JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.83.143.18

5.83.143.18 was found in our database!

This IP was reported 105 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Joel Krause trading as VpsLayer Hosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200912
Hostname(s)	tor-exit.nl2.2cb.li
Domain Name	vpslayer.net
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.83.143.18

Whois 5.83.143.18

IP Abuse Reports for 5.83.143.18:

This IP address has been reported a total of 105 times from 80 distinct sources. 5.83.143.18 was first reported on March 31st 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 kuru.bbs067	2026-06-04 04:45:00 (11 hours ago)	Traversal attack detected	Web App Attack
🇩🇪 big-cloud.nl	2026-06-04 00:30:22 (15 hours ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 stinpriza	2026-06-03 17:18:01 (22 hours ago)	Web App Attack	Web App Attack
🇮🇩 sockominfo	2026-06-03 14:00:38 (1 day ago)	PHP CGI-bin vulnerability attempt.. Threat Score: 3.6/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (No ... show more PHP CGI-bin vulnerability attempt.. Threat Score: 3.6/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-03 13:00:38 (1 day ago)	PHP CGI-bin vulnerability attempt.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (No ... show more PHP CGI-bin vulnerability attempt.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-03 12:00:39 (1 day ago)	PHP CGI-bin vulnerability attempt.. Threat Score: 3.9/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (No ... show more PHP CGI-bin vulnerability attempt.. Threat Score: 3.9/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-03 02:20:04 (1 day ago)	Blocked by CSF 13 firewall - Rule: XMLRPC DE/Germany/tor-exit.nl2.2cb.li	Web App Attack
🇨🇦 electronico	2026-06-03 01:59:15 (1 day ago)	5.83.143.18 - - [03/Jun/2026:12:59:13 +1100] "POST /xmlrpc.php HTTP/1.1" 200 4199 "-" "Mozilla/5.0 ( ... show more 5.83.143.18 - - [03/Jun/2026:12:59:13 +1100] "POST /xmlrpc.php HTTP/1.1" 200 4199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0" ... show less	Brute-Force Web App Attack
🇩🇪 4server	2026-06-02 02:50:16 (2 days ago)	[TueJun0204:50:13.9658842026][security2:error][pid3655511:tid3655643][client5.83.143.18:0]ModSecurit ... show more [TueJun0204:50:13.9658842026][security2:error][pid3655511:tid3655643][client5.83.143.18:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"sito-online.ch\"][uri\"/\"][unique_id\"ah5E5Rz-lH_Vg7g4Cil1vQAAAMs\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-06-01 21:33:41 (2 days ago)		Web Spam
🇫🇷 SpaceHost-Server	2026-06-01 04:54:05 (3 days ago)	5.83.143.18 - - [01/Jun/2026:06:53:59 +0200] "POST /wp-login.php HTTP/1.1" 200 14537 "https://marien ... show more 5.83.143.18 - - [01/Jun/2026:06:53:59 +0200] "POST /wp-login.php HTTP/1.1" 200 14537 "https://marienschule-schwagstorf.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 5.83.143.18 - - [01/Jun/2026:06:54:01 +0200] "POST /wp-login.php HTTP/1.1" 200 14537 "https://marienschule-schwagstorf.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 5.83.143.18 - - [01/Jun/2026:06:54:04 +0200] "POST /wp-login.php HTTP/1.1" 200 14537 "https://marienschule-schwagstorf.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" show less	Hacking Web App Attack
Anonymous	2026-05-30 03:50:01 (5 days ago)	Web App Attack, Hacking	Hacking Web App Attack
Anonymous	2026-05-29 12:16:14 (6 days ago)	Attac	Brute-Force
Anonymous	2026-05-29 08:52:38 (6 days ago)	Banned by Fail2Ban on server	Web App Attack
🇩🇪 grassau.com	2026-05-27 12:16:53 (1 week ago)	(plesk-panel) Failed plesk-panel login with username [redacted] from 5.83.143.18 (NL/The Netherlands ... show more (plesk-panel) Failed plesk-panel login with username [redacted] from 5.83.143.18 (NL/The Netherlands/North Holland/Amsterdam/tor-exit.nl2.2cb.li) show less	Brute-Force

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.253.223.213

🇫🇮 147.185.133.182

🇸🇬 47.84.207.55

🇻🇳 14.230.147.186

🇩🇪 213.209.159.238

🇩🇪 185.220.101.48

🇧🇪 172.253.231.212

🇮🇳 152.32.158.219

🇺🇸 128.199.11.220

🇧🇩 103.111.15.254

🇫🇷 75.119.156.20

🇺🇸 66.132.195.94

🇳🇱 45.148.10.151

🇩🇪 213.209.159.226

🇨🇱 181.42.250.73

🇮🇹 172.213.17.92

🇦🇺 120.157.49.86

🇻🇳 103.72.56.174

🇷🇴 2.57.121.25

🇻🇳 221.132.21.185