JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.191.173.54

45.191.173.54 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 38%: ?

38%

ISP	sirlene fidelis de maciel telecomunicações me
Usage Type	Fixed Line ISP
ASN	AS269683
Domain Name	rednettelecom.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.191.173.54

Whois 45.191.173.54

IP Abuse Reports for 45.191.173.54:

This IP address has been reported a total of 39 times from 18 distinct sources. 45.191.173.54 was first reported on June 30th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 saamkuu	2026-10-16 05:48:25 (1 day ago)	DDoS botnet: TCP connection flood, 3 connections to port 443.	DDoS Attack
🇺🇸 TPI-Abuse	2026-10-02 18:35:30 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 45.191.173.54 (45-191-173-54.rednettelecom.net. ... show more (mod_security) mod_security (id:210350) triggered by 45.191.173.54 (45-191-173-54.rednettelecom.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 14:35:24.396193 2026] [security2:error] [pid 12432:tid 12432] [client 45.191.173.54:60378] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|lopansri.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lopansri.com"] [uri "/"] [unique_id "ar_5bPI9U6M7rMxpdsB7SwAAAAk"], referer: https://linkbuildingstrategies.store/dir/professional-seo-backlinks-124994 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 22:19:38 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 45.191.173.54 (45-191-173-54.rednettelecom.net. ... show more (mod_security) mod_security (id:210350) triggered by 45.191.173.54 (45-191-173-54.rednettelecom.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 18:19:31.971039 2026] [security2:error] [pid 21591:tid 21591] [client 45.191.173.54:51894] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.circulodesonido.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.circulodesonido.org"] [uri "/"] [unique_id "arrn8_6fOX6yRYgqo755QAAAAAo"], referer: https://13cielos.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-24 22:48:29 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 20:50:32 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 07:13:22 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 phil2k	2026-09-21 05:12:24 (3 weeks ago)	Firewall: Within 2026-09-15 11:13:19 - 2026-09-15 12:04:49 CEST(+0200) identified: unallowed access ... show more Firewall: Within 2026-09-15 11:13:19 - 2026-09-15 12:04:49 CEST(+0200) identified: unallowed access from 45.191.173.54 on uncommon port/s: 12824(udp:12824),25219(udp:25219) (2 trials) Fail2ban: Within 2026-09-15 11:13:19 - 2026-09-15 12:04:49 CEST(+0200) banned: 4 times by fail2ban[firewall]; 4 times by fail2ban[recidive] show less	Port Scan Brute-Force
🇺🇸 TPI-Abuse	2026-09-16 18:45:45 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 45.191.173.54 (45-191-173-54.rednettelecom.net. ... show more (mod_security) mod_security (id:210350) triggered by 45.191.173.54 (45-191-173-54.rednettelecom.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 14:45:39.378735 2026] [security2:error] [pid 22729:tid 22774] [client 45.191.173.54:42276] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|beltagin.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "beltagin.com"] [uri "/"] [unique_id "aqrj0ziB3eUr9PeuuOBWzgAAAU4"], referer: https://dadpchecker.online/dir/contextual-link-building-21361 show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 cibersecoptidata	2026-09-16 03:04:03 (1 month ago)	Port scan / Unsolicited traffic.	Port Scan
🇩🇪 phil2k	2026-09-15 10:04:52 (1 month ago)	fail2ban:firewall:2026-09-15T11:13:19.457488+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-09-15T11:13:19.457488+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=45.191.173.54 DST=<ANONYMIZED_IP> LEN=61 TOS=0x00 PREC=0x00 TTL=52 ID=24954 DF PROTO=UDP SPT=43076 DPT=12824 LEN=41 2026-09-15T12:04:49.503330+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=45.191.173.54 DST=<ANONYMIZED_IP> LEN=957 TOS=0x00 PREC=0x00 TTL=52 ID=50664 DF PROTO=UDP SPT=47633 DPT=25219 LEN=937 show less	DDoS Attack Port Scan
🇺🇸 kosada.com	2026-09-12 22:17:00 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics[71]=4 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics[71]=49&topics[72]=31&topics[73]=59&topics[74]=53 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇧🇷 diego	2026-09-12 01:42:17 (1 month ago)	[rede-44-49] 09/11/2026-22:42:16.837643, 45.191.173.54, Protocol: 17, ET CINS Active Threat Intellig ... show more [rede-44-49] 09/11/2026-22:42:16.837643, 45.191.173.54, Protocol: 17, ET CINS Active Threat Intelligence Poor Reputation IP group 56 show less	Hacking
Anonymous	2026-09-11 22:06:57 (1 month ago)	unsolicited UDP packet to port 10589 (41 bytes)	Hacking
🇧🇷 cibersecoptidata	2026-09-11 03:01:27 (1 month ago)	Port scan / Unsolicited traffic.	Port Scan
🇺🇸 鬼影233	2026-09-11 00:03:17 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.215.232.2

🇺🇸 129.121.139.106

🇺🇸 104.168.134.232

🇻🇪 38.248.168.49

🇩🇪 195.63.27.22

🇬🇧 167.99.83.52

🇸🇪 70.34.202.108

🇺🇸 35.252.225.38

🇲🇾 202.165.26.170

🇷🇺 176.112.107.203

🇻🇳 123.31.31.125

🇬🇧 35.203.211.192

🇮🇹 146.241.119.178

🇺🇸 135.119.93.249

🇺🇸 129.121.136.201

🇭🇰 101.36.119.203

🇩🇪 93.152.221.59

🇺🇸 57.141.6.44

🇧🇪 35.241.162.108

🇳🇱 35.204.195.21