JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.236.85.34

45.236.85.34 was found in our database!

This IP was reported 248 times. Confidence of Abuse is 74%: ?

74%

ISP	PROTEK INFORMATICA EIRELI ME
Usage Type	Fixed Line ISP
ASN	AS268227
Hostname(s)	45-236-85-34.in-addr.arpa
Domain Name	proteknet.com.br
Country	🇧🇷 Brazil
City	General Carneiro, Parana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.236.85.34

Whois 45.236.85.34

IP Abuse Reports for 45.236.85.34:

This IP address has been reported a total of 248 times from 78 distinct sources. 45.236.85.34 was first reported on October 29th 2023, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-08-10 14:02:03 (6 days ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 kosada.com	2026-08-09 02:57:39 (1 week ago)	IMAP password guessing	Brute-Force
🇮🇩 sockominfo	2026-08-08 19:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 45.236.85.34. Threat Score: 6.4/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 45.236.85.34. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇩🇪 rd1742	2026-08-08 15:01:03 (1 week ago)	Aug 8 15:01:02 quad dovecot: auth-worker(1057499): sql(alica,45.236.85.34,<L0ysY4pYs+gt7FUi>): unkno ... show more Aug 8 15:01:02 quad dovecot: auth-worker(1057499): sql(alica,45.236.85.34,<L0ysY4pYs+gt7FUi>): unknown user show less	Brute-Force Exploited Host
🇫🇷 iroco.co	2026-08-08 12:33:17 (1 week ago)	Aug 8 14:33:17 iroco cyrus/imap[1343460]: badlogin: 45-236-85-34.in-addr.arpa [45.236.85.34] LOGIN ... show more Aug 8 14:33:17 iroco cyrus/imap[1343460]: badlogin: 45-236-85-34.in-addr.arpa [45.236.85.34] LOGIN ([email protected]) [SASL(-13): authentication failure: checkpass failed] ... show less	Email Spam
🇩🇪 FeG Deutschland	2026-08-06 14:26:09 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 TAY	2026-08-04 18:00:48 (1 week ago)	2026-08-05 02:00:31 auth-worker(484113): Info: sql([email protected],45.236.85.34,<OHU2bjxYJewt7FUi>) ... show more 2026-08-05 02:00:31 auth-worker(484113): Info: sql([email protected],45.236.85.34,<OHU2bjxYJewt7FUi>): Password mismatch 2026-08-05 02:00:38 auth-worker(484113): Info: sql([email protected],45.236.85.34,<OHU2bjxYJewt7FUi>): Password mismatch 2026-08-05 02:00:44 auth-worker(484113): Info: sql([email protected],45.236.85.34,<OHU2bjxYJewt7FUi>): Password mismatch 2026-08-05 02:00:48 imap-login: Info: Disconnected (auth failed, 3 attempts in 18 secs): user=<[email protected]>, method=PLAIN, rip=45.236.85.34, lip=162.220.160.187, TLS, session=<OHU2bjxYJewt7FUi> ... show less	Brute-Force
🇩🇪 Stadt Schleiden	2026-08-03 18:54:08 (1 week ago)	RdpGuard detected brute-force attempt on IMAP	Brute-Force
🇷🇴 clauss	2026-07-31 04:40:42 (2 weeks ago)	IP reached maximum auth failures for a one day block	Brute-Force
🇿🇦 hostsec_za	2026-07-30 20:05:03 (2 weeks ago)	IMAP/POP3 Auth Attack. 10 failed logins in 6 hours.	Brute-Force
🇺🇸 entangled_mongoose	2026-07-30 10:02:14 (2 weeks ago)	Failed SMTP authentication with username 'user_sha_14560@domain_sha_70fc2'.	Brute-Force Email Spam
🇮🇩 sockominfo	2026-07-30 01:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 45.236.85.34. Threat Score: 6.2/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 45.236.85.34. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇳🇱 Grad	2026-07-30 00:32:56 (2 weeks ago)	Jul 30 02:32:55 server dovecot: imap-login: Disconnected: Connection closed (auth failed, 3 attempts ... show more Jul 30 02:32:55 server dovecot: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 16 secs): user=<[email protected]>, method=PLAIN, rip=45.236.85.34, lip=188.212.112.185, TLS, session=<FmaTNclXsKAt7FUi> ... show less	Email Spam Brute-Force
🇮🇩 sockominfo	2026-07-30 00:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 45.236.85.34. Threat Score: 6.3/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 45.236.85.34. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-29 23:00:09 (2 weeks ago)	Zimbra: Login failures from malicious IP: 45.236.85.34. Threat Score: 6/10 (MEDIUM). Reported by Tan ... show more Zimbra: Login failures from malicious IP: 45.236.85.34. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack

Showing 1 to 15 of 248 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2400:cb00:961:1000:1450:b818:9a0d:7717

🇭🇰 161.81.122.86

🇺🇸 2400:cb00:1291:1000:7f74:5470:7d38:5272

🇸🇬 2400:cb00:963:1000:5539:fc2e:9911:a4d5

🇰🇷 222.120.176.6

🇩🇪 212.227.198.223

🇭🇰 199.45.154.53

🇪🇬 193.227.16.221

🇦🇷 186.23.28.200

🇺🇸 185.198.240.203

🇺🇸 172.71.190.202

🇺🇸 172.71.190.175

🇺🇸 172.71.190.174

🇮🇳 160.187.54.143

🇧🇷 129.159.56.14

🇵🇰 124.29.194.158

🇩🇿 105.100.120.217

🇧🇩 103.237.79.26

🇸🇬 101.47.159.50

🇷🇴 92.118.39.71