AbuseIPDB » 174.140.254.98
174.140.254.98
This IP was reported 5 times. Confidence of
Abuse
is 4% : ?
ISP
code200 UAB
Usage Type
Data Center/Web Hosting/Transit
ASN
AS13332
Hostname(s)
174.140.254.98.rdns.ColocationAmerica.com
Domain Name
code200.global
Country
🇺🇸
United States of America
City
Los Angeles, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 174.140.254.98 :
This IP address has been reported a total of
5
times from
4 distinct
sources.
174.140.254.98 was first reported on
December 14th 2024 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
bigorre.org
2026-06-18 06:37:19
(1 day ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-29 17:15:58
(5 months ago)
(mod_security) mod_security (id:212620) triggered by 174.140.254.98 (174.140.254.98.rdns.ColocationA ...
show more
(mod_security) mod_security (id:212620) triggered by 174.140.254.98 (174.140.254.98.rdns.ColocationAmerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 12:08:55.012359 2025] [security2:error] [pid 12847:tid 12916] [client 174.140.254.98:41153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_COOKIES:svpnlang. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||ftp.kettlehill.com|F|2"] [data "Matched Data: <script found within REQUEST_COOKIES:svpnlang: <script>alert('document.domain')</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "ftp.kettlehill.com"] [uri "/wnm/login/login.json"] [unique_id "aVK1p6LrABXCW5a44Sq1xgAAAYE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-29 23:24:16
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 174.140.254.98 (174.140.254.98.rdns.ColocationA ...
show more
(mod_security) mod_security (id:210492) triggered by 174.140.254.98 (174.140.254.98.rdns.ColocationAmerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 19:24:11.795948 2025] [security2:error] [pid 3748266:tid 3748266] [client 174.140.254.98:45117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.farmers123.com"] [uri "/js../.git/config"] [unique_id "aDjsm9u7Jqttl9nTrNWY_AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-02-28 02:40:02
(1 year ago)
| Common web attack.
Hacking
SQL Injection
Web App Attack
🇩🇪
nyuuzyou
2024-12-14 14:41:24
(1 year ago)
Intensive scraping: /web?s=Tax%20preparation%20services%20Wichita%20Falls&scraper=mojeek. User-Agent ...
show more
Intensive scraping: /web?s=Tax%20preparation%20services%20Wichita%20Falls&scraper=mojeek. User-Agent: Mozilla/5.0 (X11; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0.
show less
Bad Web Bot
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: