JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.183.135.153

172.183.135.153 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 25%: ?

25%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.183.135.153

Whois 172.183.135.153

IP Abuse Reports for 172.183.135.153:

This IP address has been reported a total of 40 times from 19 distinct sources. 172.183.135.153 was first reported on November 27th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-27 16:37:56 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.183.135.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.183.135.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 12:37:48.857747 2026] [security2:error] [pid 2181166:tid 2181166] [client 172.183.135.153:14116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.27"] [uri "/.git/HEAD"] [unique_id "ameJXEVsSTjpeuhrM7WBUwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 EricTheRedFL	2026-07-27 14:51:18 (1 day ago)	web.ab-data.us:80 172.183.135.153 - - [27/Jul/2026:10:51:15 -0400] "GET /.git/HEAD HTTP/1.1" 301 595 ... show more web.ab-data.us:80 172.183.135.153 - - [27/Jul/2026:10:51:15 -0400] "GET /.git/HEAD HTTP/1.1" 301 595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" web.ab-data.us:80 172.183.135.153 - - [27/Jul/2026:10:51:15 -0400] "GET /.git/config HTTP/1.1" 301 599 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" web.ab-data.us:80 172.183.135.153 - - [27/Jul/2026:10:51:16 -0400] "GET /.git/logs/HEAD HTTP/1.1" 301 605 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" web.ab-data.us:80 172.183.135.153 - - [27/Jul/2026:10:51:16 -0400] "GET /.git/refs/heads/master HTTP/1.1" 301 621 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" web.ab-data.us:80 172.183.135.153 - - [27/Jul/2026:10:51:16 -0400] "GET /.git/refs/heads/main HTTP/1.1" 301 617 ... show less	Hacking Brute-Force Web App Attack
Anonymous	2026-07-27 14:47:36 (1 day ago)	denied traffic to a honeypot network. destination port 2078.	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-05-20 19:20:49 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.183.135.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.183.135.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 15:20:44.496605 2026] [security2:error] [pid 5424:tid 5480] [client 172.183.135.153:30793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "onixgironashop.com"] [uri "/config/.env"] [unique_id "ag4JjCte6S2higbcXnUsfAAAAZI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-20 17:16:06 (2 months ago)	(PERMBLOCK) 172.183.135.153 (US/United States/-) has had more than 4 temp blocks in the last 86400 s ... show more (PERMBLOCK) 172.183.135.153 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-05-20 16:41:01 (2 months ago)	(caddyscan) Scanner path probe from 172.183.135.153 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 172.183.135.153 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:16:41:00 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:16:41:00 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:16:41:00 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:16:41:00 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:16:41:01 +0000] "GET /@fs/.git/config?import?raw HTTP/1.1" show less	Port Scan
Anonymous	2026-05-20 15:38:21 (2 months ago)	(caddyscan) Scanner path probe from 172.183.135.153 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 172.183.135.153 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:15:38:20 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:15:38:20 +0000] "GET /config/.env HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:15:38:20 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:15:38:20 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:15:38:20 +0000] "GET /.env HTTP/1.1" show less	Port Scan
Anonymous	2026-05-20 14:27:40 (2 months ago)	(caddyscan) Scanner path probe from 172.183.135.153 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 172.183.135.153 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:13:56:56 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:13:56:56 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:13:56:56 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:13:56:56 +0000] "GET /@fs/.git/config?import?raw HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:14:27:39 +0000] "GET /config/.env HTTP/1.1" show less	Port Scan
