JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.118.244.16

45.118.244.16 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 45%: ?

45%

ISP	Stargate Communications Ltd
Usage Type	Fixed Line ISP
ASN	AS45905
Domain Name	stargate.ca
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.118.244.16

Whois 45.118.244.16

IP Abuse Reports for 45.118.244.16:

This IP address has been reported a total of 31 times from 19 distinct sources. 45.118.244.16 was first reported on August 3rd 2023, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 wlt-blocker	2026-06-14 07:43:44 (6 hours ago)	Unauthorized access to webpage admin	Web App Attack
🇦🇺 prologic	2026-06-13 18:23:07 (20 hours ago)	Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated re ... show more Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated requests to expensive Git repository endpoints (commit/diff/blame/archive views), ~1 request per IP, spoofed browser UA, rejected with HTTP 429. Residential-proxy botnet campaign, 2026-06-13/14 UTC. show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 14:31:47 (23 hours ago)	(mod_security) mod_security (id:225170) triggered by 45.118.244.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.118.244.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 10:31:35.661285 2026] [security2:error] [pid 15079:tid 15079] [client 45.118.244.16:51959] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|theopinionatedowl.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theopinionatedowl.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai1px0XvlLzyOwggOja8owAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Ocean Ascents	2026-06-12 10:52:37 (2 days ago)	Probe for vulnerabilities. Path attempted: /xmlrpc.php	Web App Attack
🇫🇷 dynamix	2026-06-11 17:45:24 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 15:48:30 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 45.118.244.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.118.244.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 11:48:21.188307 2026] [security2:error] [pid 9426:tid 9426] [client 45.118.244.16:57156] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|robinsnestingplace.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "robinsnestingplace.net"] [uri "/wp-json/wp/v2/users"] [unique_id "airYxWHaZ_fRcogL6aKCKAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-06-10 15:37:12 (3 days ago)	(wordpress) Failed wordpress login from 45.118.244.16 (BD/Bangladesh/-/-/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-10 14:57:45 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 45.118.244.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.118.244.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 10:57:34.186185 2026] [security2:error] [pid 4012:tid 4012] [client 45.118.244.16:63275] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|madisonmedia.ai\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "madisonmedia.ai"] [uri "/wp-json/wp/v2/users"] [unique_id "ail7XsTt2WE7e3QWBz8VWQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Kenshin869	2026-06-10 05:25:06 (4 days ago)	Wordpress unauthorized access attempt	Brute-Force
🇨🇭 ALPHANET	2026-05-10 02:20:48 (1 month ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇳🇱 exxos	2025-09-01 15:05:05 (9 months ago)	Attacks with Bad user agents	Hacking
🇳🇱 exxos	2025-08-25 17:03:01 (9 months ago)	Attacks with Bad user agents	Hacking
🇪🇸 Global Cyber Police	2025-07-27 14:28:27 (10 months ago)	Malicious bot activity detected: Hitting honeypot page (200 OK with 258/259 bytes sent).	Port Scan Brute-Force Web App Attack
Anonymous	2024-05-30 08:23:57 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇬🇧 Bytemark	2024-03-23 12:29:29 (2 years ago)	Mar 23 12:29:29 dlcentre3 postfix/smtpd[16172]: NOQUEUE: reject: RCPT from unknown[45.118.244.16]: 5 ... show more Mar 23 12:29:29 dlcentre3 postfix/smtpd[16172]: NOQUEUE: reject: RCPT from unknown[45.118.244.16]: 554 5.7.1 Service unavailable; Client host [45.118.244.16] blocked using cbl.abuseat.org; Listed by XBL, see https://check.spamhaus.org/query/ip/45.118.244.16; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[103.85.194.25]> show less	Email Spam Spoofing Brute-Force Exploited Host

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 165.245.236.101

🇺🇸 157.245.123.148

🇬🇧 89.37.172.136

🇬🇧 87.236.176.217

🇻🇳 27.79.5.139

🇫🇷 13.140.159.60

🇺🇸 3.19.31.47

🇩🇪 2.27.20.149

🇺🇸 2604:a880:400:d1:0:4:9623:9001

🇺🇸 2604:a880:400:d1:0:4:961a:1001

🇮🇩 203.83.36.197

🇬🇧 193.163.125.82

🇳🇱 172.94.9.71

🇸🇬 159.223.33.252

🇫🇷 145.239.188.122

🇺🇸 66.240.236.109

🇺🇸 66.132.172.252

🇸🇬 13.250.49.180

🇻🇳 1.54.204.159

🇺🇸 206.223.228.197