JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.191.200.55

23.191.200.55 was found in our database!

This IP was reported 55 times. Confidence of Abuse is 59%: ?

59%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Unredacted Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS401401
Domain Name	unredacted.org
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.191.200.55

Whois 23.191.200.55

IP Abuse Reports for 23.191.200.55:

This IP address has been reported a total of 55 times from 33 distinct sources. 23.191.200.55 was first reported on March 25th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-09-01 00:53:02 (1 hour ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: /xmlrpc.php \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| 2026-09-01 00:53 UTC show less	Hacking Web App Attack
🇩🇪 maxpower	2026-08-30 15:14:02 (1 day ago)	(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 23.191.200.55 (US/United States/-): 3 in the l ... show more (nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 23.191.200.55 (US/United States/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 23.191.200.55 - - [30/Aug/2026:17:13:55 +0200] "POST /xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Linux; Android 11; M2007J20CG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.101 Mobile Safari/537.36" "-" host=circuitografico.it 2026/08/30 17:13:56 [error] 4055849#4055849: 1280697 access forbidden by rule, client: 23.191.200.55, server: circuitografico.it.etag.it, request: "POST /xmlrpc.php HTTP/1.1", host: "circuitografico.it" 2026/08/30 17:13:57 [error] 4055849#4055849: *1280697 access forbidden by rule, client: 23.191.200.55, server: circuitografico.it.etag.it, request: "POST /xmlrpc.php HTTP/1.1", host: "circuitografico.it" show less	Port Scan
🇫🇷 dynamix	2026-08-29 21:03:11 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 maxpower	2026-08-28 03:25:39 (3 days ago)	(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 23.191.200.55 (US/United States/-): 3 in the l ... show more (nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 23.191.200.55 (US/United States/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/08/28 05:25:35 [error] 625361#625361: 623682 access forbidden by rule, client: 23.191.200.55, server: spacehosting.ovh, request: "POST /xmlrpc.php HTTP/1.1", host: "spacehosting.ovh" 2026/08/28 05:25:36 [error] 625361#625361: 623682 access forbidden by rule, client: 23.191.200.55, server: spacehosting.ovh, request: "POST /xmlrpc.php HTTP/1.1", host: "spacehosting.ovh" 2026/08/28 05:25:37 [error] 625361#625361: 623682 access forbidden by rule, client: 23.191.200.55, server: spacehosting.ovh, request: "POST /xmlrpc.php HTTP/1.1", host: "spacehosting.ovh" show less	Port Scan
🇺🇸 kosada.com	2026-08-28 01:36:51 (4 days ago)	Web vulnerability probing: /login	Web App Attack
🇫🇷 dynamix	2026-08-22 08:01:35 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-08-19 02:04:25 (1 week ago)	2026-08-18 17:01:14,404 fail2ban.actions [39175]: NOTICE [tor] Ban 23.191.200.55 2026-08-18 ... show more 2026-08-18 17:01:14,404 fail2ban.actions [39175]: NOTICE [tor] Ban 23.191.200.55 2026-08-18 20:00:55,531 fail2ban.actions [39175]: NOTICE [tor] Ban 23.191.200.55 2026-08-18 23:00:43,624 fail2ban.actions [39175]: NOTICE [tor] Ban 23.191.200.55 2026-08-19 02:00:59,617 fail2ban.actions [39175]: NOTICE [tor] Ban 23.191.200.55 2026-08-19 05:04:24,450 fail2ban.actions [39175]: NOTICE [tor] Ban 23.191.200.55 show less	Brute-Force
🇬🇧 consul.to	2026-08-16 03:57:20 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 xmission.com	2026-08-13 19:04:35 (2 weeks ago)	Blocked by UFW (TCP on 35112) Source port: 51225 TTL: 53 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 35112) Source port: 51225 TTL: 53 Packet length: 40 TOS: 0x08 This report (for 23.191.200.55) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇸 masterguru	2026-08-09 18:16:12 (3 weeks ago)	(wplogin) Failed WordPress login from 23.191.200.55 (US/United States/-): 5 in the last 3600 secs (0 ... show more (wplogin) Failed WordPress login from 23.191.200.55 (US/United States/-): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-08-07 18:55:44 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 23.191.200.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 23.191.200.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 14:55:36.544203 2026] [security2:error] [pid 4000258:tid 4000258] [client 23.191.200.55:26670] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 23.191.200.55 (+1 hits since last alert)\|ekur-art.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ekur-art.com"] [uri "/xmlrpc.php"] [unique_id "anYqKI9RxyLWRBT6CnC_jgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-07 17:36:30 (3 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 roxyapi	2026-08-04 11:00:14 (3 weeks ago)	Honeypot: automated vulnerability scan / web app attack. Last probe: GET /wp-json/edd/v1/license/" A ... show more Honeypot: automated vulnerability scan / web app attack. Last probe: GET /wp-json/edd/v1/license/" AND EXTRACTVALUE(1%2CCONCAT(0x7e%2CVERSION())) AND " show less	Web App Attack Bad Web Bot
🇩🇪 ger-stg-sifi1	2026-08-02 13:38:47 (4 weeks ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇦🇱 router.al	2026-08-02 13:07:37 (4 weeks ago)	08/02/2026-13:07:37.254998 23.191.200.55 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 102	Hacking

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 148.240.238.3

🇩🇪 118.193.59.142

🇻🇳 115.76.50.116

🇳🇱 89.21.67.159

🇫🇷 85.217.140.19

🇺🇸 66.132.186.221

🇺🇸 66.132.186.210

🇳🇱 45.148.10.152

🇹🇳 41.226.14.100

🇦🇪 2.51.42.248

🇺🇸 195.184.76.235

🇧🇬 79.124.62.134

🇺🇸 40.124.170.184

🇻🇳 27.79.4.15

🇻🇳 14.183.221.10

🇦🇷 200.59.83.86

🇧🇪 198.235.24.247

🇨🇳 180.153.236.69

🇺🇸 163.182.110.233

🇧🇷 152.32.199.115