JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.43.54

45.3.43.54 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 35%: ?

35%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.43.54

Whois 45.3.43.54

IP Abuse Reports for 45.3.43.54:

This IP address has been reported a total of 27 times from 14 distinct sources. 45.3.43.54 was first reported on October 1st 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-06-11 04:12:32 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 pm33	2026-06-10 16:22:19 (2 days ago)	Wordpress login attempts	Brute-Force
🇩🇪 FeG Deutschland	2026-06-09 20:14:48 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇫🇷 masterguru	2026-05-15 02:09:15 (4 weeks ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 45.3.43.54 (DE/Germany/-): 1 in the l ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 45.3.43.54 (DE/Germany/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇨🇭 4server	2026-05-13 13:02:42 (4 weeks ago)	[WedMay1315:02:35.9287592026][security2:error][pid2688708:tid2688798][client45.3.43.54:0]ModSecurity ... show more [WedMay1315:02:35.9287592026][security2:error][pid2688708:tid2688798][client45.3.43.54:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"stmconsulenze.ch\"][uri\"/.aws/credentials\"][unique_id\"agR2a30tkPiJvnaxcZmcwgAAAIo\"] show less	Hacking Web App Attack
🇦🇺 2000cn.com.au	2026-05-12 19:25:41 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 4server	2026-04-18 22:48:53 (1 month ago)	[SunApr1900:48:51.3322072026][security2:error][pid3493135:tid3493148][client45.3.43.54:0]ModSecurity ... show more [SunApr1900:48:51.3322072026][security2:error][pid3493135:tid3493148][client45.3.43.54:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"aeQKU3iX59CsmSOTwDdk1wAAAEQ\"] show less	Port Scan Brute-Force Web App Attack
🇮🇹 [email protected]	2026-04-17 22:19:40 (1 month ago)	[Sat Apr 18 00:19:40.142854 2026] [authz_core:error] [pid 289054:tid 289094] [remote 45.3.43.54:4493 ... show more [Sat Apr 18 00:19:40.142854 2026] [authz_core:error] [pid 289054:tid 289094] [remote 45.3.43.54:44937] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php ... show less	Brute-Force Web App Attack
🇺🇸 octageeks.com	2026-03-24 04:10:37 (2 months ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 01:25:48 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.43.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.43.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 20:25:40.522891 2026] [security2:error] [pid 22270:tid 22270] [client 45.3.43.54:17297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kampinenlaw.com"] [uri "/.env.production"] [unique_id "aZZmlCcVt8wLAvgSKg6EMgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 14:04:56 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.43.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.43.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 09:04:50.923286 2026] [security2:error] [pid 11182:tid 11182] [client 45.3.43.54:40921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "writebetweenthelines.com"] [uri "/site/.git/config"] [unique_id "aZXHAnFkkRZXVDlVquoNPAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 13:32:58 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.43.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.43.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 08:32:53.274344 2026] [security2:error] [pid 7231:tid 7231] [client 45.3.43.54:20255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wisdomsco.com"] [uri "/.env"] [unique_id "aZW_hUyGQZB8_UzhKkAm-AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2025-11-27 12:21:29 (6 months ago)		Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:18:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.43.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.43.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:18:14.213268 2025] [security2:error] [pid 8376:tid 8376] [client 45.3.43.54:53083] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.portalvasco.com"] [uri "/.svn/wc.db"] [unique_id "aSVYNu06pm9UgtlWhkor0wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:47:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.43.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.43.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:47:35.908383 2025] [security2:error] [pid 15261:tid 15261] [client 45.3.43.54:51719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.sweet16invitationsonline.com"] [uri "/.svn/wc.db"] [unique_id "aSVRB-TI-_2WcD1OdHJUdwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.79

🇱🇹 88.118.59.112

🇳🇱 62.4.15.81

🇸🇬 43.156.212.86

🇧🇷 187.63.94.230

🇨🇳 124.115.66.44

🇿🇦 102.165.87.69

🇨🇳 180.102.110.143

🇰🇼 178.61.153.219

🇮🇳 103.68.31.218

🇮🇷 94.101.185.217

🇺🇸 43.135.134.180

🇸🇬 185.150.0.49

🇨🇳 58.47.107.64

🇩🇪 37.114.61.43

🇰🇷 211.223.41.90

🇰🇷 125.141.231.18

🇮🇩 103.166.10.244

🇺🇸 66.154.112.102

🇱🇹 62.60.130.14