JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.254.53.50

157.254.53.50 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities NA LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396856
Domain Name	iana.org
Country	🇭🇰 Hong Kong
City	Central, Central and Western

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.254.53.50

Whois 157.254.53.50

IP Abuse Reports for 157.254.53.50:

This IP address has been reported a total of 63 times from 13 distinct sources. 157.254.53.50 was first reported on September 9th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-02-11 02:35:16 (1 year ago)	(mod_security) mod_security (id:210831) triggered by 157.254.53.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 157.254.53.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 10 21:35:10.035143 2025] [security2:error] [pid 21667:tid 21667] [client 157.254.53.50:12442] [client 157.254.53.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|thechoiceint.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "thechoiceint.com"] [uri "/"] [unique_id "Z6q3Xle9OQVyLI7QcKdYIwAAAA8"], referer: https://xn--krken14-bn4c.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-02-09 09:52:09 (1 year ago)	Excessive connections to http/https ports	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-02-04 15:05:56 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 PulseServers	2025-02-03 16:07:11 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS1 ... show less	DDoS Attack Exploited Host
Anonymous	2025-02-03 04:44:06 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-02-01 23:18:59 (1 year ago)	(mod_security) mod_security (id:210831) triggered by 157.254.53.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 157.254.53.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 01 18:18:53.587497 2025] [security2:error] [pid 3019209:tid 3019209] [client 157.254.53.50:18958] [client 157.254.53.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/"] [unique_id "Z56r3WfyEhOebvc3U3blqwAAAAU"], referer: https://xn--meg-sb14-px0d.com show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 exxos	2025-02-01 21:03:11 (1 year ago)	http-no-verb	Hacking
🇺🇸 PulseServers	2025-01-29 13:20:43 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS1 ... show less	DDoS Attack Exploited Host
🇳🇱 exxos	2025-01-25 02:54:15 (1 year ago)	http-no-verb	Hacking
Anonymous	2025-01-16 12:30:25 (1 year ago)	Excessive HTTP/HTTPS connections.	Bad Web Bot
🇳🇱 exxos	2025-01-09 20:11:28 (1 year ago)	http-no-verb	Hacking
🇺🇸 PulseServers	2025-01-09 04:55:25 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS1 ... show less	DDoS Attack Exploited Host
🇺🇸 PulseServers	2025-01-06 12:39:38 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS1 ... show less	DDoS Attack Exploited Host
🇳🇱 exxos	2025-01-06 03:57:17 (1 year ago)	http-no-verb	Hacking
🇺🇸 PulseServers	2025-01-05 07:45:25 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS1 ... show less	DDoS Attack Exploited Host

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.251

🇨🇳 124.67.121.58

🇸🇬 103.7.11.134

🇳🇱 91.92.40.11

🇹🇷 87.232.127.53

🇱🇹 62.60.130.14

🇭🇰 47.82.66.94

🇮🇩 203.175.103.20

🇳🇱 176.65.148.252

🇵🇭 165.154.100.56

🇳🇱 91.92.40.12

🇷🇸 89.216.185.105

🇫🇷 79.143.178.14

🇩🇪 157.230.18.133

🇮🇳 117.223.227.220

🇹🇷 31.145.131.202

🇳🇱 195.178.110.30

🇺🇸 172.202.9.120

🇺🇸 162.216.150.211

🇺🇸 151.240.63.161