JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.39.97

45.3.39.97 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 57%: ?

57%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.39.97

Whois 45.3.39.97

IP Abuse Reports for 45.3.39.97:

This IP address has been reported a total of 47 times from 28 distinct sources. 45.3.39.97 was first reported on March 9th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-06-27 09:36:21 (1 day ago)	Fail2Ban banned 45.3.39.97 for security violations in jail wp-armour. Log: 2026/06/27 09:36:21 [erro ... show more Fail2Ban banned 45.3.39.97 for security violations in jail wp-armour. Log: 2026/06/27 09:36:21 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.3.39.97 \| Target: wplogin" , client: 45.3.39.97, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
Anonymous	2026-06-26 10:40:18 (2 days ago)	[server.tmg.gr] httpd-login-spray-site: sites=eradjournal.com; logs=/var/log/httpd/domains/eradjourn ... show more [server.tmg.gr] httpd-login-spray-site: sites=eradjournal.com; logs=/var/log/httpd/domains/eradjournal.com.log; samples=site_wide=true \| distinct_ips=20 \| /wp-login.php show less	Hacking Web App Attack
🇫🇷 ELYAZ	2026-06-24 04:04:15 (4 days ago)	(y4) Failed scan -byebye- from 45.3.39.97 (US/United States/-): (CF_ENABLE)	Hacking
🇩🇪 london2038.com	2026-06-22 10:45:07 (6 days ago)	Attacking WordPress 45.3.39.97 - - [22/Jun/2026:12:45:03 +0200] "POST /wp-login.php HTTP/1.1" 503 19 ... show more Attacking WordPress 45.3.39.97 - - [22/Jun/2026:12:45:03 +0200] "POST /wp-login.php HTTP/1.1" 503 19311 "https://<REDACTED>/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" show less	Brute-Force Web App Attack
Anonymous	2026-06-21 19:29:16 (6 days ago)	[ns41.kdns.gr] httpd-login-spray-site: sites=apnoia.gr; logs=/var/log/httpd/domains/apnoia.gr.log; s ... show more [ns41.kdns.gr] httpd-login-spray-site: sites=apnoia.gr; logs=/var/log/httpd/domains/apnoia.gr.log; samples=site_wide=true \| distinct_ips=13 \| /wp-login.php show less	Hacking Web App Attack
🇫🇷 ELYAZ	2026-06-19 14:42:18 (1 week ago)	(y4) Failed scan -byebye- from 45.3.39.97 (US/United States/-): (CF_ENABLE)	Hacking
Anonymous	2026-06-18 19:15:55 (1 week ago)	Web attack blocked by Wordfence on www.charlesquaedvlieg.nl (1 hit). Reported by CRMON.	Web App Attack
🇫🇷 mrcrassi	2026-06-17 16:04:21 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 ELYAZ	2026-06-17 09:42:30 (1 week ago)	(y4) Failed scan -byebye- from 45.3.39.97 (US/United States/-): (CF_ENABLE)	Hacking
🇫🇷 pm33	2026-06-16 19:37:54 (1 week ago)	Wordpress login attempts	Brute-Force
🇩🇪 iNetWorker	2026-06-13 07:10:39 (2 weeks ago)	trolling for resource vulnerabilities	Web App Attack
🇬🇷 setupgr	2026-06-12 14:30:53 (2 weeks ago)	(mod_security) mod_security (id:900001) triggered by 45.3.39.97: 1 in the last 86400 secs; Ports: ; ... show more (mod_security) mod_security (id:900001) triggered by 45.3.39.97: 1 in the last 86400 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 17:30:49.819533 2026] [security2:error] [pid 326864:tid 326909] [client 45.3.39.97:20413] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.doityourself.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.doityourself.gr"] [uri "/wp-login.php"] [unique_id "aiwYGcuFnDrX8qeXldOAegAAANI"], referer: https://mail.doityourself.gr/wp-login.php show less	Port Scan
🇲🇹 Malta	2026-06-10 11:21:16 (2 weeks ago)	45.3.39.97 - - [10/Jun/2026:13:21:16 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x ... show more 45.3.39.97 - - [10/Jun/2026:13:21:16 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64; rv:118.0) Gecko/20100101 Firefox/118.0" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 LRob.fr	2026-06-09 03:30:41 (2 weeks ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇫🇷 Little Iguana	2026-05-06 13:09:30 (1 month ago)	trying to access non-authorized port	Port Scan

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 188.69.225.188

🇳🇱 45.198.224.120

🇺🇸 45.33.12.214

🇺🇸 40.124.173.185

🇬🇧 20.117.9.175

🇨🇳 14.103.127.232

🇨🇳 14.18.122.98

🇬🇧 185.247.137.106

🇷🇴 80.94.92.120

🇸🇬 47.79.206.75

🇨🇳 14.103.127.204

🇨🇳 14.103.123.166

🇧🇷 177.76.134.52

🇪🇸 149.91.97.132

🇧🇬 91.191.209.46

🇬🇧 81.19.219.249

🇷🇺 79.104.0.82

🇺🇸 65.49.20.79

🇨🇳 14.103.122.187

🇨🇳 14.103.117.84