JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.40.212

45.3.40.212 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 41%: ?

41%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.40.212

Whois 45.3.40.212

IP Abuse Reports for 45.3.40.212:

This IP address has been reported a total of 18 times from 14 distinct sources. 45.3.40.212 was first reported on October 28th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 boxed-it	2026-07-21 19:19:00 (2 hours ago)	GET /.git/./config (Tarpitted for 1d15h8m28s, wasted 8.06MB)	Web App Attack
🇨🇭 TheCoon	2026-07-20 05:30:01 (1 day ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇮🇩 Burayot	2026-07-20 05:12:19 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.40.212 (BR/Brazil/-): 1 in the ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.40.212 (BR/Brazil/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 04:49:50 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.3.40.212 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.40.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 00:49:47.201494 2026] [security2:error] [pid 2642555:tid 2642555] [client 45.3.40.212:48387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "disenowebprofesional.com"] [uri "/.git/./config"] [unique_id "al2o60e-vitPcDYo1Nlo7AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Axel	2026-07-20 03:40:02 (1 day ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/./confi ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/./config Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇫🇷 Sklurk	2026-07-08 00:04:53 (1 week ago)	Web App Attack	Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-12 22:00:42 (2 months ago)	Auto-ban: >3000 req/min op 2026-05-12	Web App Attack SSH Hacking
🇩🇪 4server	2026-05-10 12:53:23 (2 months ago)	[SunMay1014:53:18.0756602026][security2:error][pid959030:tid959059][client45.3.40.212:0]ModSecurity: ... show more [SunMay1014:53:18.0756602026][security2:error][pid959030:tid959059][client45.3.40.212:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"prstartup.ch\"][uri\"/.git/HEAD\"][unique_id\"agB_vjDkBzN99RsXvMaM9wAAABE\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 oncord	2025-11-22 09:44:42 (7 months ago)	Form spam	Web Spam
🇩🇪 HERA - Operations	2025-11-21 02:23:21 (8 months ago)	argeforum - illegal post-request from blocked ip 2025/11/21 03:23:21	Hacking
🇺🇸 TPI-Abuse	2025-03-15 00:52:49 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.40.212 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.40.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 14 20:52:41.857744 2025] [security2:error] [pid 12665:tid 12665] [client 45.3.40.212:44587] [client 45.3.40.212] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cgautomatizacion.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cgautomatizacion.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z9TPWZVwsg2nGS_NIT0iEwAAAAg"], referer: https://cgautomatizacion.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-02-19 18:10:06 (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇪🇸 el-brujo	2025-01-09 17:13:13 (1 year ago)	Cloudflare WAF: Request Path: /login_up.php Request Query: Host: elhacker.net:8443 userAgent: Mozil ... show more Cloudflare WAF: Request Path: /login_up.php Request Query: Host: elhacker.net:8443 userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Action: block Source: firewallManaged ASN Description: DREI-K-TECH-GMBH Country: GB Method: POST Timestamp: 2025-01-09T17:13:13Z ruleId: 8e361ee4328f4a3caf6caf3e664ed6fe. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 PulseServers	2024-11-09 03:29:08 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS2 ... show less	DDoS Attack Exploited Host
🇺🇸 PulseServers	2024-11-08 00:47:40 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS2 ... show less	DDoS Attack Exploited Host

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 94.244.77.5

🇬🇧 45.82.76.117

🇺🇸 44.250.191.151

🇰🇷 211.37.174.180

🇷🇺 149.126.21.154

🇺🇸 147.185.132.24

🇺🇸 104.248.122.2

🇺🇸 40.121.179.100

🇨🇳 36.106.167.113

🇧🇷 2804:d59:9e0c:8a00:b5fe:2b75:3308:93a8

🇺🇸 178.171.93.208

🇭🇰 47.76.149.209

🇳🇱 45.153.34.112

🇺🇸 216.25.89.103

🇬🇧 193.32.209.231

🇳🇱 178.16.54.22

🇺🇸 172.202.37.160

🇺🇸 157.245.87.146

🇺🇸 45.79.191.178

🇮🇩 36.92.44.186