JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.45.131

45.3.45.131 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 49%: ?

49%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.45.131

Whois 45.3.45.131

IP Abuse Reports for 45.3.45.131:

This IP address has been reported a total of 32 times from 19 distinct sources. 45.3.45.131 was first reported on January 1st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-06-24 15:04:05 (1 day ago)	[WedJun2417:03:59.3694352026][security2:error][pid3493344:tid3493362][client45.3.45.131:0]ModSecurit ... show more [WedJun2417:03:59.3694352026][security2:error][pid3493344:tid3493362][client45.3.45.131:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"benvenutialfood.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajvx3878UxP324Sk6sTy7wAAAJA\"]\,referer:https://www.facebook.com/ show less	Hacking Web App Attack
🇩🇪 4server	2026-06-23 19:44:16 (2 days ago)	[TueJun2321:44:11.3724632026][security2:error][pid3016842:tid3016899][client45.3.45.131:0]ModSecurit ... show more [TueJun2321:44:11.3724632026][security2:error][pid3016842:tid3016899][client45.3.45.131:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"titraslochi.ch\"][uri\"/wp-login.php\"][unique_id\"ajriC-ySTR_hc-t3BmA3eQAAAAs\"]\,referer:https://titraslochi.ch/wp-login.php show less	Port Scan Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-06-22 19:53:16 (3 days ago)	(y4) Failed scan -byebye- from 45.3.45.131 (IT/Italy/-): (CF_ENABLE)	Hacking
🇲🇹 Malta	2026-06-22 03:11:14 (3 days ago)	45.3.45.131 - - [22/Jun/2026:05:11:14 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux ... show more 45.3.45.131 - - [22/Jun/2026:05:11:14 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
Anonymous	2026-06-20 16:49:52 (5 days ago)	WordPress Brute Force	Brute-Force
🇩🇪 F242	2026-06-20 11:25:47 (5 days ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇫🇷 Sklurk	2026-06-20 04:49:43 (5 days ago)	Web App Attack	Web App Attack
🇲🇽 octageeks.com	2026-06-20 04:13:08 (5 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 Hazzard	2026-05-23 17:10:12 (1 month ago)	(wordpress) Failed wordpress login from 45.3.45.131 (IT/Italy/Lazio/Rome/-/[redacted]): (CF_ENABLE)	Brute-Force
🇩🇪 F242	2026-05-22 20:06:17 (1 month ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇸🇪 KIDOS	2026-03-31 09:01:23 (2 months ago)	malicious activity	Web App Attack
Anonymous	2026-02-18 19:05:16 (4 months ago)	WAF repeated trigger detected by Fail2Ban	Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 18:31:07 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.131 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:31:01.339392 2026] [security2:error] [pid 9982:tid 9982] [client 45.3.45.131:29297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thevillageartcenter.com"] [uri "/app/.git/config"] [unique_id "aZYFZee2UVXs9nQIPoAC3AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 11:46:09 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.131 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 06:46:01.752393 2026] [security2:error] [pid 4727:tid 4727] [client 45.3.45.131:9689] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "walterceron.com"] [uri "/admin/.env"] [unique_id "aZWmeZgI2hViQWrncMe48gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 02:24:39 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.131 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 21:24:28.878951 2026] [security2:error] [pid 2796:tid 2796] [client 45.3.45.131:63481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arrowhead30.com"] [uri "/app/.git/config"] [unique_id "aY053A83H0LklTNEr0S-VwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.201.14

🇨🇳 171.37.47.95

🇺🇸 158.94.187.205

🇹🇭 106.0.135.159

🇮🇩 103.190.214.241

🇨🇳 101.68.14.112

🇺🇸 69.229.227.44

🇳🇱 45.156.87.204

🇺🇸 40.124.186.154

🇺🇸 35.239.102.146

🇨🇳 8.152.209.0

🇧🇪 198.235.24.180

🇦🇷 190.244.39.224

🇩🇴 190.167.237.191

🇺🇾 179.27.99.9

🇵🇪 179.6.34.118

🇨🇳 175.30.48.199

🇺🇸 172.71.31.46

🇩🇪 158.176.2.147

🇫🇷 145.239.68.107