This IP address has been reported a total of 23 times from 16 distinct sources. 23.137.254.25 was first reported on April 7th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-06-09 20:07:50 (2 weeks ago)	ICS Labs identified 23.137.254.25 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
🇫🇮 nNordic	2026-06-09 10:19:14 (2 weeks ago)	Connection attempt blocked by IDS/IPS from 23.137.254.25/32	Hacking
🇺🇸 xmission.com	2026-05-29 04:58:39 (4 weeks ago)	Blocked by UFW (TCP on 6881) Source port: 34140 TTL: 53 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6881) Source port: 34140 TTL: 53 Packet length: 60 TOS: 0x08 This report (for 23.137.254.25) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-19 05:39:39 (1 month ago)	Blocked by UFW (TCP on 6881) Source port: 61592 TTL: 53 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6881) Source port: 61592 TTL: 53 Packet length: 60 TOS: 0x08 This report (for 23.137.254.25) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-14 01:46:59 (1 month ago)	Blocked by UFW (TCP on 6881) Source port: 46868 TTL: 53 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6881) Source port: 46868 TTL: 53 Packet length: 60 TOS: 0x08 This report (for 23.137.254.25) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-13 05:02:39 (1 month ago)	Blocked by UFW (TCP on 6881) Source port: 37760 TTL: 53 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6881) Source port: 37760 TTL: 53 Packet length: 60 TOS: 0x08 This report (for 23.137.254.25) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-12 01:29:59 (1 month ago)	Blocked by UFW (TCP on 6881) Source port: 48006 TTL: 53 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6881) Source port: 48006 TTL: 53 Packet length: 60 TOS: 0x08 This report (for 23.137.254.25) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 oncord	2026-05-11 08:31:49 (1 month ago)	Form spam	Web Spam
🇨🇭 Origon	2026-05-07 14:02:15 (1 month ago)	http-bad-user-agent - IP: 23.137.254.25 - time="2026-05-07T16:02:15+02:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 23.137.254.25 - time="2026-05-07T16:02:15+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 23.137.254.25 (US/40663) : 4h ban on Ip 23.137.254.25" module=db show less	Bad Web Bot
Anonymous	2026-05-06 04:03:42 (1 month ago)	2026-05-05 19:00:35,150 fail2ban.actions [3625835]: NOTICE [tor] Ban 23.137.254.25 2026-05-0 ... show more 2026-05-05 19:00:35,150 fail2ban.actions [3625835]: NOTICE [tor] Ban 23.137.254.25 2026-05-05 22:00:32,436 fail2ban.actions [3625835]: NOTICE [tor] Ban 23.137.254.25 2026-05-06 01:00:32,040 fail2ban.actions [3625835]: NOTICE [tor] Ban 23.137.254.25 2026-05-06 04:00:40,562 fail2ban.actions [3625835]: NOTICE [tor] Ban 23.137.254.25 2026-05-06 07:03:41,433 fail2ban.actions [3625835]: NOTICE [tor] Ban 23.137.254.25 show less	Brute-Force
🇫🇮 YF	2026-05-05 18:02:18 (1 month ago)	WordPress directory enumeration	Web App Attack
🇩🇪 LRob.fr	2026-04-29 09:15:06 (1 month ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
Anonymous	2026-04-28 19:58:40 (2 months ago)	(wordpress) Failed wordpress login from 23.137.254.25 (US/United States/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-04-26 16:52:40 (2 months ago)	(mod_security) mod_security (id:210831) triggered by 23.137.254.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 23.137.254.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 12:52:35.740439 2026] [security2:error] [pid 3638:tid 3638] [client 23.137.254.25:54442] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.roumer.com\|F\|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.roumer.com"] [uri "/robots.txt"] [unique_id "ae5C0wt69yHz6UoQWqQ2IwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-04-25 04:08:35 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.211.26

🇺🇸 2602:80d:1008::76

🇧🇷 187.58.66.231

🇺🇸 165.154.163.10

🇺🇸 158.94.187.116

🇱🇻 81.30.98.62

🇵🇪 38.25.22.134

🇺🇸 20.169.105.51

🇮🇳 203.190.153.90

🇨🇴 181.56.210.115

🇻🇳 171.231.191.123

🇨🇳 120.239.28.248

🇺🇸 104.28.152.243

🇧🇷 103.139.178.175

🇷🇺 94.140.246.29

🇩🇪 92.246.90.114

🇷🇺 81.22.193.180

🇷🇺 81.22.193.172

🇷🇺 81.22.193.24

🇫🇷 72.60.94.74