JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.172.153.34

172.172.153.34 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 64%: ?

64%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.172.153.34

Whois 172.172.153.34

IP Abuse Reports for 172.172.153.34:

This IP address has been reported a total of 43 times from 32 distinct sources. 172.172.153.34 was first reported on October 7th 2025, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-28 11:04:09 (14 hours ago)	PORT & IP Scan.	Port Scan Brute-Force
Anonymous	2026-06-28 10:07:28 (15 hours ago)	Shorewall log file match.	Port Scan
🇳🇱 Yachiyo Runami	2026-06-28 08:46:14 (17 hours ago)	Port Scan on Honeypot \| Ports: 8443/HTTPS-alt, 8080/HTTP-proxy, 80/HTTP \| Proto: TCP(3) \| Flags: all ... show more Port Scan on Honeypot \| Ports: 8443/HTTPS-alt, 8080/HTTP-proxy, 80/HTTP \| Proto: TCP(3) \| Flags: all SYN \| TTL: 42 \| Len: 60B(3x) \| Win: 64240(3) \| F2B/ufw-honeypot@2026-06-28T08:46:13Z show less	Port Scan Hacking
🇮🇹 NonOggiCaroMio	2026-06-28 08:33:00 (17 hours ago)	Arruso ca si: crowdsecurity/http-sensitive-files	Brute-Force
🇺🇸 RAP	2026-06-28 08:19:27 (17 hours ago)	2026-06-28 08:19:27 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
Anonymous	2026-06-28 07:32:05 (18 hours ago)	...	Bad Web Bot
🇫🇷 dynamix	2026-06-28 06:04:57 (19 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-06 13:55:33 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.172.153.34 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.172.153.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 09:55:29.993051 2026] [security2:error] [pid 30763:tid 30763] [client 172.172.153.34:6781] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.102"] [uri "/.git/config"] [unique_id "aiQm0Zui9Z_Ry-HZRJ-qeAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 Threat.live	2026-06-06 11:40:03 (3 weeks ago)	Suspicious Connection Attempts	Brute-Force
🇨🇭 Kepler-1649c	2026-06-06 10:05:11 (3 weeks ago)	Detected Attack: HTPasswd.Access	Hacking
🇺🇸 TPI-Abuse	2026-06-06 08:31:34 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.172.153.34 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.172.153.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 04:31:30.930314 2026] [security2:error] [pid 28317:tid 28317] [client 172.172.153.34:7113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.45"] [uri "/.git/HEAD"] [unique_id "aiPa4qIAXKVAqrCze4jbOwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇵 radheykrishna.com.np	2026-05-29 05:18:02 (4 weeks ago)	May 29 11:03:01 kernel: [3521673.660369] [UFW BLOCK] IN=ens160 OUT= SRC=172.172.153.34 LEN=40 TOS=0x ... show more May 29 11:03:01 kernel: [3521673.660369] [UFW BLOCK] IN=ens160 OUT= SRC=172.172.153.34 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=5607 PROTO=TCP SPT=29952 DPT=9243 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇭 4server	2026-05-23 14:48:24 (1 month ago)	[SatMay2316:48:19.3106312026][security2:error][pid2523246:tid2523262][client172.172.153.34:0]ModSecu ... show more [SatMay2316:48:19.3106312026][security2:error][pid2523246:tid2523262][client172.172.153.34:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"prodotti.comarcosa.com\"][uri\"/config/.env\"][unique_id\"ahG-M9UbcWC-dWnCeyBWYAAAAIY\"]\,referer:https://twitter.com/ show less	Hacking Web App Attack
Anonymous	2026-05-23 14:34:01 (1 month ago)	(PERMBLOCK) 172.172.153.34 (US/United States/-) has had more than 4 temp blocks in the last 86400 se ... show more (PERMBLOCK) 172.172.153.34 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇵🇱 lns.bz	2026-05-23 13:40:24 (1 month ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 181.224.65.102

🇩🇪 94.249.160.148

🇰🇷 59.23.20.15

🇵🇱 54.38.52.18

🇧🇷 45.205.1.5

🇳🇱 45.148.10.239

🇲🇦 41.92.98.22

🇹🇷 5.11.162.163

🇳🇱 217.60.195.72

🇺🇸 216.244.66.196

🇧🇷 200.150.253.172

🇰🇷 175.192.243.185

🇹🇭 171.99.132.74

🇭🇰 152.32.172.177

🇺🇸 144.34.234.80

🇲🇴 125.31.2.160

🇸🇪 83.226.181.38

🇸🇬 82.97.196.83

🇺🇸 64.62.197.89

🇨🇳 61.148.222.198