JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.253.18.134

167.253.18.134 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 21%: ?

21%

ISP	VPNVault LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Hostname(s)	167-253-18-134.cloudairone.com
Domain Name	vpnvau.lt
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.253.18.134

Whois 167.253.18.134

IP Abuse Reports for 167.253.18.134:

This IP address has been reported a total of 11 times from 7 distinct sources. 167.253.18.134 was first reported on August 29th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-22 11:44:40 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 167.253.18.134 (167-253-18-134.cloudairone.com) ... show more (mod_security) mod_security (id:210492) triggered by 167.253.18.134 (167-253-18-134.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 07:44:34.151029 2026] [security2:error] [pid 20706:tid 20706] [client 167.253.18.134:42333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.frelsburg.com.cajunfriedturkey.com"] [uri "/wp-config.php.old"] [unique_id "ahBBop10xyaqn9aHCzmaqQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 21:30:12 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 167.253.18.134 (167-253-18-134.cloudairone.com) ... show more (mod_security) mod_security (id:210492) triggered by 167.253.18.134 (167-253-18-134.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 17:30:01.183043 2026] [security2:error] [pid 29867:tid 29879] [client 167.253.18.134:26129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.neutrahouse1939.ward-bergerhouse.org"] [uri "/wp-config.php~"] [unique_id "ag4n2fZvqoUF6Pw-Yxj9RgAAAMk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 12:45:00 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 167.253.18.134 (167-253-18-134.cloudairone.com) ... show more (mod_security) mod_security (id:210730) triggered by 167.253.18.134 (167-253-18-134.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:44:54.590479 2026] [security2:error] [pid 15762:tid 15762] [client 167.253.18.134:56929] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|67ronin.com\|F\|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "67ronin.com"] [uri "/wp-config.inc"] [unique_id "ag2sxpr2ljl1hBtrtXUx_gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nyt	2026-05-17 20:58:59 (2 weeks ago)	Sensitive File Probe	Web App Attack
🇺🇸 mnsf	2026-05-15 15:06:16 (2 weeks ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇺🇸 NicoID	2026-05-02 00:10:16 (1 month ago)	167.253.18.134 - - [01/May/2026:00:32:59 -0600] "GET /wp-login.php HTTP/1.1" 200 5760 "-" "Mozilla/5 ... show more 167.253.18.134 - - [01/May/2026:00:32:59 -0600] "GET /wp-login.php HTTP/1.1" 200 5760 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force
🇱🇻 garmtech.com	2025-12-31 22:21:33 (5 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-21.167.253.18.134.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-21.167.253.18.134.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2025-12-18 02:30:20 (5 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-30.167.253.18.134.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-30.167.253.18.134.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 oncord	2025-09-05 17:19:27 (8 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-09-04 03:01:50 (9 months ago)	Form spam	Web Spam
🇨🇿 lp	2025-08-29 16:51:15 (9 months ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 167.253.18.134 2025-08-29T18:33:24+02 ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 167.253.18.134 2025-08-29T18:33:24+02:00 vpn Access-Reject 'scan' station: 167.253.18.134 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-08-29T18:34:36+02:00 vpn Access-Reject 'scan' station: 167.253.18.134 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.89.201.67

🇺🇸 209.192.132.53

🇬🇧 193.32.209.234

🇨🇳 183.191.127.206

🇳🇱 176.65.139.130

🇺🇦 128.0.104.44

🇨🇳 123.14.125.156

🇫🇷 86.217.21.47

🇫🇷 51.178.114.78

🇺🇸 43.159.152.184

🇬🇧 35.203.211.3

🇦🇷 186.137.131.237

🇧🇷 177.30.64.65

🇳🇱 142.93.225.186

🇹🇭 118.175.132.200

🇸🇦 79.170.53.30

🇧🇷 191.243.172.168

🇺🇸 172.253.85.220

🇵🇹 158.173.244.25

🇨🇮 154.0.30.137