JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.253.17.134

167.253.17.134 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 26%: ?

26%

ISP	VPNVault LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Hostname(s)	167-253-17-134.cloudairone.com
Domain Name	vpnvau.lt
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.253.17.134

Whois 167.253.17.134

IP Abuse Reports for 167.253.17.134:

This IP address has been reported a total of 16 times from 10 distinct sources. 167.253.17.134 was first reported on October 17th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-03 22:22:20 (8 hours ago)	(mod_security) mod_security (id:210730) triggered by 167.253.17.134 (167-253-17-134.cloudairone.com) ... show more (mod_security) mod_security (id:210730) triggered by 167.253.17.134 (167-253-17-134.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 18:22:11.957610 2026] [security2:error] [pid 7501:tid 7501] [client 167.253.17.134:61625] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Giovanni/Thumbs.db"] [unique_id "akg2E1BB7UXHaDx7Lw6WKgAAAAo"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Giovanni/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mw	2026-07-02 10:46:11 (1 day ago)	VPN bruteforce	Brute-Force
Anonymous	2026-06-28 05:01:26 (6 days ago)	This IP was involved in an brute force and password spray attack on 2026/06/27 22:15:05	Port Scan Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 06:05:44 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 167.253.17.134 (167-253-17-134.cloudairone.com) ... show more (mod_security) mod_security (id:210730) triggered by 167.253.17.134 (167-253-17-134.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 02:05:37.575561 2026] [security2:error] [pid 31588:tid 31588] [client 167.253.17.134:43699] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Steelcase/pics/Leap Work Lounge/Thumbs.db"] [unique_id "ah_EMQqQAYTy_-nj6ICGagAAAAo"], referer: https://vitalitywebb.com/backstore/Steelcase/pics/Leap%20Work%20Lounge/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2026-05-19 08:59:18 (1 month ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -38.777 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -38.777 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.4248.1 show less	Web App Attack Bad Web Bot
🇬🇧 Oakley	2026-04-22 12:28:51 (2 months ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇨🇭 backslash	2026-04-16 18:33:04 (2 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
Anonymous	2026-01-29 15:38:11 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.29 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.29 is noted in report timestamp show less	Hacking Brute-Force
🇵🇱 sefinek.net	2026-01-11 18:07:57 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2025-12-28 00:18:49 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇱🇻 garmtech.com	2025-12-20 00:39:11 (6 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇵🇱 sefinek.net	2025-12-19 07:41:41 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Xbox; Xbox One) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edge/44.18363.8131 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-12-16 22:27:09 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.16 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.16 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-08 18:05:13 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.08 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.08 is noted in report timestamp show less	Hacking Brute-Force
🇨🇭 backslash	2025-11-12 01:05:54 (7 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 194.62.40.26

🇷🇸 188.2.78.73

🇵🇰 139.135.42.19

🇹🇷 94.154.43.181

🇺🇸 64.62.197.101

🇧🇪 35.187.176.216

🇳🇱 213.177.179.62

🇧🇴 190.181.27.27

🇧🇪 130.211.52.176

🇮🇳 111.92.47.70

🇺🇸 72.180.81.98

🇭🇰 47.238.102.219

🇮🇩 36.65.123.209

🇵🇱 34.116.216.123

🇨🇳 222.186.81.97

🇧🇷 186.226.212.171

🇺🇸 153.75.91.104

🇦🇷 152.170.115.112

🇺🇸 104.234.32.248

🇮🇩 103.180.196.254