JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.44.239

45.3.44.239 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 41%: ?

41%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.44.239

Whois 45.3.44.239

IP Abuse Reports for 45.3.44.239:

This IP address has been reported a total of 28 times from 19 distinct sources. 45.3.44.239 was first reported on October 2nd 2024, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 pm33	2026-06-17 04:11:17 (5 hours ago)	Wordpress login attempts	Brute-Force
🇺🇸 bpolson	2026-06-15 17:16:04 (1 day ago)	WordPress Hacking/Scanning. (s1)	Hacking Web App Attack
🇫🇷 ELYAZ	2026-06-15 16:42:22 (1 day ago)	(y4) Failed scan -byebye- from 45.3.44.239 (ES/Spain/-): (CF_ENABLE)	Hacking
🇲🇽 octageeks.com	2026-06-15 04:14:46 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 Tha_14	2026-06-12 12:49:46 (4 days ago)	Attempt to log in with non-existing username: yuanweishop	Bad Web Bot
Anonymous	2026-06-11 18:25:34 (5 days ago)	2026-06-11T20:25:34.605474+02:00 zanati wp(bikeschool.co.za)[1042979]: Blocked authentication attemp ... show more 2026-06-11T20:25:34.605474+02:00 zanati wp(bikeschool.co.za)[1042979]: Blocked authentication attempt for [email protected] from 45.3.44.239 ... show less	Web App Attack
Anonymous	2025-12-31 14:47:04 (5 months ago)	2025-12-31T16:47:04.004688+02:00 zanati wp(www.sahpa.co.za)[7334]: Blocked authentication attempt fo ... show more 2025-12-31T16:47:04.004688+02:00 zanati wp(www.sahpa.co.za)[7334]: Blocked authentication attempt for [email protected] from 45.3.44.239 ... show less	Web App Attack
🇬🇧 relianoid.com	2025-12-09 17:24:59 (6 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇺🇸 TPI-Abuse	2025-12-03 04:42:06 (6 months ago)	(mod_security) mod_security (id:210740) triggered by 45.3.44.239 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210740) triggered by 45.3.44.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 23:42:00.405224 2025] [security2:error] [pid 7150:tid 7159] [client 45.3.44.239:22593] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|vtweaversguild.org\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "vtweaversguild.org"] [uri "/VWG-FORUM/guestbook.html"] [unique_id "aS-_mN0TcU9gkzjkLBwtQwAAAQU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-26 03:09:11 (6 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 EGP Abuse Dept	2025-11-26 00:38:01 (6 months ago)	forum signup bot	Web Spam Blog Spam Web App Attack
🇺🇸 nowyouknow	2025-11-24 07:28:46 (6 months ago)	(From [email protected]) Are you searching for a job that can be done right away? If so, countl ... show more (From [email protected]) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided. Click here to complete your application if you are interested. -----> https://themoneyfromhome.com show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-11-24 07:20:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.44.239 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.44.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:20:05.371566 2025] [security2:error] [pid 9740:tid 9740] [client 45.3.44.239:55133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.tmcenvironment.com"] [uri "/.env"] [unique_id "aSQHJVMLKPjyS6mRkv4qhAAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mind5t0rm	2025-11-20 11:09:08 (6 months ago)	(WPLOGIN) WP Login Attack 45.3.44.239 (-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trig ... show more (WPLOGIN) WP Login Attack 45.3.44.239 (-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.3.44.239 - - [20/Nov/2025:18:08:54 +0700] "GET /wp-login.php?wp_lang=en_US HTTP/2.0" 200 2983 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" 45.3.44.239 - - [20/Nov/2025:18:08:57 +0700] "POST /wp-login.php?wp_lang=en_US HTTP/2.0" 302 0 "https://zerowaterthailand.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" 45.3.44.239 - - [20/Nov/2025:18:09:06 +0700] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.zerowaterthailand.com%2Fwp-admin%2Fplugins.php&reauth=1 HTTP/2.0" 200 2864 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" show less	Port Scan
🇩🇪 LRob.fr	2025-11-15 03:36:07 (7 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 176.240.124.66

🇩🇪 139.162.186.99

🇮🇳 136.232.157.230

🇨🇳 119.98.79.125

🇺🇸 65.49.1.53

🇵🇰 39.48.85.236

🇻🇳 27.78.70.85

🇺🇸 8.34.210.33

🇳🇿 219.89.197.82

🇳🇱 176.65.139.232

🇷🇺 152.32.227.23

🇨🇳 120.48.148.35

🇨🇳 117.81.34.36

🇧🇬 91.191.209.118

🇲🇦 81.192.46.49

🇳🇱 45.148.10.151

🇳🇱 185.242.226.73

🇰🇿 91.147.100.71

🇨🇦 85.217.149.43

🇻🇳 27.71.21.70