JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.183.252.239

5.183.252.239 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 31%: ?

31%

ISP	TrafficTransitSolution LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	traffictransitsolution.us
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.183.252.239

Whois 5.183.252.239

IP Abuse Reports for 5.183.252.239:

This IP address has been reported a total of 23 times from 12 distinct sources. 5.183.252.239 was first reported on May 28th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TRoden	2026-06-23 22:58:43 (1 day ago)	Geo Block Plugin: Escalation flag(s): rce_attempt	Hacking
🇺🇸 TPI-Abuse	2026-06-16 11:31:11 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 5.183.252.239 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 5.183.252.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 07:30:55.843121 2026] [security2:error] [pid 7749:tid 7749] [client 5.183.252.239:29293] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|edgecombe.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "edgecombe.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajEz74812ga5FThYLd5o0wAAAAY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nationaleventpros.com	2026-06-14 17:17:23 (1 week ago)	WordPress login attempt	Brute-Force
🇨🇦 electronico	2026-06-12 14:21:19 (1 week ago)	5.183.252.239 - - [13/Jun/2026:01:21:18 +1100] "POST /xmlrpc.php HTTP/1.1" 200 4231 "-" "curl/7.88.1 ... show more 5.183.252.239 - - [13/Jun/2026:01:21:18 +1100] "POST /xmlrpc.php HTTP/1.1" 200 4231 "-" "curl/7.88.1" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 14:30:06 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 5.183.252.239 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 5.183.252.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 10:29:49.591279 2026] [security2:error] [pid 9681:tid 9681] [client 5.183.252.239:11883] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|unitedletter.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "unitedletter.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiGL3X22syEOstRBDQh5DwAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-30 14:13:01 (3 weeks ago)	FPROCO WEBEXPLOIT 5.183.252.239 (5.183.252.239)	Web App Attack
🇫🇷 tecnicorioja	2026-05-16 22:01:13 (1 month ago)	wp-login attack [16/May/2026:22:58:34	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-13 10:07:40 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 5.183.252.239 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 5.183.252.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 06:07:25.540017 2026] [security2:error] [pid 2957:tid 2957] [client 5.183.252.239:37953] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ramoundos-systems.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ramoundos-systems.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agRNXdFCq28SPJFrFMmJqQAAAAc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-05 21:41:25 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 5.183.252.239 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 5.183.252.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 05 16:41:09.433331 2026] [security2:error] [pid 27028:tid 27028] [client 5.183.252.239:52483] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lawrencehale.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lawrencehale.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVwv9RNb2wQfN0r_kdKu-AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-19 05:54:56 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-04-17 10:00:00 (1 year ago)	“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried us ... show more “BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to logged in logdesc=SSL VPN login fail user=datadevscan02 group=N/A tunnelid=0 tunneltype=ssl-web dst_host=N/A reason=sslvpn_login_unknown_user” show less	Hacking Brute-Force Web App Attack
Anonymous	2025-04-17 10:00:00 (1 year ago)	“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried us ... show more “BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to logged in logdesc=SSL VPN login fail user=datadevscan02 group=N/A tunnelid=0 tunneltype=ssl-web dst_host=N/A reason=sslvpn_login_unknown_user “ show less	Hacking Brute-Force Web App Attack
Anonymous	2025-02-15 18:43:19 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇿 lp	2025-01-25 20:50:16 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 5.183.252.239 2025-01-25T21:39:56+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 5.183.252.239 2025-01-25T21:39:56+01:00 vpn Access-Reject 'eclipse' station: 5.183.252.239 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-01-25 13:22:17 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 5.183.252.239 2025-01-25T13:01:51+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 5.183.252.239 2025-01-25T13:01:51+01:00 vpn Access-Reject 'zhenrenyule' station: 5.183.252.239 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 213.91.183.107

🇭🇰 199.45.154.184

🇺🇸 173.54.64.83

🇸🇬 43.160.251.13

🇧🇼 41.216.213.13

🇸🇳 41.82.50.218

🇦🇹 213.47.3.169

🇦🇿 212.47.129.17

🇮🇳 202.148.61.32

🇧🇷 191.6.249.78

🇩🇪 185.242.3.195

🇺🇸 162.216.150.125

🇨🇱 152.230.209.70

🇨🇳 119.53.253.2

🇰🇪 105.164.128.173

🇻🇳 103.199.70.233

🇬🇧 94.229.64.108

🇯🇴 91.186.255.57

🇮🇳 223.196.192.164

🇫🇷 185.215.164.223