JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.43.167

45.3.43.167 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.43.167

Whois 45.3.43.167

IP Abuse Reports for 45.3.43.167:

This IP address has been reported a total of 22 times from 14 distinct sources. 45.3.43.167 was first reported on October 20th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Peter Racine	2026-07-08 19:48:00 (2 weeks ago)	Credential stuffing - exchange accounts	Brute-Force
Anonymous	2026-03-27 11:51:20 (4 months ago)	ANFRADE WEBFORM SPAM 45.3.43.167 (45.3.43.167)	Web Spam
🇦🇺 RedBear IT	2026-03-26 10:00:37 (4 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-03-12 05:16:09 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.3.43.167 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 45.3.43.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 01:16:04.912895 2026] [security2:error] [pid 24111:tid 24111] [client 45.3.43.167:32317] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|comitedelafamille.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "comitedelafamille.org"] [uri "/store.sql"] [unique_id "abJMFKxFJUDq_kt8QbxY6QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 F242	2026-01-30 05:10:22 (5 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 TPI-Abuse	2026-01-30 01:59:54 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 45.3.43.167 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.43.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 20:59:50.487785 2026] [security2:error] [pid 1801888:tid 1801888] [client 45.3.43.167:36607] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXwQlniq_yHVuIYDh8mwlAAAAA0"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-13 12:36:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.43.167 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.43.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 07:36:17.662154 2026] [security2:error] [pid 1572:tid 1572] [client 45.3.43.167:17839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "raritymountainadventures.com"] [uri "/.git/HEAD"] [unique_id "aWY8QVzFm1mwEVmh2ksUfQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2026-01-01 15:46:39 (6 months ago)	(From [email protected]) Hi, For just $250/month, you can add a dedicated Digital Marketi ... show more (From [email protected]) Hi, For just $250/month, you can add a dedicated Digital Marketing Assistant to your team—managing SEO, ad campaigns, social media, email marketing, and daily operational tasks. The first month is free, allowing you to start without any commitment. Simply complete the form to begin. Direct Google link: https://docs.google.com/forms/d/e/1FAIpQLSdfVsEbHZ8ONCILtiWxC8Nz4dMDX4XytsWbDm9ZehvJq0dshA/viewform GLE Link to Google Forms: https://forms.gle/hUcK6pGk3DeYNonL7 Short link: https://shorturl.at/sIc0l show less	Phishing Web Spam
Anonymous	2025-12-26 22:36:49 (7 months ago)	Malicious activity detected	Hacking Web App Attack
🇦🇺 MAGIC	2025-12-26 02:11:14 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 nowyouknow	2025-12-25 18:15:11 (7 months ago)	(From [email protected]) Hello there, A single qualified lead can often justify $250. For th ... show more (From [email protected]) Hello there, A single qualified lead can often justify $250. For that same cost, you can have a dedicated Digital Marketing Assistant working full-time on SEO, ads, email marketing, social channels, and routine operations. Your first month is free to evaluate results. Complete the form below to claim your virtual assistant free for one month Direct Google link: https://docs.google.com/forms/d/e/1FAIpQLSc0j7_PYJOBpCDJqJEYWDUYRLFuf0fN596h51an A8k8Me0efA/viewform?usp=header GLE Link to Google Forms: https://forms.gle/4uj4nBHTiJVQooFA8 Short link: https://shorturl.at/o4IYf show less	Phishing Web Spam
🇫🇷 IRISIO	2025-12-20 09:26:41 (7 months ago)	scans/SQL injection/spam posts : 1 queries	SQL Injection Web App Attack
🇺🇸 xmission.com	2025-12-18 05:45:32 (7 months ago)	Blocked by UFW (TCP on 80) Source port: 25501 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 25501 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 45.3.43.167) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇬🇧 pinguin	2025-12-13 08:17:42 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wordpress//installer.php UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-02 22:30:53 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.43.167 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.43.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:30:49.337690 2025] [security2:error] [pid 30799:tid 30799] [client 45.3.43.167:49325] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xplustchad.com"] [uri "/.svn/wc.db"] [unique_id "aS9omeKlzPssgd9OtWuAaQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac1:7680:460::5e:65

🇺🇸 2a09:bac1:7680:3d0::11:19d

🇫🇷 209.20.176.111

🇺🇸 207.90.244.21

🇳🇱 185.242.226.166

🇳🇱 176.65.148.78

🇺🇸 172.253.1.23

🇳🇱 45.148.10.152

🇳🇱 31.14.32.4

🇳🇱 195.178.110.30

🇵🇪 181.176.231.216

🇺🇸 162.216.150.207

🇨🇳 111.113.89.91

🇮🇳 103.82.210.181

🇩🇪 82.165.185.56

🇵🇰 59.103.221.190

🇺🇸 54.225.135.222

🇺🇸 18.216.67.18

🇦🇷 200.81.152.19

🇳🇱 195.178.110.232