JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.3.45.161

Neutral Activity

Abuse Confidence Score

0% Low Risk

33 reports

18 reporters · latest 2 months ago

ISP: 3xK Tech GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS200373
Domain Name: 3xktech.cloud
Country: 🇩🇪 Germany
City: Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.3.45.161 has been reported 33 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

33 from 18 distinct reporters

First reported

October 1st 2024

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-11-26 11:58:03 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:57:55.743113 2025] [security2:error] [pid 26588:tid 26588] [client 45.3.45.161:55885] ModSe ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:57:55.743113 2025] [security2:error] [pid 26588:tid 26588] [client 45.3.45.161:55885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.timquanconsulting.com"] [uri "/.env"] [unique_id "aSbrQ7OMooI5ASKIVH0NpgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:05:33 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:05:29.650147 2025] [security2:error] [pid 9705:tid 9705] [client 45.3.45.161:23325] ModSecu ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:05:29.650147 2025] [security2:error] [pid 9705:tid 9705] [client 45.3.45.161:23325] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rainwaterconstruction.net"] [uri "/.svn/wc.db"] [unique_id "aSZueTrEdRinIXr0vSVOjQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:02:59 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:02:55.087427 2025] [security2:error] [pid 9085:tid 9085] [client 45.3.45.161:32745] ModSecu ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:02:55.087427 2025] [security2:error] [pid 9085:tid 9085] [client 45.3.45.161:32745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.globalodit.com"] [uri "/.env"] [unique_id "aSZDrynLhbms-NJF6DQHWwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:08:15 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:08:08.820681 2025] [security2:error] [pid 25827:tid 25827] [client 45.3.45.161:47419] ModSe ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:08:08.820681 2025] [security2:error] [pid 25827:tid 25827] [client 45.3.45.161:47419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.flugstad.com"] [uri "/.env"] [unique_id "aSQgeE4vsJHG4w2r0OHvlQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:43:37 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:43:18.916830 2025] [security2:error] [pid 30923:tid 30923] [client 45.3.45.161:41811] ModSe ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:43:18.916830 2025] [security2:error] [pid 30923:tid 30923] [client 45.3.45.161:41811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.adona.org"] [uri "/.git/HEAD"] [unique_id "aSQMlmN-De9aVkgZi6BxFAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:58:39 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:58:32.239684 2025] [security2:error] [pid 22441:tid 22441] [client 45.3.45.161:51937] ModSe ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:58:32.239684 2025] [security2:error] [pid 22441:tid 22441] [client 45.3.45.161:51937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thelittleprince.net.garbothemusical.net"] [uri "/.svn/wc.db"] [unique_id "aSP0CFOtYP4I1y9gB029oQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 15:15:00 UTC · (11 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/14 09:13:57	Port Scan Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-11-13 20:35:38 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 15:35:34.790724 2025] [security2:error] [pid 21479:tid 21479] [client 45.3.45.161:56573] ModSe ... show more (mod_security) mod_security (id:210730) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 15:35:34.790724 2025] [security2:error] [pid 21479:tid 21479] [client 45.3.45.161:56573] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ferreteria.imerka.com.mx\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ferreteria.imerka.com.mx"] [uri "/s3cmd.ini"] [unique_id "aRZBFooHDec9gTPN-Um9wQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-10 07:12:56 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 02:12:49.976093 2025] [security2:error] [pid 8286:tid 8286] [client 45.3.45.161:42113] ModSecu ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 02:12:49.976093 2025] [security2:error] [pid 8286:tid 8286] [client 45.3.45.161:42113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "capriexpress.com"] [uri "/.env"] [unique_id "aRGQcYuuw6BwluHohsgKxgAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 jjnxpct	2025-11-08 04:45:36 UTC · (1 year ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.env (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /.env]	Hacking Web App Attack
🇩🇪 cloudmax	2025-10-24 18:53:35 UTC · (1 year ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing	Port Scan
🇳🇱 GabrielJST	2025-10-19 07:55:30 UTC · (1 year ago)	45.3.45.161 (IT/Italy/-), 5 distributed sshd attacks on account [redacted]	Brute-Force SSH
Anonymous	2025-02-18 13:04:01 UTC · (1 year ago)	wordpress-trap	Web App Attack
🇺🇸 TPI-Abuse	2025-01-31 03:32:24 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 30 22:32:17.970464 2025] [security2:error] [pid 2983679:tid 2983679] [client 45.3.45.161:52369] [ ... show more (mod_security) mod_security (id:225170) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 30 22:32:17.970464 2025] [security2:error] [pid 2983679:tid 2983679] [client 45.3.45.161:52369] [client 45.3.45.161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rcjlawfirm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rcjlawfirm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z5xEQfF0Xm23Fa3uEJ1IVQAAAAU"], referer: https://rcjlawfirm.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-19 01:59:39 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 18 20:59:34.988137 2024] [security2:error] [pid 4546:tid 4546] [client 45.3.45.161:11585] [client ... show more (mod_security) mod_security (id:225170) triggered by 45.3.45.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 18 20:59:34.988137 2024] [security2:error] [pid 4546:tid 4546] [client 45.3.45.161:11585] [client 45.3.45.161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|silsby.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "silsby.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZzvxBlDZFtmYN464wEXHMQAAAAQ"], referer: https://silsby.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 16 to 30 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇰 223.123.47.63

🇪🇹 196.189.126.10

🇧🇷 186.192.9.72

🇧🇧 172.69.146.130

🇻🇳 171.231.194.225

🇩🇪 165.227.173.41

🇩🇪 157.230.19.140

🇰🇷 123.108.163.66

🇷🇺 109.184.38.49

🇺🇸 91.230.168.127

🇳🇱 86.38.187.56

🇮🇶 65.20.143.114

🇲🇾 49.124.152.180

🇺🇸 45.55.41.239

🇺🇸 172.200.195.165

🇵🇰 172.70.201.142

🇺🇸 162.216.150.219

🇺🇸 162.216.149.191

🇺🇸 146.190.63.248

🇺🇸 129.121.143.242