JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.252.251.44

Neutral Activity

Abuse Confidence Score

0% Low Risk

84 reports

38 reporters · latest 11 months ago

ISP: AZDIGI Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS63760
Domain Name: azdigi.com
Country: 🇻🇳 Viet Nam
City: Ho Chi Minh City, Ho Chi Minh City (HCMC)

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.252.251.44 has been reported 84 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

84 from 38 distinct reporters

First reported

May 1st 2023

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-12-12 20:10:24 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-12-12 19:38:45 UTC · (11 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-12-12 00:06:51 UTC · (11 months ago)	(mod_security) mod_security (id:225170) triggered by 45.252.251.44 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 19:06:44.605461 2025] [security2:error] [pid 22555:tid 22555] [client 45.252.251.44:52472] M ... show more (mod_security) mod_security (id:225170) triggered by 45.252.251.44 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 19:06:44.605461 2025] [security2:error] [pid 22555:tid 22555] [client 45.252.251.44:52472] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.somehand.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.somehand.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aTtclLMnlvdbr-qWvtPFKgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2025-12-11 20:10:24 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2025-12-10 22:19:29 UTC · (11 months ago)	(mod_security) mod_security (id:225170) triggered by 45.252.251.44 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 17:19:21.919917 2025] [security2:error] [pid 18025:tid 18025] [client 45.252.251.44:52352] M ... show more (mod_security) mod_security (id:225170) triggered by 45.252.251.44 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 17:19:21.919917 2025] [security2:error] [pid 18025:tid 18025] [client 45.252.251.44:52352] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|birdlovesfish.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "birdlovesfish.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aTnx6RJ5EKSqseIQWgbvcAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2025-12-10 17:00:22 UTC · (11 months ago)	Try to access /xmlrpc.php	Web App Attack
Anonymous	2025-09-18 12:00:30 UTC · (1 year ago)	Failed Wordpress Logins	Web App Attack
Anonymous	2025-09-07 19:30:26 UTC · (1 year ago)	Failed Wordpress Logins	Web App Attack
🇩🇪 neverdown.eu	2025-09-05 09:21:48 UTC · (1 year ago)	(XMLRPC) WP XMLPRC Attack 45.252.251.44 (VN/Vietnam/-): 5 in the last 60 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.252.251.44 - - [05/Sep/2025:12:19:41 +0300] "POST /xmlrpc.php HTTP/2" 301 795 "-" "Mozilla/5.0 (Windows NT ... show more (XMLRPC) WP XMLPRC Attack 45.252.251.44 (VN/Vietnam/-): 5 in the last 60 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.252.251.44 - - [05/Sep/2025:12:19:41 +0300] "POST /xmlrpc.php HTTP/2" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0" 45.252.251.44 - - [05/Sep/2025:12:19:44 +0300] "POST /xmlrpc.php HTTP/2" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0" 45.252.251.44 - - [05/Sep/2025:12:19:46 +0300] "POST /xmlrpc.php HTTP/2" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0" 45.252.251.44 - - [05/Sep/2025:12:19:49 +0300] "POST /xmlrpc.php HTTP/2" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0" 45.252.251.44 - - [05/Sep/2025:12:19:53 +0300] "POST /xmlrpc.php HTTP/2" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0" show less	Port Scan
🇩🇪 bsoft.de	2025-09-05 00:42:27 UTC · (1 year ago)	[Thu Sep 04 21:58:25.276531 2025] [ssl:error] [pid 9499] [client 45.252.251.44:32824] AH02032: Hostname www.bolte.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup [Thu Sep 04 22:53:21.528468 2025] [ssl:error] [p ... show more [Thu Sep 04 21:58:25.276531 2025] [ssl:error] [pid 9499] [client 45.252.251.44:32824] AH02032: Hostname www.bolte.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup [Thu Sep 04 22:53:21.528468 2025] [ssl:error] [pid 9498] [client 45.252.251.44:35156] AH02032: Hostname www.bolte.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup [Fri Sep 05 02:42:26.307220 2025] [ssl:error] [pid 27028] [client 45.252.251.44:50234] AH02032: Hostname www.bolte.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup show less	Brute-Force
🇩🇪 ger-stg-sifi1	2025-09-04 23:16:37 UTC · (1 year ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 Roderic	2025-09-04 13:06:11 UTC · (1 year ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted])	Port Scan
🇩🇪 bsoft.de	2025-09-04 12:39:27 UTC · (1 year ago)	[Thu Sep 04 10:35:24.460110 2025] [ssl:error] [pid 23330] [client 45.252.251.44:58154] AH02032: Hostname www.bolte.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup [Thu Sep 04 11:47:19.477724 2025] [ssl:error] [ ... show more [Thu Sep 04 10:35:24.460110 2025] [ssl:error] [pid 23330] [client 45.252.251.44:58154] AH02032: Hostname www.bolte.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup [Thu Sep 04 11:47:19.477724 2025] [ssl:error] [pid 27120] [client 45.252.251.44:46306] AH02032: Hostname www.bolte.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup [Thu Sep 04 14:39:26.485091 2025] [ssl:error] [pid 30930] [client 45.252.251.44:45554] AH02032: Hostname www.bolte.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup show less	Brute-Force
🇩🇪 bsoft.de	2025-09-04 04:59:42 UTC · (1 year ago)	[Thu Sep 04 05:24:40.718129 2025] [ssl:error] [pid 17980] [client 45.252.251.44:42976] AH02032: Hostname www.bolte.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup [Thu Sep 04 05:26:40.916250 2025] [ssl:error] [ ... show more [Thu Sep 04 05:24:40.718129 2025] [ssl:error] [pid 17980] [client 45.252.251.44:42976] AH02032: Hostname www.bolte.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup [Thu Sep 04 05:26:40.916250 2025] [ssl:error] [pid 17887] [client 45.252.251.44:38068] AH02032: Hostname www.bolte.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup [Thu Sep 04 06:59:42.095568 2025] [ssl:error] [pid 20388] [client 45.252.251.44:58370] AH02032: Hostname www.bolte.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup show less	Brute-Force
🇩🇪 LRob	2025-09-03 13:30:28 UTC · (1 year ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 185.136.15.82

🇺🇸 216.218.206.85

🇮🇳 203.129.217.70

🇧🇩 203.76.220.73

🇷🇺 188.232.206.51

🇨🇳 43.242.97.26

🇵🇱 2a03:2880:f32e:95:face:b00c:0:8e

🇺🇸 2a03:2880:18ff:50::

🇳🇱 192.253.248.226

🇭🇳 190.61.37.136

🇪🇨 177.234.217.83

🇱🇾 154.73.30.1

🇨🇳 118.121.7.49

🇮🇩 103.251.8.35

🇰🇭 103.11.218.223

🇰🇪 102.210.125.2

🇷🇴 92.118.39.56

🇵🇪 38.137.204.187

🇷🇺 178.140.129.139

🇸🇬 161.120.177.213