JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.253.16.14

167.253.16.14 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	VPNVault LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	vpnvau.lt
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.253.16.14

Whois 167.253.16.14

IP Abuse Reports for 167.253.16.14:

This IP address has been reported a total of 10 times from 7 distinct sources. 167.253.16.14 was first reported on March 30th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-06-19 18:05:14 (2 months ago)	Attempted access to sensitive endpoint (/wp-login.php) detected. Automated scan or unauthorized prob ... show more Attempted access to sensitive endpoint (/wp-login.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇮🇩 bps-statistics	2026-06-16 11:54:43 (2 months ago)	WP Login Scan Activities: "2026-06-16T18:54:43.945+07:00" "/wp-login.php" "167.253.16.14" "Mozilla/5 ... show more WP Login Scan Activities: "2026-06-16T18:54:43.945+07:00" "/wp-login.php" "167.253.16.14" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Web App Attack
🇧🇷 SOCBR	2026-06-15 08:43:07 (2 months ago)	IPS: WordPress HTTP Brute Force Login Attempt.	Brute-Force
🇫🇷 Tilellit.PRO	2026-06-08 15:41:31 (2 months ago)	Fail2Ban banned 167.253.16.14 for security violations in jail wp-armour. Log: 2026/06/08 15:41:31 [e ... show more Fail2Ban banned 167.253.16.14 for security violations in jail wp-armour. Log: 2026/06/08 15:41:31 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 167.253.16.14 \| Target: wplogin" , client: 167.253.16.14, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "http://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇱🇻 garmtech.com	2026-05-24 04:04:41 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-04.167.253.16.14.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-04.167.253.16.14.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-06 04:51:26 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-51.167.253.16.14.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-51.167.253.16.14.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-06 00:56:26 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 03-56.167.253.16.14.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 03-56.167.253.16.14.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-11 15:13:58 (4 months ago)	(mod_security) mod_security (id:210350) triggered by 167.253.16.14 (167-253-16-14.cloudairone.com): ... show more (mod_security) mod_security (id:210350) triggered by 167.253.16.14 (167-253-16-14.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 11:13:49.830457 2026] [security2:error] [pid 3061387:tid 3061387] [client 167.253.16.14:20921] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|sahinozalit.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sahinozalit.com"] [uri "/"] [unique_id "adplLYsrQxJj-qbdTo4TfAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ph	2026-04-08 15:21:43 (4 months ago)	Bad web bot attempting to run wp-json on non-WP site	Hacking Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-03-30 01:39:11 (4 months ago)	Accessed trap at '/wp-login.php'	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.113

🇮🇳 172.253.230.157

🇧🇷 108.165.179.136

🇨🇳 106.75.214.209

🇻🇳 103.9.204.212

🇺🇸 66.132.172.190

🇧🇪 198.235.24.208

🇷🇴 193.46.255.86

🇦🇷 191.85.35.209

🇨🇭 178.82.175.214

🇳🇱 176.65.148.106

🇮🇳 172.253.230.154

🇩🇪 167.94.146.63

🇩🇪 167.94.145.21

🇺🇸 150.107.36.244

🇫🇮 147.185.133.111

🇳🇱 91.92.40.31

🇺🇸 71.6.199.65

🇩🇪 43.228.157.148

🇨🇴 190.99.183.116