JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

63.254.169.45

Activity Trending Down

Abuse Confidence Score

54% Elevated

17 reports

12 reporters · latest 1 week ago

ISP: TeraSwitch Networks Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS20326
Domain Name: teraswitch.com
Country: 🇬🇧 United Kingdom of Great Britain and Northern Ireland
City: London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

17 from 12 distinct reporters

First reported

October 30th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇵🇱 Poland 6 🇦🇺 Australia 2 🇨🇿 Czechia 2

Most common categories Web App Attack 15 Hacking 11 Port Scan 1 Bad Web Bot 1 Brute-Force 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 service Informatique	2026-11-02 04:00:37 UTC · (1 week ago)	GET /robots.txt	Web App Attack
🇨🇿 SystemAdmin	2026-11-01 23:05:04 UTC · (1 week ago)	Doing bad things...	Web App Attack
Anonymous	2026-11-01 21:33:11 UTC · (1 week ago)	63.254.169.45 patrz.eu - [01/Nov/2026:22:33:10 +0100] "GET /sitemap.xml HTTP/2.0" 404 584 "-" "Mozilla/5.0 (compatible; TernCrawler/1.0)" ...	Hacking Web App Attack
🇸🇪 SkyDancer	2026-11-01 13:43:10 UTC · (1 week ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx	Hacking Brute-Force SSH
🇺🇸 sandra361	2026-11-01 04:15:04 UTC · (1 week ago)	Cloudflare WAF: 1 request from AS20326/GB \| Action: link_maze_injected \| GET HTTP/2 \| Path: / \| User Agent: Mozilla/5.0 (compatible; TernCrawler/1.0)	Bad Web Bot
🇫🇷 cityhunter_rhone	2026-11-01 03:25:19 UTC · (1 week ago)	Mercurius trap auto report \| source=APACHE_DENIED_AGGREGATE \| last_seen=2026-11-01 04:23:40 \| hits_403=2 \| hits_404=0 \| ip=63.254.169.45 \| sample_uri=/	Port Scan Hacking Web App Attack
🇵🇱 Budyn	2026-11-01 01:42:00 UTC · (1 week ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: backup.teddypot.space \| Path: /.well-known/tdmrep.json \| User-Agent: Mozilla/5.0 (compatible; ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: backup.teddypot.space \| Path: /.well-known/tdmrep.json \| User-Agent: Mozilla/5.0 (compatible; TernCrawler/1.0) \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇦🇺 afleventoffice.com.au	2026-10-31 15:01:50 UTC · (2 weeks ago)	GET /sitemap.xml HTTP/1.1	Web App Attack
🇺🇸 brantknudson.org	2026-10-31 13:04:19 UTC · (2 weeks ago)	Request path 'GET /sitemap.xml HTTP/1.1'	Web App Attack Hacking
Anonymous	2026-10-31 06:04:01 UTC · (2 weeks ago)	Malicious activity detected	Hacking Web App Attack
🇷🇺 Mga Admin	2026-10-31 03:21:46 UTC · (2 weeks ago)	63.254.169.45 - - [31/Oct/2026:10:21:45 +0700] "GET /sitemap.xml HTTP/1.1" 404 69 "-" "Mozilla/5.0 (compatible; TernCrawler/1.0)" ...	Web App Attack
🇵🇱 Budyn	2026-10-30 15:25:42 UTC · (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: kibana.goblinpot.tech \| URI: /.well-known/tdmr ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: kibana.goblinpot.tech \| URI: /.well-known/tdmrep.json \| UA: Mozilla/5.0 (compatible; TernCrawler/1.0) \| BODY: [Empty / GET Request] \| HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"GB","Cf-Connecting-Ip":"63.254.169.45","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a52b6f204ae2438f-LHR","Accept-Encoding":"gzip, br","X-Forwarded-For":"63.254.169.45","X-Waf-Trigger":"1"} show less	Hacking Web App Attack
🇳🇱 Alboweb B.V.	2026-10-30 15:11:07 UTC · (2 weeks ago)	Apache web server attack detected by Fail2Ban in plesk-apache jail	Web App Attack
🇵🇱 Budyn	2026-10-30 12:58:18 UTC · (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jira.dont-eat-the-pudding.xyz \| URI: /.well-kn ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jira.dont-eat-the-pudding.xyz \| URI: /.well-known/tdmrep.json \| UA: Mozilla/5.0 (compatible; TernCrawler/1.0) \| BODY: [Empty / GET Request] \| HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"GB","Cf-Connecting-Ip":"63.254.169.45","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a52a97378a39ef40-LHR","Accept-Encoding":"gzip, br","X-Forwarded-For":"63.254.169.45","X-Waf-Trigger":"1"} show less	Hacking Web App Attack
🇵🇱 Budyn	2026-10-30 10:55:33 UTC · (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: k8s.dont-eat-the-pudding.xyz \| URI: /.well-kno ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: k8s.dont-eat-the-pudding.xyz \| URI: /.well-known/tdmrep.json \| UA: Mozilla/5.0 (compatible; TernCrawler/1.0) \| BODY: [Empty / GET Request] \| HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"GB","Cf-Connecting-Ip":"63.254.169.45","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a529e3694dd3ef17-LHR","Accept-Encoding":"gzip, br","X-Forwarded-For":"63.254.169.45","X-Waf-Trigger":"1"} show less	Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 154.51.242.28

🇧🇷 124.198.135.160

🇺🇸 66.132.186.246

🇨🇳 221.228.203.3

🇧🇷 186.209.77.236

🇧🇷 179.221.200.133

🇭🇰 103.210.239.194

🇳🇱 45.148.10.157

🇮🇶 37.236.132.25

🇧🇪 34.38.19.77

🇻🇳 180.93.1.126

🇳🇱 176.65.149.224

🇩🇪 151.243.11.175

🇺🇸 147.185.132.21

🇨🇮 102.142.248.59

🇺🇦 95.47.110.159

🇧🇬 78.128.113.74

🇻🇪 45.186.211.38

🇻🇳 123.31.31.125

🇧🇬 91.92.199.36