JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.254.175.199

213.254.175.199 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 27%: ?

27%

ISP	VPN Consumer Los Angeles, United States
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.254.175.199

Whois 213.254.175.199

IP Abuse Reports for 213.254.175.199:

This IP address has been reported a total of 23 times from 15 distinct sources. 213.254.175.199 was first reported on November 17th 2025, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 15:40:45 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.199 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:40:23.284354 2026] [security2:error] [pid 26851:tid 26851] [client 213.254.175.199:48189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.104"] [uri "/protected/.env"] [unique_id "aqq4Zw5eHu5uxg1PF3Xr3QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 15:15:29 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.199 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:15:19.227667 2026] [security2:error] [pid 32329:tid 32329] [client 213.254.175.199:47569] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.115"] [uri "/conf/.env"] [unique_id "aqqyh7xY6crOmogqIka_VAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ddw	2026-09-16 12:43:59 (21 hours ago)	Access Violation Attempts - Multiple 403 Forbidden responses.	Hacking Bad Web Bot Web App Attack
Anonymous	2026-09-16 12:37:16 (21 hours ago)	automatically banned	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 12:35:19 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.199 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:34:40.582608 2026] [security2:error] [pid 7461:tid 7461] [client 213.254.175.199:40077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.146"] [uri "/app/.env"] [unique_id "aqqM4DJIQbeQgvRwCFxpogAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 10:10:54 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.199 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:10:36.016833 2026] [security2:error] [pid 20079:tid 20079] [client 213.254.175.199:26709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.42"] [uri "/192.64.150.42/.env"] [unique_id "aqprHDFmgameQKHheuC_FQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 01:49:47 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.199 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:49:42.531087 2026] [security2:error] [pid 16250:tid 16250] [client 213.254.175.199:55263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.95"] [uri "/library/.env"] [unique_id "aqn1ttLIleH6i9dpjo1x_gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 19:17:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.199 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:16:56.041716 2026] [security2:error] [pid 9052:tid 9052] [client 213.254.175.199:52849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.11"] [uri "/crm/.env"] [unique_id "aqmZqNs5193opCwKFR_jzwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 09:05:49 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.199 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 05:05:34.365025 2026] [security2:error] [pid 28183:tid 28198] [client 213.254.175.199:63035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.133"] [uri "/laravel/.env"] [unique_id "aqkKXkZmBWPSezPrdViwSQAAAIs"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 securejdprop	2026-07-19 16:10:01 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing.	Hacking Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-13 03:21:26 (2 months ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN GB/United Kingdom/-	Web App Attack
🇫🇷 dynamix	2026-07-13 02:37:21 (2 months ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇧🇷 dominioz	2026-05-24 10:47:14 (3 months ago)	2026-05-24 10:46:39 GET /.gitk - - 213.254.175.199 HTTP/1.1 Mozilla/5.0+(Windows+NT+x64)+AppleWebKit ... show more 2026-05-24 10:46:39 GET /.gitk - - 213.254.175.199 HTTP/1.1 Mozilla/5.0+(Windows+NT+x64)+AppleWebKit/537.36 - 404 104631 2026-05-24 10:46:39 GET /.git/logs/ - - 213.254.175.199 HTTP/1.1 Mozilla/5.0+(Windows+NT+x64)+AppleWebKit/537.36 - 404 104631 2026-05-24 10:46:40 GET /.svn - - 213.254.175.199 HTTP/1.1 Mozilla/5.0+(Windows+NT+x64)+AppleWebKit/537.36 - 404 104631 2026-05-24 10:46:45 GET /.well-known/autoconfig/mail - - 213.254.175.199 HTTP/1.1 Mozilla/5.0+(Windows+NT+x64)+AppleWebKit/537.36 - 404 104631 ... show less	Web App Attack
🇮🇩 fazar	2026-05-17 07:48:58 (4 months ago)	crowdsecurity/http-crawl-non_statics on node: bdj03	Web App Attack Bad Web Bot
Anonymous	2026-05-03 17:49:55 (4 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.206.182.202

🇱🇹 141.98.10.111

🇨🇳 111.26.106.119

🇮🇳 103.210.1.62

🇳🇬 102.140.97.134

🇩🇪 82.139.195.158

🇺🇸 45.131.195.223

🇮🇳 220.158.184.112

🇳🇱 195.178.110.218

🇺🇸 173.239.240.209

🇻🇳 117.2.125.84

🇨🇳 116.204.33.134

🇬🇧 35.203.211.164

🇺🇸 195.184.76.168

🇺🇸 47.201.33.25

🇮🇩 41.216.177.55

🇸🇦 35.252.58.244

🇨🇳 27.188.184.13

🇺🇸 20.83.58.79

🇫🇷 5.196.97.24