JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.253.16.168

167.253.16.168 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 18%: ?

18%

ISP	VPNVault LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Hostname(s)	167-253-16-168.cloudairone.com
Domain Name	vpnvau.lt
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.253.16.168

Whois 167.253.16.168

IP Abuse Reports for 167.253.16.168:

This IP address has been reported a total of 6 times from 5 distinct sources. 167.253.16.168 was first reported on December 10th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Oakley	2026-06-01 09:04:59 (4 days ago)	(mod_security) mod_security (id:900177) triggered by 167.253.16.168 (US/United States/167-253-16-168 ... show more (mod_security) mod_security (id:900177) triggered by 167.253.16.168 (US/United States/167-253-16-168.cloudairone.com): 5 in the last 900 secs show less	Web App Attack Hacking
🇨🇭 backslash	2026-05-17 23:36:00 (2 weeks ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-16 23:52:45 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 167.253.16.168 (167-253-16-168.cloudairone.com) ... show more (mod_security) mod_security (id:210730) triggered by 167.253.16.168 (167-253-16-168.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 19:52:39.835874 2026] [security2:error] [pid 25666:tid 25666] [client 167.253.16.168:56503] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Scooters/Buzzaround Lite/Thumbs.db"] [unique_id "agkDR39Xg7F0klUeKFStyQAAABM"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Golden%20Technologies%202009%20Marketing%20CD/Scooters/Buzzaround%20Lite/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-04-16 14:27:12 (1 month ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
Anonymous	2026-02-02 09:01:47 (4 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2026.02.02 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2026.02.02 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-12-10 14:34:35 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 64.62.156.18

🇨🇳 14.103.115.90

🇰🇷 220.118.173.234

🇨🇳 116.172.249.216

🇻🇳 103.78.1.33

🇷🇺 79.104.0.82

🇺🇸 54.92.193.6

🇳🇱 51.15.59.186

🇳🇱 45.148.10.157

🇺🇸 192.3.196.157

🇧🇷 177.20.220.16

🇻🇳 116.110.2.74

🇵🇰 110.36.75.16

🇺🇸 47.145.62.32

🇷🇺 46.151.41.237

🇺🇸 44.244.76.117

🇺🇸 20.221.66.142

🇩🇪 2a01:4f8:150:13a5::100:1

🇧🇷 179.228.54.137

🇭🇰 144.48.8.10