JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.227.254.39

45.227.254.39 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 51%: ?

51%

ISP	XWIN UNIVERSAL LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS267784
Domain Name	xwinnet.biz
Country	🇱🇹 Lithuania
City	Vilnius, Vilnius

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.227.254.39

Whois 45.227.254.39

IP Abuse Reports for 45.227.254.39:

This IP address has been reported a total of 24 times from 14 distinct sources. 45.227.254.39 was first reported on August 9th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 paulshipley.com.au	2026-08-25 07:11:34 (1 day ago)	[Tue Aug 25 17:11:33.627625 2026] [security2:error] [pid 213006] [client 45.227.254.39:51796] [clien ... show more [Tue Aug 25 17:11:33.627625 2026] [security2:error] [pid 213006] [client 45.227.254.39:51796] [client 45.227.254.39] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "ao1AJZVFCEpaq457V6XkegAAAAU"] ... show less	Web App Attack
🇫🇷 masterguru	2026-08-24 20:34:04 (2 days ago)	Request content type is not allowed by policy. Match of "within %{tx.allowed_request_content_type}" ... show more Request content type is not allowed by policy. Match of "within %{tx.allowed_request_content_type}" against "TX:content_type" required. (920420-193) show less	Hacking Web App Attack
Anonymous	2026-08-24 03:15:03 (2 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/2.0, GET /wp-login.php HTTP/2.0, [1/1] ... show more Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/2.0, GET /wp-login.php HTTP/2.0, [1/1] done show less	Hacking Web App Attack
🇺🇸 Victor López	2026-08-21 04:29:55 (5 days ago)	advisainternational.com 45.227.254.39 - - [20/Aug/2026:23:29:53 -0500] "GET /wp-login.php HTTP/2.0" ... show more advisainternational.com 45.227.254.39 - - [20/Aug/2026:23:29:53 -0500] "GET /wp-login.php HTTP/2.0" 404 5780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" - advisainternational.com 45.227.254.39 - - [20/Aug/2026:23:29:54 -0500] "GET /wp-login.php HTTP/2.0" 404 5780 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" - advisainternational.com 45.227.254.39 - - [20/Aug/2026:23:29:55 -0500] "GET /wp-login.php HTTP/2.0" 404 5780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" - ... show less	Hacking Web App Attack
🇲🇾 Rizzy	2026-08-20 16:45:54 (6 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇷 Kenshin869	2026-08-16 07:35:30 (1 week ago)	Wordpress unauthorized access attempt	Brute-Force
🇦🇺 paulshipley.com.au	2026-08-15 13:18:10 (1 week ago)	[Sat Aug 15 23:18:10.280470 2026] [security2:error] [pid 792582] [client 45.227.254.39:43238] [clien ... show more [Sat Aug 15 23:18:10.280470 2026] [security2:error] [pid 792582] [client 45.227.254.39:43238] [client 45.227.254.39] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "aoBnEqqpkWPhV8SlXWRjFQAAAAQ"] ... show less	Web App Attack
🇫🇷 LRob	2026-08-15 13:09:24 (1 week ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: /xmlrpc.php show less	Hacking Web App Attack
🇺🇸 Victor López	2026-08-14 16:29:04 (1 week ago)	advisainternational.com 45.227.254.39 - - [14/Aug/2026:11:29:02 -0500] "GET /wp-login.php HTTP/2.0" ... show more advisainternational.com 45.227.254.39 - - [14/Aug/2026:11:29:02 -0500] "GET /wp-login.php HTTP/2.0" 404 5780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" - advisainternational.com 45.227.254.39 - - [14/Aug/2026:11:29:03 -0500] "GET /wp-login.php HTTP/2.0" 404 5780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" - advisainternational.com 45.227.254.39 - - [14/Aug/2026:11:29:03 -0500] "GET /wp-login.php HTTP/2.0" 404 5780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" - ... show less	Hacking Web App Attack
Anonymous	2026-08-06 22:00:13 (2 weeks ago)	\| [Dangerous/Panama] Aggressive IP 45.227.254.39 (~30 hits). Type: DoS Defender- Web server 400 erro ... show more \| [Dangerous/Panama] Aggressive IP 45.227.254.39 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇮🇹 VHosting	2026-08-04 19:50:03 (3 weeks ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-08-04 15:09:35 (3 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇪🇸 10dencehispahard SL	2024-10-31 11:56:50 (1 year ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
🇹🇷 rtbh.com.tr	2024-09-22 20:54:24 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-09-21 20:54:26 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 168.90.214.151

🇧🇩 103.189.159.145

🇨🇦 85.217.149.71

🇸🇦 2a02:cb80:4285:2789:a9f2:4cc8:8d98:a20f

🇮🇪 2a02:8084:26e1:a200:a5ef:1f22:1661:2593

🇳🇮 2803:2d60:1604:ed8:680b:9492:3f96:a8e2

🇨🇱 190.164.86.225

🇪🇨 190.154.189.91

🇦🇷 190.112.138.230

🇸🇦 188.48.60.18

🇧🇷 186.194.83.221

🇸🇦 175.110.210.117

🇻🇳 171.243.48.182

🇮🇩 163.7.1.218

🇺🇸 158.101.33.12

🇦🇷 152.170.56.228

🇮🇶 151.244.147.53

🇮🇳 103.180.88.203

🇳🇱 93.123.109.95

🇰🇿 92.47.216.98