AbuseIPDB » 45.92.77.225
45.92.77.225
This IP was reported 6 times. Confidence of
Abuse
is 19% : ?
ISP
Xantho UAB
Usage Type
Data Center/Web Hosting/Transit
ASN
AS395954
Domain Name
xantho.lt
Country
🇺🇸
United States of America
City
Los Angeles, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 45.92.77.225 :
This IP address has been reported a total of
6
times from
5 distinct
sources.
45.92.77.225 was first reported on
November 13th 2025 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
Thaliruth
2026-07-20 18:32:23
(1 day ago)
[20/Jul/2026:20:32:22.827249 +0200] al5pts5Pk2_En6MbOlfu6QAAAJA 45.92.77.225 33676 127.0.0.1 7081
.. ...
show more
[20/Jul/2026:20:32:22.827249 +0200] al5pts5Pk2_En6MbOlfu6QAAAJA 45.92.77.225 33676 127.0.0.1 7081
...
show less
Hacking
🇫🇷
bigorre.org
2026-07-15 11:03:42
(6 days ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇺🇸
floreriaexpress
2026-06-18 01:04:31
(1 month ago)
FakeADS-Anti: fake_bot:fake_googlebot | https://floreriaexpresschile.cl/product/canasta-romance-de-g ...
show more
FakeADS-Anti: fake_bot:fake_googlebot | https://floreriaexpresschile.cl/product/canasta-romance-de-girasoles-tulipanes-bombones-vino-y-peluche/
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-17 10:38:03
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.92.77.225 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.92.77.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 05:37:54.613499 2026] [security2:error] [pid 20796:tid 20796] [client 45.92.77.225:44349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/.env.bak"] [unique_id "aWtmgvE3IuzScW9kVHtx1wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-17 11:16:46
(8 months ago)
| XSS (Cross Site Scripting) attempt.
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2025-11-13 12:36:59
(8 months ago)
(mod_security) mod_security (id:212620) triggered by 45.92.77.225 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:212620) triggered by 45.92.77.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 07:36:52.533429 2025] [security2:error] [pid 1822:tid 1822] [client 45.92.77.225:33879] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||ftp.nbcnewsradio.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /examples/jsp/snp/snoop.jsp;<script>alert(document.domain)</script>test.jsp"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "ftp.nbcnewsradio.com"] [uri "/examples/jsp/snp/snoop.jsp;<script>alert(document.domain)</script>test.jsp"] [unique_id "aRXQ5NOusHfC1H8rQOyIywAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: