JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

213.254.175.248

Activity Trending Down

Abuse confidence score ?

27% Elevated

30 reports

17 reporters · latest 1 week ago

ISP	VPN Consumer Los Angeles, United States
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Los Angeles, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 213.254.175.248

Export CSV

This IP address has been reported a total of 30 times from 17 distinct sources. 213.254.175.248 was first reported on November 7th 2025, and the most recent report was 1 week ago. In the last 60 days, the top reporter locations were: United States of America with 8 reports; Germany with 4 reports; Japan with 1 report. The most common categories in these recent reports were: Bad Web Bot 11 times; Web App Attack 11 times; Brute-Force 9 times; Port Scan 2 times; Open Proxy 1 time; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-10-04 22:38:53 (1 week ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-login.php \| ua: Mozilla/5.0	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-16 15:40:37 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:40:19.432311 2026] [security2:error] [pid 24966:tid 24966] [client 213.254.175.248:42995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.104"] [uri "/app/config/.env"] [unique_id "aqq4YzlmoHY7IwPH02-CLAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-16 12:37:11 (4 weeks ago)	automatically banned	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 10:18:37 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:18:25.068855 2026] [security2:error] [pid 5993:tid 5993] [client 213.254.175.248:25013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.217"] [uri "/old/.env"] [unique_id "aqps8ZX7KQ_Z8Ffi0eI8AQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 08:11:01 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 04:10:56.264052 2026] [security2:error] [pid 23680:tid 23680] [client 213.254.175.248:26247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.142"] [uri "/vendor/.env"] [unique_id "aqpPENrGMJhHzUVuG2OcPgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 00:43:54 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:43:46.991298 2026] [security2:error] [pid 1816975:tid 1816975] [client 213.254.175.248:27957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.183"] [uri "/src/.env"] [unique_id "aqnmQlFILZpAhOMaMblRbgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 20:38:55 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:38:35.521966 2026] [security2:error] [pid 10145:tid 10211] [client 213.254.175.248:48151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.82"] [uri "/base/.env"] [unique_id "aqmsywb0RXJ3JZTMBFUNDgAAAIg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 19:50:48 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:50:35.846745 2026] [security2:error] [pid 27862:tid 27862] [client 213.254.175.248:45337] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.94"] [uri "/blog/.env"] [unique_id "aqmhi9MKlbr9ZiVH3DNKWgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 19:17:18 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:16:56.827837 2026] [security2:error] [pid 15115:tid 15115] [client 213.254.175.248:52463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.11"] [uri "/laravel/.env"] [unique_id "aqmZqCfFbC-lv-ruTTAA2gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bescared	2026-09-15 18:20:06 (4 weeks ago)	F2B - Malicious activity detected. URL Probing. -8ff06ede-	Hacking Bad Web Bot Web App Attack
🇩🇪 Balthasar Morpheus Jörmundur (JKweb Service)	2026-09-15 15:49:48 (4 weeks ago)	JKweb Security: Severe and dangerous web attack detected. Vulnerability Wordpress Scanning, Director ... show more JKweb Security: Severe and dangerous web attack detected. Vulnerability Wordpress Scanning, Directory Brute-Forcing / Content Discovery, Predictable Resource Location / Forced Browsing, Scan for administration and debugging interfaces of modern frameworks, Scan for Spring Boot Actuator Leaks, Scan for Cloud & Infrastructure Credentials, Scan for Database & Backup Dumps, Scan for IDE- und Editor-Configurations, Scan for CI/CD Pipelines & GitHub Workflows etc. The Attacker is permanently banned by Fail2Ban, configurate by JKweb Security a brand of JKweb Service. show less	Port Scan Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 09:05:36 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 213.254.175.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 05:05:30.411417 2026] [security2:error] [pid 442:tid 543] [client 213.254.175.248:35721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.133"] [uri "/wp-admin/.env"] [unique_id "aqkKWqGgLgjf3XROOliKNAAAAVM"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 demonsword	2026-09-08 10:30:33 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: login.live.com:443 show less	Open Proxy Port Scan
🇫🇷 dynamix	2026-07-13 02:35:47 (3 months ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇺🇸 ambor	2026-07-02 13:16:10 (3 months ago)	Honeypot triggered: /wp-login.php on ifebridge.com. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS ... show more Honeypot triggered: /wp-login.php on ifebridge.com. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15. Method: GET show less	Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 210.245.30.140

🇺🇸 205.210.31.45

🇺🇸 195.184.76.79

🇳🇱 193.47.62.69

🇨🇳 183.47.163.203

🇸🇮 130.12.182.144

🇨🇳 111.172.7.106

🇨🇳 101.96.202.144

🇫🇷 91.196.152.95

🇫🇷 91.196.152.91

🇫🇷 91.196.152.88

🇵🇱 2a02:a315:80bd:c900:7c:6c66:2d05:b3f0

🇧🇷 200.216.172.182

🇧🇪 198.235.24.252

🇳🇱 195.178.110.26

🇩🇪 167.94.146.62

🇭🇰 156.225.1.89

🇭🇰 152.32.172.108

🇲🇴 125.31.2.160

🇳🇱 109.160.32.121