JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.42.217

45.3.42.217 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 29%: ?

29%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.42.217

Whois 45.3.42.217

IP Abuse Reports for 45.3.42.217:

This IP address has been reported a total of 40 times from 20 distinct sources. 45.3.42.217 was first reported on October 18th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-06-29 05:04:20 (2 days ago)	(y4) Failed scan -byebye- from 45.3.42.217 (GB/United Kingdom/-): (CF_ENABLE)	Hacking
Anonymous	2026-06-28 07:45:03 (3 days ago)	Web attack blocked by Wordfence on mezzia.nl (1 hit). Reported by CRMON.	Web App Attack
🇧🇪 cmbplf	2026-06-27 18:44:01 (4 days ago)	7.463 requests with url.path .git/	Brute-Force Bad Web Bot
🇲🇹 Malta	2026-06-27 18:33:04 (4 days ago)	45.3.42.217 - - [27/Jun/2026:20:33:04 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 45.3.42.217 - - [27/Jun/2026:20:33:04 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Hacking Web App Attack VPN IP
🇫🇷 masterguru	2026-04-03 11:01:13 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.3.42.217 (GB/United Kingdom/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.3.42.217 (GB/United Kingdom/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇱🇻 garmtech.com	2026-03-24 08:07:43 (3 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 13:27:09 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.42.217 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.42.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 08:27:04.693080 2026] [security2:error] [pid 1587:tid 1587] [client 45.3.42.217:47421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "millcitymakers.com"] [uri "/test/.git/config"] [unique_id "aY8mqHvT-iQpLQIIBOJM3wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 OceanTreasure	2026-02-13 13:15:58 (4 months ago)	tcp/443; Git configuration exposure attempt: "GET /backup/.git/config" @ 2026-02-13T13:12:50Z [proxy ... show more tcp/443; Git configuration exposure attempt: "GET /backup/.git/config" @ 2026-02-13T13:12:50Z [proxy] show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 08:08:57 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.42.217 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.42.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:08:54.140293 2026] [security2:error] [pid 24056:tid 24056] [client 45.3.42.217:36015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menafert.com"] [uri "/frontend/.env"] [unique_id "aY7cFlshv__3MEuY3NThxAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 03:16:08 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.42.217 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.42.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:16:02.885531 2026] [security2:error] [pid 19635:tid 19635] [client 45.3.42.217:26953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marcedinc.com"] [uri "/test/.git/config"] [unique_id "aY6Xck69LZp7ysA19qeY5AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-02-13 01:43:40 (4 months ago)	Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/-	Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 01:35:21 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.42.217 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.42.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:35:11.169199 2026] [security2:error] [pid 4458:tid 4458] [client 45.3.42.217:39445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mahtani.org"] [uri "/.env.save"] [unique_id "aY5_zylxO5fkY3DO3AjZyQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 09:33:41 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.42.217 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.42.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 04:33:33.538970 2026] [security2:error] [pid 14481:tid 14481] [client 45.3.42.217:60611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gdpeters.com"] [uri "/v2/.git/config"] [unique_id "aY2ebfrDAe1LzGNf9FErqwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-11 22:24:30 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.42.217 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.42.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 17:24:27.407999 2026] [security2:error] [pid 14566:tid 14566] [client 45.3.42.217:31271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garrygwilt.com"] [uri "/app/.env"] [unique_id "aY0Bm8qgIH_KYzp-06XFQwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-11 09:14:14 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.42.217 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.42.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 04:14:08.306230 2026] [security2:error] [pid 12603:tid 12603] [client 45.3.42.217:46929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gaeltv.com"] [uri "/frontend/.env"] [unique_id "aYxIYHAPEM641I5iFmn1ZQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 47.251.180.76

🇩🇪 2a01:4f8:0:a0a2::add:2e

🇱🇰 220.247.224.226

🇨🇳 120.48.175.122

🇸🇬 103.7.11.134

🇺🇸 47.251.170.102

🇺🇸 47.251.164.231

🇺🇸 47.251.160.251

🇮🇳 185.100.212.141

🇨🇳 111.26.63.89

🇲🇦 105.155.47.242

🇫🇷 85.217.140.33

🇺🇸 74.94.234.151

🇮🇶 65.20.149.239

🇺🇸 47.251.142.84

🇺🇸 47.251.141.46

🇭🇰 20.205.96.99

🇨🇳 14.103.111.127

🇧🇬 5.188.206.30

🇵🇱 212.127.91.32