JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.254.175.153

213.254.175.153 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 43%: ?

43%

ISP	VPN Consumer Los Angeles, United States
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.254.175.153

Whois 213.254.175.153

IP Abuse Reports for 213.254.175.153:

This IP address has been reported a total of 33 times from 15 distinct sources. 213.254.175.153 was first reported on November 15th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 12:57:22 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 08:56:55.672921 2026] [security2:error] [pid 17397:tid 17397] [client 213.254.175.153:60323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.47"] [uri "/library/.env"] [unique_id "aq01F-rNVIyLn5SEH9ECNAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 10:34:26 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 06:34:17.776549 2026] [security2:error] [pid 24597:tid 24597] [client 213.254.175.153:47439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.236"] [uri "/core/.env"] [unique_id "aq0TqYevVFET0GNja6_HDgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-09-18 09:59:15 (4 hours ago)	213.254.175.153 - - [18/Sep/2026:11:59:14 +0200] "GET /wp-admin/.env HTTP/1.1" 404 397 "-" "Mozilla/ ... show more 213.254.175.153 - - [18/Sep/2026:11:59:14 +0200] "GET /wp-admin/.env HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 08:46:51 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 04:46:41.514267 2026] [security2:error] [pid 4951:tid 4951] [client 213.254.175.153:20411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.215"] [uri "/wp-admin/.env"] [unique_id "aqz6ccRy9EtOjaDx1xmqYAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 04:09:54 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 00:09:47.021175 2026] [security2:error] [pid 30427:tid 30432] [client 213.254.175.153:38733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.125"] [uri "/.env"] [unique_id "aqy5i4N_wgq2s7rbMJaP4gAAAEI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Vaction	2026-09-18 03:15:07 (10 hours ago)	213.254.175.153 - - [18/Sep/2026:05:15:06 +0200] "GET /vendor/.env HTTP/1.1" 404 437 "-" "Mozilla/5. ... show more 213.254.175.153 - - [18/Sep/2026:05:15:06 +0200] "GET /vendor/.env HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 01:53:51 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 21:53:31.521949 2026] [security2:error] [pid 27548:tid 27548] [client 213.254.175.153:61181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.58"] [uri "/apps/.env"] [unique_id "aqyZm-94Rdc8DrL6TZW1pAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 cnaize	2026-09-18 01:13:46 (12 hours ago)	Malicious activity blocked by Meds firewall	Port Scan
🇺🇸 TPI-Abuse	2026-09-18 00:43:49 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 20:43:36.813090 2026] [security2:error] [pid 2823:tid 2823] [client 213.254.175.153:49877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.244"] [uri "/crm/.env"] [unique_id "aqyJOAimARxVro6sUmQC2QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 13:16:59 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:16:46.549498 2026] [security2:error] [pid 17754:tid 17754] [client 213.254.175.153:31133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.168"] [uri "/admin/.env"] [unique_id "aqvoPtMpXbo351YT46y9MgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 10:45:21 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:45:03.500224 2026] [security2:error] [pid 26141:tid 26141] [client 213.254.175.153:59007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.36"] [uri "/admin/.env"] [unique_id "aqvEr0H1Gr_a3VLvuoFvLAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 09:36:59 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 05:36:50.038131 2026] [security2:error] [pid 21231:tid 21231] [client 213.254.175.153:35655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.195"] [uri "/local/.env"] [unique_id "aqu0stOrbTfWf432-SkMdgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 04:58:56 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 00:58:44.580664 2026] [security2:error] [pid 14186:tid 14213] [client 213.254.175.153:40827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.201"] [uri "/backend/.env"] [unique_id "aqtzhEo_MGum1uQF47nv-QAAAJY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 01:10:33 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 21:10:00.487724 2026] [security2:error] [pid 24614:tid 24614] [client 213.254.175.153:33635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.162"] [uri "/old/.env"] [unique_id "aqs96CrMpD0NmNyerli8UAAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-16 21:45:35 (1 day ago)	Enumerating paths that do not exist (scanning) \| method: GET \| path: /old/.env \| ua: Mozilla/5.0 (Wi ... show more Enumerating paths that do not exist (scanning) \| method: GET \| path: /old/.env \| ua: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 \| 2026-09-16 21:45 UTC show less	Port Scan Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 216.226.77.20

🇰🇪 197.248.6.132

🇿🇦 196.6.114.227

🇸🇪 194.103.82.72

🇩🇴 38.156.238.138

🇳🇱 213.177.179.175

🇧🇷 200.237.87.74

🇨🇱 191.119.158.27

🇷🇺 188.255.123.124

🇦🇷 186.19.246.149

🇻🇳 171.255.177.92

🇹🇷 166.1.94.93

🇳🇱 160.119.76.146

🇹🇼 106.104.134.221

🇩🇿 105.99.112.187

🇬🇧 51.195.215.74

🇻🇳 14.177.234.46

🇲🇽 177.226.185.230

🇺🇸 162.216.150.24

🇻🇳 123.29.67.232