JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

5.183.252.98

Activity Trending Down

Abuse Confidence Score

19% Caution

16 reports

9 reporters · latest 1 week ago

ISP: TrafficTransitSolution LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS26548
Domain Name: traffictransitsolution.us
Country: 🇺🇸 United States of America
City: Seattle, Washington

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

16 from 9 distinct reporters

First reported

February 29th 2024

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇫🇷 France 1 🇬🇧 United Kingdom of Great Britain and Northern Ireland 1 🇺🇸 United States of America 1

Most common categories Web App Attack 3 Brute-Force 1 Bad Web Bot 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-10-30 01:41:09 UTC · (1 week ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-10-26 16:49:52 UTC · (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 5.183.252.98 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:49:39.555290 2026] [security2:error] [pid 16311:tid 16311] [client 5.183.252.98:60961] Mod ... show more (mod_security) mod_security (id:210350) triggered by 5.183.252.98 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:49:39.555290 2026] [security2:error] [pid 16311:tid 16311] [client 5.183.252.98:60961] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.flavornet.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/27538-10-9.html"] [unique_id "at-Eo92r-AMCiZCw-diXpQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-10-18 19:59:34 UTC · (3 weeks ago)	(mod_security) mod_security (id:35002) triggered by 5.183.252.98 (RU/Russia/-): N in the last X secs	Web App Attack
Anonymous	2026-04-24 04:52:28 UTC · (6 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇬🇧 f3sc	2026-01-06 05:48:42 UTC · (10 months ago)	5.183.252.98 - - [06/Jan/2026:06:48:37 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 4031 "http://last-strike.org/phpmyadmin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 5.183.252.98 ... show more 5.183.252.98 - - [06/Jan/2026:06:48:37 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 4031 "http://last-strike.org/phpmyadmin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 5.183.252.98 - - [06/Jan/2026:06:48:38 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 4031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 5.183.252.98 - - [06/Jan/2026:06:48:41 +0100] "GET /phpMyAdmin/ HTTP/1.1" 404 4031 "http://last-strike.org/phpMyAdmin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" show less	Hacking
🇺🇸 RCS	2026-01-02 22:13:01 UTC · (10 months ago)	fail2ban apache-noscript ...	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-26 00:21:52 UTC · (10 months ago)	(mod_security) mod_security (id:225170) triggered by 5.183.252.98 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 19:21:48.764127 2025] [security2:error] [pid 14728:tid 14728] [client 5.183.252.98:41263] Mod ... show more (mod_security) mod_security (id:225170) triggered by 5.183.252.98 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 19:21:48.764127 2025] [security2:error] [pid 14728:tid 14728] [client 5.183.252.98:41263] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|centrodentalsindolor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "centrodentalsindolor.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU3VHLTTjti9yQzZOgD2SAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-15 02:44:08 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 5.183.252.98 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 14 22:43:54.809429 2025] [security2:error] [pid 997539:tid 997539] [client 5.183.252.98:57639] [ ... show more (mod_security) mod_security (id:225170) triggered by 5.183.252.98 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 14 22:43:54.809429 2025] [security2:error] [pid 997539:tid 997539] [client 5.183.252.98:57639] [client 5.183.252.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|garantaconsulting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "garantaconsulting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_3H6qPiu1iXKAvl6bFs1gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-09 00:16:26 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 5.183.252.98 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 08 20:16:10.126706 2025] [security2:error] [pid 2170418:tid 2170418] [client 5.183.252.98:18495] ... show more (mod_security) mod_security (id:225170) triggered by 5.183.252.98 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 08 20:16:10.126706 2025] [security2:error] [pid 2170418:tid 2170418] [client 5.183.252.98:18495] [client 5.183.252.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|misogynyis.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "misogynyis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_W8Sr-iSNTjhWJj_BKpDQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-08 04:50:52 UTC · (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-04-03 19:13:43 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 5.183.252.98 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 15:13:25.916684 2025] [security2:error] [pid 4784:tid 4805] [client 5.183.252.98:48455] [clie ... show more (mod_security) mod_security (id:225170) triggered by 5.183.252.98 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 15:13:25.916684 2025] [security2:error] [pid 4784:tid 4805] [client 5.183.252.98:48455] [client 5.183.252.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gilesrentalcars.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gilesrentalcars.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z-7d1ey-jAOxD2oJfkSwUQAAAVM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2025-02-24 22:21:20 UTC · (1 year ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 5.183.252.98 2025-02-24T23:12:05+01:00 vpn Access-Reject 'duncan' station: 5.183.252.98 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 5.183.252.98 2025-02-24T23:12:05+01:00 vpn Access-Reject 'duncan' station: 5.183.252.98 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-02-24T23:14:48+01:00 vpn Access-Reject 'ahmad' station: 5.183.252.98 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
Anonymous	2025-02-16 07:04:32 UTC · (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-02-11 12:39:37 UTC · (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-02-10 10:24:40 UTC · (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 170.231.116.178

🇺🇸 66.132.195.125

🇳🇱 51.158.206.34

🇳🇱 45.156.87.65

🇮🇹 2a09:bac3:41fe:2650::3d1:44

🇺🇸 2a03:2880:f818:7::

🇩🇪 2a03:2880:f37a:80:face:b00c:0:3

🇨🇳 218.202.209.62

🇨🇱 190.114.42.202

🇺🇸 173.255.223.89

🇳🇴 104.28.105.25

🇺🇸 4.154.67.21

🇷🇺 194.50.170.64

🇺🇸 159.223.175.171

🇨🇳 118.113.40.21

🇲🇦 105.157.130.70

🇳🇱 81.19.216.98

🇳🇱 77.239.124.147

🇻🇳 42.96.20.16

🇺🇸 2604:a880:400:d1:0:5:5f93:2001