JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.45.103

45.3.45.103 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 30%: ?

30%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.45.103

Whois 45.3.45.103

IP Abuse Reports for 45.3.45.103:

This IP address has been reported a total of 18 times from 11 distinct sources. 45.3.45.103 was first reported on October 15th 2024, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SCHAPPY	2026-07-11 15:57:14 (15 hours ago)	Wordpress attack: Submitted data to wp-login.php prior getting page content, attempt blocked. POST c ... show more Wordpress attack: Submitted data to wp-login.php prior getting page content, attempt blocked. POST counter 1 is greater than GET counter 0, captcha counter for /wp-login.php by 45.3.45.103. show less	Web Spam
🇺🇸 lostswordfish.com	2026-07-09 09:36:03 (2 days ago)	Wordfence waf block on fairregistry	Web App Attack
Anonymous	2026-06-24 01:43:49 (2 weeks ago)	2026-06-24T03:43:49.096750+02:00 zanati wp(serviceflow.co.za)[1368793]: Blocked authentication attem ... show more 2026-06-24T03:43:49.096750+02:00 zanati wp(serviceflow.co.za)[1368793]: Blocked authentication attempt for wadminw from 45.3.45.103 ... show less	Web App Attack
🇫🇷 ELYAZ	2026-06-21 17:06:36 (2 weeks ago)	(y4) Failed scan -byebye- from 45.3.45.103 (IT/Italy/-): (CF_ENABLE)	Hacking
🇩🇪 F242	2026-06-20 11:24:06 (3 weeks ago)	Wordpress Login or XMLRPC abuse	Web App Attack
Anonymous	2025-12-30 01:41:09 (6 months ago)	2025-12-30T03:41:08.758369+02:00 zanati wp(www.sahpa.co.za)[594033]: Blocked authentication attempt ... show more 2025-12-30T03:41:08.758369+02:00 zanati wp(www.sahpa.co.za)[594033]: Blocked authentication attempt for [email protected] from 45.3.45.103 ... show less	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:40 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇮🇹 VHosting	2025-12-24 04:16:10 (6 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-25 06:06:05 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.103 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:06:02.295188 2025] [security2:error] [pid 30865:tid 30865] [client 45.3.45.103:28399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.bbrd.net"] [uri "/.env"] [unique_id "aSVHSqF9YWjsjDdz9H4YJgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:41:14 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.103 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:41:07.781606 2025] [security2:error] [pid 13283:tid 13283] [client 45.3.45.103:58095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.businesscongratulationscards.com"] [uri "/.git/HEAD"] [unique_id "aSVBc_u_3qnKRAwd390tRAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:59:41 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.103 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:59:36.783766 2025] [security2:error] [pid 12994:tid 12994] [client 45.3.45.103:30681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.edgewatertaxidermy.com"] [uri "/.svn/wc.db"] [unique_id "aSU3uKxoFSxdSt_dgLbeJQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:54:38 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.103 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:54:31.854246 2025] [security2:error] [pid 14821:tid 14821] [client 45.3.45.103:41785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jackkerrart.com"] [uri "/.env"] [unique_id "aSUaZ6-xtt7kqLzu5XIXdwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 18:17:42 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:39:25	Port Scan Brute-Force Exploited Host Web App Attack
Anonymous	2025-11-02 18:39:08 (8 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:39:25	Port Scan Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-03-23 21:38:24 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.45.103 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.45.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 17:38:21.280652 2025] [security2:error] [pid 12464:tid 12464] [client 45.3.45.103:42459] [client 45.3.45.103] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|michaelmoorefield.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "michaelmoorefield.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z-B_TaXVaOE-wQHaW29cswAAAAc"], referer: https://michaelmoorefield.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.49.63.51

🇻🇳 103.154.62.14

🇺🇸 54.159.49.205

🇩🇪 213.209.159.228

🇬🇧 195.96.139.157

🇺🇸 193.202.11.112

🇧🇷 131.0.34.135

🇨🇳 117.14.172.182

🇫🇮 104.28.222.14

🇺🇸 66.55.78.59

🇺🇸 65.49.1.131

🇬🇧 45.133.173.96

🇺🇸 20.65.195.51

🇺🇸 3.95.23.171

🇬🇧 2.57.17.86

🇨🇳 218.25.89.208

🇧🇪 198.235.24.247

🇺🇸 195.184.76.111

🇺🇸 185.226.196.27

🇨🇳 175.27.171.245