JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.255.83.134

172.255.83.134 was found in our database!

This IP was reported 212 times. Confidence of Abuse is 24%: ?

24%

ISP	Leaseweb USA, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS394380
Domain Name	leaseweb.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.255.83.134

Whois 172.255.83.134

IP Abuse Reports for 172.255.83.134:

This IP address has been reported a total of 212 times from 21 distinct sources. 172.255.83.134 was first reported on September 28th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 bcsaba	2026-08-29 02:29:51 (4 days ago)	Joomla spam 172.255.83.134 - - [29/Aug/2026:04:29:48 +0200] "GET /index.php?option=com_easyblog&view ... show more Joomla spam 172.255.83.134 - - [29/Aug/2026:04:29:48 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://REDACTED" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0" show less	Web App Attack
🇺🇸 SX Communications	2026-08-15 01:12:00 (2 weeks ago)	Web spam bot from 172.255.83.134: automated HTTPS requests for fake pharmacy / prescription / drug S ... show more Web spam bot from 172.255.83.134: automated HTTPS requests for fake pharmacy / prescription / drug SEO URLs (bbs and blog product-style paths). 1 hits; spam paths: Online-Pharmacy-Travel-Medications. show less	Web Spam Blog Spam Bad Web Bot
🇺🇸 SX Communications	2026-08-13 02:17:28 (2 weeks ago)	Web spam bot from 172.255.83.134: automated HTTPS requests for fake pharmacy / prescription / drug S ... show more Web spam bot from 172.255.83.134: automated HTTPS requests for fake pharmacy / prescription / drug SEO URLs (bbs and blog product-style paths). 1 hits; spam paths: Online-Secure-Pharmacy. show less	Web Spam Blog Spam Bad Web Bot
🇺🇸 SX Communications	2026-08-10 05:21:52 (3 weeks ago)	Web spam bot from 172.255.83.134: automated HTTPS requests for fake pharmacy / prescription / drug S ... show more Web spam bot from 172.255.83.134: automated HTTPS requests for fake pharmacy / prescription / drug SEO URLs (bbs and blog product-style paths). 1 hits; spam paths: Online-Pharmacy-Travel-Medications. show less	Web Spam Blog Spam Bad Web Bot
🇭🇺 bcsaba	2026-08-07 12:59:46 (3 weeks ago)	Joomla spam 172.255.83.134 - - [07/Aug/2026:14:59:44 +0200] "GET /index.php?option=com_easyblog&view ... show more Joomla spam 172.255.83.134 - - [07/Aug/2026:14:59:44 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://REDACTED" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 Edg/148.0.0.0" show less	Web App Attack
🇱🇻 garmtech.com	2026-08-04 05:07:37 (4 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-07.172.255.83.134.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-07.172.255.83.134.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 02:04:09 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 172.255.83.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 172.255.83.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 22:04:02.371272 2026] [security2:error] [pid 3945357:tid 3945357] [client 172.255.83.134:56207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/"] [unique_id "amlfkv8zOeA4ZmDDtGSLmgAAAA4"], referer: https://90bola.net/livescore/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-27 11:56:26 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 15:23:00 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 172.255.83.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 172.255.83.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 11:22:56.455085 2026] [security2:error] [pid 30617:tid 30617] [client 172.255.83.134:36411] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/"] [unique_id "alUC0Ap0kjW-fFiQ3YZJpQAAAAc"], referer: https://kings96.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-13 00:59:08 (1 month ago)	Multiple WAF Violations	Web App Attack
🇱🇻 garmtech.com	2026-06-26 04:21:36 (2 months ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 07:14:47 (2 months ago)	(mod_security) mod_security (id:210831) triggered by 172.255.83.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 172.255.83.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 03:14:39.250528 2026] [security2:error] [pid 5677:tid 5677] [client 172.255.83.134:45753] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/"] [unique_id "ajzVX_GMC5klAKl0x-3WSgAAAAE"], referer: https://Winslot96.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-06-23 08:45:06 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-06-22 06:00:18 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-06-21 21:13:38 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Safari/605.1.15 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 212 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.224.223.56

🇺🇸 2604:a880:400:d1:0:4:e8e8:6001

🇷🇺 213.27.24.150

🇲🇾 113.211.215.111

🇺🇸 66.132.172.225

🇷🇺 45.12.66.234

🇨🇳 202.46.62.24

🇬🇧 195.206.182.210

🇭🇰 152.32.171.73

🇺🇸 64.62.156.64

🇱🇹 62.60.130.253

🇮🇳 34.131.81.238

🇧🇷 200.175.61.207

🇺🇦 188.163.46.26

🇵🇱 185.239.43.15

🇮🇳 128.185.56.205

🇺🇸 97.74.236.4

🇺🇸 91.230.168.253

🇩🇪 69.5.169.200

🇫🇷 51.178.65.198