JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.255.83.134

172.255.83.134 was found in our database!

This IP was reported 213 times. Confidence of Abuse is 30%: ?

30%

ISP	Leaseweb USA, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS394380
Domain Name	leaseweb.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.255.83.134

Whois 172.255.83.134

IP Abuse Reports for 172.255.83.134:

This IP address has been reported a total of 213 times from 21 distinct sources. 172.255.83.134 was first reported on September 28th 2024, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-09-02 22:23:38 (13 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: /xmlrpc.php \| 2026-09-02 22:23 UTC show less	Hacking Web App Attack
🇭🇺 bcsaba	2026-08-29 02:29:51 (5 days ago)	Joomla spam 172.255.83.134 - - [29/Aug/2026:04:29:48 +0200] "GET /index.php?option=com_easyblog&view ... show more Joomla spam 172.255.83.134 - - [29/Aug/2026:04:29:48 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://REDACTED" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0" show less	Web App Attack
🇺🇸 SX Communications	2026-08-15 01:12:00 (2 weeks ago)	Web spam bot from 172.255.83.134: automated HTTPS requests for fake pharmacy / prescription / drug S ... show more Web spam bot from 172.255.83.134: automated HTTPS requests for fake pharmacy / prescription / drug SEO URLs (bbs and blog product-style paths). 1 hits; spam paths: Online-Pharmacy-Travel-Medications. show less	Web Spam Blog Spam Bad Web Bot
🇺🇸 SX Communications	2026-08-13 02:17:28 (3 weeks ago)	Web spam bot from 172.255.83.134: automated HTTPS requests for fake pharmacy / prescription / drug S ... show more Web spam bot from 172.255.83.134: automated HTTPS requests for fake pharmacy / prescription / drug SEO URLs (bbs and blog product-style paths). 1 hits; spam paths: Online-Secure-Pharmacy. show less	Web Spam Blog Spam Bad Web Bot
🇺🇸 SX Communications	2026-08-10 05:21:52 (3 weeks ago)	Web spam bot from 172.255.83.134: automated HTTPS requests for fake pharmacy / prescription / drug S ... show more Web spam bot from 172.255.83.134: automated HTTPS requests for fake pharmacy / prescription / drug SEO URLs (bbs and blog product-style paths). 1 hits; spam paths: Online-Pharmacy-Travel-Medications. show less	Web Spam Blog Spam Bad Web Bot
🇭🇺 bcsaba	2026-08-07 12:59:46 (3 weeks ago)	Joomla spam 172.255.83.134 - - [07/Aug/2026:14:59:44 +0200] "GET /index.php?option=com_easyblog&view ... show more Joomla spam 172.255.83.134 - - [07/Aug/2026:14:59:44 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://REDACTED" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 Edg/148.0.0.0" show less	Web App Attack
🇱🇻 garmtech.com	2026-08-04 05:07:37 (4 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-07.172.255.83.134.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-07.172.255.83.134.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 02:04:09 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 172.255.83.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 172.255.83.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 22:04:02.371272 2026] [security2:error] [pid 3945357:tid 3945357] [client 172.255.83.134:56207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/"] [unique_id "amlfkv8zOeA4ZmDDtGSLmgAAAA4"], referer: https://90bola.net/livescore/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-27 11:56:26 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 15:23:00 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 172.255.83.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 172.255.83.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 11:22:56.455085 2026] [security2:error] [pid 30617:tid 30617] [client 172.255.83.134:36411] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/"] [unique_id "alUC0Ap0kjW-fFiQ3YZJpQAAAAc"], referer: https://kings96.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-13 00:59:08 (1 month ago)	Multiple WAF Violations	Web App Attack
🇱🇻 garmtech.com	2026-06-26 04:21:36 (2 months ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 07:14:47 (2 months ago)	(mod_security) mod_security (id:210831) triggered by 172.255.83.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 172.255.83.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 03:14:39.250528 2026] [security2:error] [pid 5677:tid 5677] [client 172.255.83.134:45753] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/"] [unique_id "ajzVX_GMC5klAKl0x-3WSgAAAAE"], referer: https://Winslot96.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-06-23 08:45:06 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-06-22 06:00:18 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack

Showing 1 to 15 of 213 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.127.176.235

🇺🇸 162.216.150.211

🇩🇪 152.53.148.66

🇻🇳 103.78.0.229

🇻🇳 101.99.22.235

🇺🇸 98.198.217.2

🇦🇱 79.106.129.186

🇫🇷 77.239.124.184

🇳🇱 45.156.128.54

🇳🇱 45.156.128.53

🇺🇸 34.86.149.218

🇳🇱 185.136.15.15

🇹🇭 152.32.247.23

🇨🇳 118.212.122.224

🇺🇸 66.132.186.172

🇨🇦 65.111.20.86

🇺🇸 65.49.1.122

🇳🇱 45.156.128.51

🇮🇳 223.225.108.12

🇿🇲 160.242.48.158