JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.187.54.150

5.187.54.150 was found in our database!

This IP was reported 164 times. Confidence of Abuse is 8%: ?

ISP	Surfshark ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197155
Hostname(s)	d54150.artnet.gda.pl
Domain Name	surfshark.com
Country	🇵🇱 Poland
City	Gdansk, Pomerania

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.187.54.150

Whois 5.187.54.150

IP Abuse Reports for 5.187.54.150:

This IP address has been reported a total of 164 times from 72 distinct sources. 5.187.54.150 was first reported on November 19th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 oncord	2026-06-29 06:05:38 (3 weeks ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2026-05-29 01:16:48 (1 month ago)	(From [email protected]) Greetings, Wish your swimsuit let you tan evenly? Experience sw ... show more (From [email protected]) Greetings, Wish your swimsuit let you tan evenly? Experience swimwear engineered for perfect tanning without compromising style. Get the perfect beach look while staying comfortable and elegant. Shop the unique tan-through swimwear at https://tanthroughfashion.shop Shine bright with our exclusive swimwear. show less	Phishing Web Spam
🇩🇪 milcraft.nl	2026-05-20 00:06:15 (2 months ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇬🇧 consul.to	2026-05-15 04:16:50 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇳 ThreatBook.io	2026-05-12 23:23:10 (2 months ago)	ThreatBook Intelligence: vpn_proxy,cdn more details on https://threatbook.io/ip/5.187.54.150 2026-05 ... show more ThreatBook Intelligence: vpn_proxy,cdn more details on https://threatbook.io/ip/5.187.54.150 2026-05-12 10:19:52 / 2026-05-12 10:19:58 / 2026-05-12 10:19:57 / 2026-05-12 10:19:18 / 2026-05-12 10:19:59 / 2026-05-12 10:21:47 / 2026-05-12 10:19:09 / 2026-05-12 10:21:11 / show less	Web App Attack
🇨🇦 Mediashaker	2026-05-12 10:26:24 (2 months ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 5.187.54.150 (PL/Poland/ ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 5.187.54.150 (PL/Poland/d54150.artnet.gda.pl) show less	Port Scan
🇫🇷 IRISIO	2026-05-12 07:06:47 (2 months ago)	scans/SQL injection/spam posts : 141 queries	Web App Attack SQL Injection
Anonymous	2026-05-12 01:57:02 (2 months ago)	Bot / scanning and/or hacking attempts: GET /.env HTTP/2.0, GET /.env HTTP/1.1	Hacking Web App Attack
🇳🇱 enpepet	2026-05-11 22:51:01 (2 months ago)	GENERAL: parametres: [url:env=] UA:Mozilla/5.0 (iPhone; CPU iPhone OS 16_7_10 like Mac OS X) AppleWe ... show more GENERAL: parametres: [url:env=] UA:Mozilla/5.0 (iPhone; CPU iPhone OS 16_7_10 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/132.0 Mobile/15E148 Safari/605.1.15 URL:/.env show less	Port Scan Hacking Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-11 22:22:10 (2 months ago)	(mod_security) mod_security (id:210580) triggered by 5.187.54.150 (d54150.artnet.gda.pl): 1 in the l ... show more (mod_security) mod_security (id:210580) triggered by 5.187.54.150 (d54150.artnet.gda.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 18:22:05.210872 2026] [security2:error] [pid 15038:tid 15038] [client 5.187.54.150:58258] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:searchsubmit. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|old.renju.net\|F\|2"] [data "Matched Data: etc/passwd found within ARGS:searchsubmit: ../../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "old.renju.net"] [uri "/media/searchphotos.php"] [unique_id "agJWjZ7eHlKSC9P32AisHAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-05-11 19:02:37 (2 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 fortypoundhead	2026-05-11 19:01:56 (2 months ago)	SQL Injection Attempt	SQL Injection Web App Attack
🇺🇸 Lee Daniel	2026-05-09 12:58:31 (2 months ago)	5.187.54.150 - - [09/May/2026:08:58:31 -0400] "GET /.env HTTP/1.0" 403 4433 "-" "Mozilla/5.0 (iPhone ... show more 5.187.54.150 - - [09/May/2026:08:58:31 -0400] "GET /.env HTTP/1.0" 403 4433 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/148.0 Mobile/15E148 Safari/605.1.15" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-05-09 09:18:11 (2 months ago)	5.187.54.150 - - [09/May/2026:05:17:50 -0400] "GET /user33372/apply_for_role HTTP/1.1" 404 47079 "-" ... show more 5.187.54.150 - - [09/May/2026:05:17:50 -0400] "GET /user33372/apply_for_role HTTP/1.1" 404 47079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 5.187.54.150 - - [09/May/2026:05:17:51 -0400] "GET /user7685/apply_for_role HTTP/1.1" 404 47072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 5.187.54.150 - - [09/May/2026:05:17:59 -0400] "GET /user8578/apply_for_role HTTP/1.1" 404 47072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 5.187.54.150 - - [09/May/2026:05:18:01 -0400] "GET /user6531/apply_for_role HTTP/1.1" 404 47072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 5.187.54.150 - - [09/May/2026:05:18:09 -0400] "GET /user184/apply_for_role HTTP/1.1" 404 47075 "-" "Mozilla/5.0 (Windows NT 10. ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 kommunos	2026-05-09 04:42:39 (2 months ago)	/forum	Web App Attack

Showing 1 to 15 of 164 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:4f8:121:4072::2

🇫🇷 195.25.75.65

🇪🇸 135.136.16.29

🇨🇳 121.229.205.104

🇲🇦 81.192.46.36

🇨🇳 42.230.34.172

🇨🇳 14.103.115.210

🇸🇬 172.217.44.219

🇮🇳 140.245.201.77

🇩🇪 92.211.2.47

🇨🇴 69.6.234.27

🇨🇳 60.166.82.112

🇭🇰 45.207.210.145

🇮🇩 43.245.248.2

🇨🇳 14.17.85.142

🇰🇿 2.79.15.111

🇰🇷 220.85.210.200

🇺🇸 209.87.169.35

🇮🇳 203.193.150.244

🇭🇰 199.45.154.183