JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.53.21

212.56.53.21 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 22%: ?

22%

ISP	VPN Consumer Los Angeles, United States
Usage Type	Data Center/Web Hosting/Transit
ASN	AS4213
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.53.21

Whois 212.56.53.21

IP Abuse Reports for 212.56.53.21:

This IP address has been reported a total of 24 times from 19 distinct sources. 212.56.53.21 was first reported on May 3rd 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 YF	2026-05-17 02:07:55 (4 weeks ago)	WordPress directory enumeration	Web App Attack
🇫🇷 vtchost.com	2026-05-08 08:15:07 (1 month ago)	minux.cc:443 212.56.53.21 - - [08/May/2026:10:15:06 +0200] "GET / HTTP/1.1" 418 2800 "-" "Mozilla/5. ... show more minux.cc:443 212.56.53.21 - - [08/May/2026:10:15:06 +0200] "GET / HTTP/1.1" 418 2800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36" ... show less	Bad Web Bot
Anonymous	2026-05-07 21:53:46 (1 month ago)	Try to connect to Port_Scan_443_stealth	Port Scan
🇪🇸 liewebs	2026-04-30 03:13:13 (1 month ago)	SYN Flood attack detected - cloud02.liewebs.es	Port Scan DDoS Attack
🇺🇸 gerensat	2026-04-27 11:32:11 (1 month ago)	2026-04-27 08:32:11 \| / \| [] \| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show more 2026-04-27 08:32:11 \| / \| [] \| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36 show less	Web App Attack
🇫🇷 masterguru	2026-04-25 20:40:38 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 212.56.53.21 (US/United States/-): 2 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 212.56.53.21 (US/United States/-): 2 in the last 3600 secs (0-201) show less	Hacking
🇫🇷 masterguru	2026-04-19 06:59:51 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 212.56.53.21 (US/United States/-): 2 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 212.56.53.21 (US/United States/-): 2 in the last 3600 secs (0-193) show less	Hacking
🇦🇹 Erpelstolz	2026-04-17 07:24:28 (1 month ago)	portscan on internal host: 443	Port Scan
🇫🇷 masterguru	2026-04-15 14:54:28 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 212.56.53.21 (US/United States/-): 2 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 212.56.53.21 (US/United States/-): 2 in the last 3600 secs (0-201) show less	Hacking
🇺🇸 xmission.com	2026-03-27 02:26:48 (2 months ago)	Blocked by UFW (TCP on 6881) Source port: 45675 TTL: 115 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 6881) Source port: 45675 TTL: 115 Packet length: 52 TOS: 0x08 This report (for 212.56.53.21) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-03-05 20:20:31 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇮🇹 VHosting	2026-02-26 17:04:18 (3 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇧🇪 voormedia	2026-02-26 13:21:37 (3 months ago)	Accessed trap at '/.env'	Web App Attack
🇺🇸 TPI-Abuse	2026-02-01 10:26:09 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 212.56.53.21 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 212.56.53.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 05:26:04.655106 2026] [security2:error] [pid 16723:tid 16807] [client 212.56.53.21:8120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|chriskovac.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chriskovac.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aX8qPP0s_0SzhyBvLdiqygAAAwI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-02-01 09:52:42 (4 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 212.56.53.21 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 212.56.53.21 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.150.107.244

🇺🇿 176.101.56.66

🇳🇱 176.65.139.94

🇺🇸 138.68.238.72

🇨🇳 81.70.78.68

🇨🇳 36.249.60.142

🇨🇴 201.184.50.251

🇨🇳 180.184.84.77

🇺🇦 176.103.2.210

🇭🇰 118.193.39.103

🇬🇧 92.207.4.157

🇱🇹 81.30.98.142

🇺🇸 43.152.72.244

🇮🇳 34.93.128.179

🇲🇽 200.77.172.159

🇳🇱 176.65.139.246

🇺🇸 172.253.93.212

🇩🇪 164.92.140.160

🇸🇬 152.42.247.85

🇸🇬 103.250.11.63