Anonymous	2026-05-20 13:25:17 (2 months ago)	(caddyscan) Scanner path probe from 172.183.135.153 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 172.183.135.153 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:13:25:16 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:13:25:16 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:13:25:16 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:13:25:16 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" [REDACTED] 200 2627 172.183.135.153 - - [20/May/2026:13:25:16 +0000] "GET /@fs/.git/config?import?raw HTTP/1.1" show less	Port Scan
🇬🇧 2048	2026-03-12 18:47:28 (4 months ago)	2026-03-12T19:47:23.652153+01:00 machodeer kernel: [1598062.147699] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-03-12T19:47:23.652153+01:00 machodeer kernel: [1598062.147699] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.183.135.153 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=1149 DF PROTO=TCP SPT=39071 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-12T19:47:24.667442+01:00 machodeer kernel: [1598063.163201] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.183.135.153 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=1150 DF PROTO=TCP SPT=39071 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-12T19:47:27.155800+01:00 machodeer kernel: [1598065.650030] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.183.135.153 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=27703 DF PROTO=TCP SPT=39044 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 Veslys	2026-02-03 13:24:02 (5 months ago)	Feb 3 14:21:20 Veslys sshd[1846399]: Failed password for root from 172.183.135.153 port 28744 ssh2 ... show more Feb 3 14:21:20 Veslys sshd[1846399]: Failed password for root from 172.183.135.153 port 28744 ssh2 Feb 3 14:24:00 Veslys sshd[1883031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.183.135.153 user=root Feb 3 14:24:02 Veslys sshd[1883031]: Failed password for root from 172.183.135.153 port 28746 ssh2 ... show less	Brute-Force SSH
🇳🇱 FREAKISH	2026-02-03 13:21:15 (5 months ago)	Feb 3 13:18:32 mail sshd[113734]: Failed password for root from 172.183.135.153 port 28745 ssh2 Feb ... show more Feb 3 13:18:32 mail sshd[113734]: Failed password for root from 172.183.135.153 port 28745 ssh2 Feb 3 13:21:13 mail sshd[113772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.183.135.153 user=root Feb 3 13:21:15 mail sshd[113772]: Failed password for root from 172.183.135.153 port 28744 ssh2 ... show less	Hacking Brute-Force SSH
🇩🇪 Veslys	2026-02-03 13:05:15 (5 months ago)	Feb 3 14:02:32 Veslys sshd[1587795]: Failed password for root from 172.183.135.153 port 28744 ssh2 ... show more Feb 3 14:02:32 Veslys sshd[1587795]: Failed password for root from 172.183.135.153 port 28744 ssh2 Feb 3 14:05:12 Veslys sshd[1625373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.183.135.153 user=root Feb 3 14:05:15 Veslys sshd[1625373]: Failed password for root from 172.183.135.153 port 28744 ssh2 ... show less	Brute-Force SSH
🇳🇱 FREAKISH	2026-02-03 13:05:06 (5 months ago)	Feb 3 13:02:27 mail sshd[113346]: Failed password for root from 172.183.135.153 port 28745 ssh2 Feb ... show more Feb 3 13:02:27 mail sshd[113346]: Failed password for root from 172.183.135.153 port 28745 ssh2 Feb 3 13:05:04 mail sshd[113396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.183.135.153 user=root Feb 3 13:05:05 mail sshd[113396]: Failed password for root from 172.183.135.153 port 28745 ssh2 ... show less	Hacking Brute-Force SSH
🇩🇪 AugustWelle	2026-02-03 13:03:05 (5 months ago)	2026-02-03T13:52:21.734754+01:00 vps-1984 sshd[625860]: Failed password for root from 172.183.135.15 ... show more 2026-02-03T13:52:21.734754+01:00 vps-1984 sshd[625860]: Failed password for root from 172.183.135.153 port 28746 ssh2 2026-02-03T13:55:08.675012+01:00 vps-1984 sshd[625863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.183.135.153 user=root 2026-02-03T13:55:10.540566+01:00 vps-1984 sshd[625863]: Failed password for root from 172.183.135.153 port 28746 ssh2 2026-02-03T14:03:01.118553+01:00 vps-1984 sshd[1497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.183.135.153 user=root 2026-02-03T14:03:03.589443+01:00 vps-1984 sshd[1497]: Failed password for root from 172.183.135.153 port 28745 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.154.173.143

🇺🇸 147.185.132.90

🇻🇳 113.168.222.75

🇩🇪 69.5.169.3

🇨🇳 221.234.36.123

🇺🇸 216.226.77.10

🇦🇹 152.53.0.56

🇺🇸 66.132.172.144

🇸🇬 47.128.125.121

🇬🇧 45.82.76.124

🇸🇪 13.60.200.17

🇭🇰 223.254.144.130

🇨🇳 182.43.235.218

🇧🇩 161.248.189.72

🇨🇳 116.179.32.24

🇨🇳 115.194.149.122

🇳🇱 91.92.40.43

🇬🇧 87.236.176.218

🇺🇸 74.125.80.27

🇩🇪 69.5.169.98