JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.185.71.254

45.185.71.254 was found in our database!

This IP was reported 61 times. Confidence of Abuse is 41%: ?

41%

ISP	Dwnet Banda Larga Comunicacao Multimidia e Informa
Usage Type	Fixed Line ISP
ASN	AS269370
Domain Name	dwnet.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.185.71.254

Whois 45.185.71.254

IP Abuse Reports for 45.185.71.254:

This IP address has been reported a total of 61 times from 34 distinct sources. 45.185.71.254 was first reported on May 22nd 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-13 04:30:15 (1 day ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇫🇷 GabrielJST	2026-07-12 18:29:17 (1 day ago)	(smtpauth) Failed SMTP AUTH login from 45.185.71.254 (BR/Brazil/-)	Brute-Force
🇺🇸 kosada.com	2026-06-29 10:05:47 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Admins@FBN	2026-06-25 01:05:10 (2 weeks ago)	FW-PortScan: Traffic Blocked srcport=34092 dstport=5762	Port Scan
Anonymous	2026-06-25 00:11:36 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇦🇺 MAGIC	2026-06-14 01:11:06 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-06-09 09:19:05 (1 month ago)	2026-06-09 11:19:05 ERROR util.AccessViolations - 45.185.71.254 report to fail2ban - action: block . ... show more 2026-06-09 11:19:05 ERROR util.AccessViolations - 45.185.71.254 report to fail2ban - action: block ... show less	Hacking Brute-Force Bad Web Bot
🇯🇵 huihui	2026-06-03 11:13:17 (1 month ago)	2026-06-03T15:36:26.499004+08:00 [Host] sshd[137183]: banner exchange: Connection from 45.185.71.254 ... show more 2026-06-03T15:36:26.499004+08:00 [Host] sshd[137183]: banner exchange: Connection from 45.185.71.254 port 48327: invalid format 2026-06-03T15:37:13.330790+08:00 [Host] sshd[137401]: banner exchange: Connection from 45.185.71.254 port 12711: invalid format 2026-06-03T15:37:58.400784+08:00 [Host] sshd[137523]: banner exchange: Connection from 45.185.71.254 port 13185: invalid format ... show less	Brute-Force SSH
🇮🇹 A000Z	2026-05-17 16:55:11 (1 month ago)	Fail2Ban: 45.185.71.254 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 45.185.71.254 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 trivox.sh	2026-05-14 14:53:06 (1 month ago)	2026-05-14T14:32:47.276859+00:00 ws1.trivox.sh sshd-session[1782411]: banner exchange: Connection fr ... show more 2026-05-14T14:32:47.276859+00:00 ws1.trivox.sh sshd-session[1782411]: banner exchange: Connection from 45.185.71.254 port 47750: invalid format 2026-05-14T14:32:48.408676+00:00 ws1.trivox.sh sshd-session[1782457]: banner exchange: Connection from 45.185.71.254 port 47795: invalid format 2026-05-14T14:40:15.143203+00:00 ws1.trivox.sh sshd-session[1799256]: banner exchange: Connection from 45.185.71.254 port 37465: invalid format 2026-05-14T14:40:18.017457+00:00 ws1.trivox.sh sshd-session[1799378]: banner exchange: Connection from 45.185.71.254 port 37697: invalid format ... show less	Brute-Force SSH
🇺🇸 quilla	2026-04-03 03:20:35 (3 months ago)	Botnet infected device observed in honeypot (Vector: TCP)	DDoS Attack
🇺🇸 TPI-Abuse	2026-03-05 03:52:23 (4 months ago)	(mod_security) mod_security (id:217210) triggered by 45.185.71.254 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217210) triggered by 45.185.71.254 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 22:52:18.542954 2026] [security2:error] [pid 11416:tid 11416] [client 45.185.71.254:47238] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|top66withs.online\|F\|4"] [data "GET http://top66withs.online HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "top66withs.online"] [uri "/"] [unique_id "aaj98iZX6RYDwC4CZXQbDAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-02-22 11:38:46 (4 months ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/ddebc89b6d27929fece7153308b6a3fc/1/r/1rerturn-2426.jpg ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36') show less	Web App Attack Exploited Host
Anonymous	2026-01-26 10:16:23 (5 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp show less	Bad Web Bot Exploited Host
🇦🇹 urnilxfgbez	2026-01-14 23:45:00 (5 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 150.241.77.28

🇸🇬 114.119.142.69

🇦🇺 65.254.93.170

🇺🇸 24.199.86.218

🇺🇸 3.101.104.198

🇺🇸 2607:f8b0:4002:c11::12a

🇵🇰 223.123.4.91

🇸🇬 217.15.160.110

🇺🇸 195.184.76.51

🇺🇸 195.184.76.50

🇳🇱 192.142.24.54

🇦🇷 186.158.120.183

🇧🇷 138.219.152.234

🇳🇱 45.148.10.151

🇨🇳 27.226.44.226

🇬🇧 195.206.182.220

🇳🇱 172.94.9.43

🇨🇿 157.240.30.55

🇺🇸 135.237.123.203

🇱🇹 81.30.98.144