JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.153.21.136

161.153.21.136 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 31%: ?

31%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.153.21.136

Whois 161.153.21.136

IP Abuse Reports for 161.153.21.136:

This IP address has been reported a total of 8 times from 4 distinct sources. 161.153.21.136 was first reported on August 22nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-26 18:06:16 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 161.153.21.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 161.153.21.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 14:06:10.726868 2026] [security2:error] [pid 26324:tid 26324] [client 161.153.21.136:44811] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|williamfitzsimmons.com\|F\|2"] [data ".harlows.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "williamfitzsimmons.com"] [uri "/news/0410-william-fitzsimmons-spring-tour-update/www.harlows.com"] [unique_id "ao8rEkD5YnthgLFD6oE6YQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-26 02:18:47 (2 days ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 pixelmemory.us	2026-08-25 07:46:06 (2 days ago)	2026-08-25T07:44:27 161.153.21.136 GET /Photos/Family/2013-11-28%20Thanksgiving/raw/IMG_5977.CR2 Moz ... show more 2026-08-25T07:44:27 161.153.21.136 GET /Photos/Family/2013-11-28%20Thanksgiving/raw/IMG_5977.CR2 Mozilla/5.0 (X11; Linux aarch64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇺🇸 pixelmemory.us	2026-08-25 01:33:15 (3 days ago)	2026-08-25T01:31:57 161.153.21.136 GET /Photos/Family/2015%20Thanksgiving/raw/IMG_1883.CR2 Mozilla/5 ... show more 2026-08-25T01:31:57 161.153.21.136 GET /Photos/Family/2015%20Thanksgiving/raw/IMG_1883.CR2 Mozilla/5.0 (X11; Linux aarch64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇩🇪 LRob	2026-08-23 20:28:46 (4 days ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /33-meilleur-velo-entre-5000-et-10000-euros \| query: order=product.sales.desc \| 2026-08-23 20:28 UTC show less	DDoS Attack Web App Attack
🇺🇸 pixelmemory.us	2026-08-23 19:23:13 (4 days ago)	2026-08-23T19:18:27 161.153.21.136 GET /Photos/Friends/2016-08-21%20Long%20Wedding/raw/IMG_2673.CR2 ... show more 2026-08-23T19:18:27 161.153.21.136 GET /Photos/Friends/2016-08-21%20Long%20Wedding/raw/IMG_2673.CR2 Mozilla/5.0 (X11; Linux aarch64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-22 14:16:44 (5 days ago)	(mod_security) mod_security (id:210730) triggered by 161.153.21.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 161.153.21.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 10:16:39.863043 2026] [security2:error] [pid 20464:tid 20464] [client 161.153.21.136:4244] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|impostersyndromeunmasked.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "impostersyndromeunmasked.com"] [uri "/carmensaundersrussell.com"] [unique_id "aomvR5zFkY3Y88Vuh030BgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 pixelmemory.us	2026-08-22 04:39:17 (6 days ago)	2026-08-22T04:37:35 161.153.21.136 GET /Photos/Family/2014-10-05%20Jessica%20Baby%20Shower/raw/IMG_9 ... show more 2026-08-22T04:37:35 161.153.21.136 GET /Photos/Family/2014-10-05%20Jessica%20Baby%20Shower/raw/IMG_9306.CR2 Mozilla/5.0 (X11; Linux aarch64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 ... show less	Bad Web Bot

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.137

🇯🇵 34.146.143.201

🇨🇳 27.18.84.133

🇺🇸 2400:cb00:988:1000:1725:bea4:a4a2:abe2

🇨🇳 222.215.99.88

🇱🇹 213.176.26.122

🇺🇸 205.210.31.102

🇳🇱 193.47.62.69

🇺🇦 192.162.237.4

🇺🇾 186.53.185.6

🇭🇰 154.211.22.211

🇺🇸 152.232.120.67

🇭🇰 152.32.252.65

🇫🇮 147.185.133.220

🇰🇷 121.188.250.148

🇮🇳 98.70.48.241

🇹🇷 94.154.43.161

🇧🇬 79.124.59.106

🇰🇷 64.110.90.250

🇮🇳 43.224.0.201