JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.43.225

45.3.43.225 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 13%: ?

13%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.43.225

Whois 45.3.43.225

IP Abuse Reports for 45.3.43.225:

This IP address has been reported a total of 20 times from 12 distinct sources. 45.3.43.225 was first reported on February 4th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lostswordfish.com	2026-08-09 11:54:04 (2 weeks ago)	Wordfence waf block on uvfousor WPIDD	Web App Attack
🇮🇹 VHosting	2026-07-13 09:05:06 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 stinpriza	2026-07-12 04:59:57 (1 month ago)	Web App Attack	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (5 months ago)	"DDoS against public endpoint"	DDoS Attack
🇳🇱 jjnxpct	2026-02-19 04:50:31 (6 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /admin/.git/config (Rule ID: 930130) - Restricted File Access Attempt show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-02-18 03:47:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.43.225 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.43.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:47:04.266406 2026] [security2:error] [pid 29950:tid 29952] [client 45.3.43.225:38741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robertbellamystudio.com"] [uri "/backend/.env"] [unique_id "aZU2OABJI9CjriAaS11VNQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 00:47:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.43.225 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.43.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 19:47:09.405040 2026] [security2:error] [pid 25979:tid 26005] [client 45.3.43.225:16861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pattinauction.com"] [uri "/.env.local"] [unique_id "aZUMDVeQ4vJMCrLJ05fwMQAAAFg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-01-13 11:55:34 (7 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:58:43 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 ambor	2025-12-25 05:48:33 (8 months ago)	Honeypot access: WordPress admin access attempt. Path: /wp-login.php	Brute-Force Web App Attack
🇮🇹 alph44	2025-12-24 04:17:09 (8 months ago)	WordPress attack detected by fail2ban: 3 failed attempts	Web App Attack
🇨🇭 backslash	2025-12-19 18:55:03 (8 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (8 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
🇫🇷 IRISIO	2025-12-01 13:33:52 (8 months ago)	scans/SQL injection/spam posts : 1 queries	SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-11-29 01:02:55 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.43.225 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.43.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 20:02:47.624950 2025] [security2:error] [pid 11642:tid 11642] [client 45.3.43.225:59761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abramczuk.me"] [uri "/wp-config.php.old"] [unique_id "aSpGNzbdDgSDAsFrIAR1SwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 212.227.154.251

🇺🇸 35.225.85.109

🇩🇪 217.60.68.140

🇦🇷 216.244.244.104

🇻🇪 201.209.112.83

🇺🇸 195.184.76.169

🇺🇸 192.34.128.202

🇫🇷 185.177.72.22

🇺🇸 172.217.107.20

🇨🇳 115.63.53.44

🇷🇴 92.118.39.14

🇺🇸 72.240.125.133

🇺🇸 64.62.156.125

🇬🇧 62.60.130.253

🇺🇸 35.188.210.137

🇨🇱 34.176.149.188

🇺🇸 34.134.5.152

🇺🇸 34.75.67.111

🇪🇸 217.160.88.29

🇧🇷 205.210.31.221