JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.191.200.50

23.191.200.50 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 46%: ?

46%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Unredacted Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS401401
Domain Name	unredacted.org
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.191.200.50

Whois 23.191.200.50

IP Abuse Reports for 23.191.200.50:

This IP address has been reported a total of 32 times from 22 distinct sources. 23.191.200.50 was first reported on March 25th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 stinpriza	2026-08-02 08:20:57 (1 hour ago)	Web App Attack	Web App Attack
🇩🇪 4server	2026-08-02 06:53:36 (3 hours ago)	[SunAug0208:53:32.8138792026][security2:error][pid2516920:tid2516979][client23.191.200.50:0]ModSecur ... show more [SunAug0208:53:32.8138792026][security2:error][pid2516920:tid2516979][client23.191.200.50:0]ModSecurity:Accessdeniedwithcode403$phase2$.OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded$TotalScore:5$\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"kiteinvest.ch\"][uri\"/\"][unique_id\"am7pbGbuHNRjVzUUOi02gAAAAFU\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 dynamix	2026-08-01 19:02:20 (15 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 todix	2026-07-31 18:22:36 (1 day ago)	Wordpress brute force or spam attempt from 23.191.200.50	Brute-Force
🇺🇸 TPI-Abuse	2026-07-15 16:18:35 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 23.191.200.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 23.191.200.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 12:18:31.654840 2026] [security2:error] [pid 15543:tid 15543] [client 23.191.200.50:48040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "terruven.badritual.art"] [uri "/.git/config"] [unique_id "aley13oaPqKBNWO0a4iOfAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 raph	2026-07-12 21:43:46 (2 weeks ago)	[SQL INJECTION] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(%20AND%20\|%2 ... show more [SQL INJECTION] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(%20AND%20\|%20and%20\|%20OR%20\|%20or%20).* HTTP/1.1$ show less	SQL Injection
🇩🇪 raph	2026-07-08 03:42:48 (3 weeks ago)	[005] content filter failure, web form spam detected	Web Spam Blog Spam
🇺🇸 TPI-Abuse	2026-07-05 01:01:43 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 23.191.200.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 23.191.200.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 21:01:37.509264 2026] [security2:error] [pid 7298:tid 7298] [client 23.191.200.50:25240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|solporpoise.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "solporpoise.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akms8T2RaEvWzewvzBdTqwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 MusicLibrary	2026-07-02 17:23:19 (4 weeks ago)	Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-30 13:59:36 (1 month ago)	Blocked by UFW (TCP on 34602) Source port: 443 TTL: 60 Packet length: 76 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 34602) Source port: 443 TTL: 60 Packet length: 76 TOS: 0x00 This report (for 23.191.200.50) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 big-cloud.nl	2026-06-13 07:24:12 (1 month ago)	Try to access /xmlrpc.php	Web App Attack
🇫🇷 dynamix	2026-06-12 09:27:33 (1 month ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇨🇭 Origon	2026-06-10 14:16:31 (1 month ago)	http-probing - IP: 23.191.200.50 - time="2026-06-10T16:16:30+02:00" level=info msg="(555f66b4f6a745 ... show more http-probing - IP: 23.191.200.50 - time="2026-06-10T16:16:30+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 23.191.200.50 (US/401401) : 4h ban on Ip 23.191.200.50" module=db show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 10:44:57 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 23.191.200.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 23.191.200.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:44:50.044734 2026] [security2:error] [pid 27873:tid 27873] [client 23.191.200.50:37170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kwtlaw.com"] [uri "/.git/config"] [unique_id "aifuolBGOvOeDttErMRBKAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Progetto1	2026-06-04 17:06:03 (1 month ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇴 193.163.125.32

🇩🇪 193.124.20.232

🇺🇸 192.236.214.139

🇷🇺 185.240.102.11

🇺🇸 173.214.169.88

🇺🇸 161.35.1.210

🇻🇳 160.30.157.214

🇩🇪 134.122.68.102

🇫🇷 128.79.19.242

🇱🇹 77.90.185.20

🇺🇸 71.6.199.23

🇺🇸 66.132.172.192

🇺🇸 66.55.80.161

🇺🇸 64.202.186.161

🇹🇼 61.222.211.114

🇺🇸 45.194.67.29

🇳🇱 45.148.10.147

🇮🇩 43.133.140.5

🇻🇳 36.50.54.201

🇬🇧 35.203.210.18