JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.45.199

45.3.45.199 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 35%: ?

35%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.45.199

Whois 45.3.45.199

IP Abuse Reports for 45.3.45.199:

This IP address has been reported a total of 31 times from 20 distinct sources. 45.3.45.199 was first reported on October 2nd 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 ParaBug	2026-07-17 15:04:31 (2 days ago)	45.3.45.199 - - [17/Jul/2026:17:04:30 +0200] "GET http://antik-wagon.com/news-sitemap.xml HTTP/1.1" ... show more 45.3.45.199 - - [17/Jul/2026:17:04:30 +0200] "GET http://antik-wagon.com/news-sitemap.xml HTTP/1.1" 301 501 "-" "Mozilla/5.0" ... show less	Phishing Brute-Force Web App Attack
🇺🇸 lostswordfish.com	2026-07-09 09:36:03 (1 week ago)	Wordfence waf block on fairregistry	Web App Attack
🇫🇷 ELYAZ	2026-06-25 06:33:06 (3 weeks ago)	(y4) Failed scan -byebye- from 45.3.45.199 (IT/Italy/-): (CF_ENABLE)	Hacking
🇬🇷 setupgr	2026-06-22 08:52:48 (3 weeks ago)	(mod_security) mod_security (id:900001) triggered by 45.3.45.199 (IT/Italy/Lazio/Rome/-/[AS200373 DR ... show more (mod_security) mod_security (id:900001) triggered by 45.3.45.199 (IT/Italy/Lazio/Rome/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 22 11:52:43.692082 2026] [security2:error] [pid 1934693:tid 1934782] [client 45.3.45.199:61709] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: ions.gr"] [severity "CRITICAL"] [tag "security"] [hostname "ions.gr"] [uri "/wp-login.php"] [unique_id "ajj322yIwtP6yf56A0p5egAAAEE"], referer: https://ions.gr/wp-login.php show less	Port Scan
🇲🇽 octageeks.com	2026-06-22 04:06:25 (3 weeks ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇫🇷 Sklurk	2026-06-20 04:06:56 (4 weeks ago)	Web App Attack	Web App Attack
🇩🇪 iNetWorker	2026-06-19 14:48:35 (1 month ago)	trolling for resource vulnerabilities	Web App Attack
🇫🇷 ELYAZ	2026-06-19 14:29:28 (1 month ago)	(y4) Failed scan -byebye- from 45.3.45.199 (IT/Italy/-): (CF_ENABLE)	Hacking
🇬🇧 PeravixGroup	2026-06-11 01:52:13 (1 month ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-01-02 09:14:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.199 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 04:14:05.488636 2026] [security2:error] [pid 1096:tid 1096] [client 45.3.45.199:37329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fatcaverecords.com"] [uri "/wp-config.php"] [unique_id "aVeMXRNbQh8bKeg41FE55wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 stinpriza	2026-01-01 00:25:38 (6 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 13:32:51 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.199 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 08:32:42.675212 2025] [security2:error] [pid 26531:tid 26531] [client 45.3.45.199:27293] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arctic-sea.com"] [uri "/.env"] [unique_id "aTbTeqbMc0-rxmr_fVF54AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 23:41:07 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.199 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 18:41:01.396771 2025] [security2:error] [pid 18813:tid 18813] [client 45.3.45.199:53809] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greatchristianadventure.com"] [uri "/.env"] [unique_id "aTYQjdXRasHxfcGy30omJQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 19:52:07 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.199 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 14:52:03.199911 2025] [security2:error] [pid 29297:tid 29297] [client 45.3.45.199:13063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "images4themind.com"] [uri "/.svn/wc.db"] [unique_id "aTXa4y65huryYifEg54LqgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 15:31:58 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.199 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 10:31:54.832790 2025] [security2:error] [pid 11224:tid 11224] [client 45.3.45.199:17173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "usefulendeavors.org"] [uri "/.env"] [unique_id "aTWd6gEq_4elEk7cGCb99AAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 188.69.225.188

🇨🇳 122.243.79.170

🇨🇳 119.96.193.72

🇹🇼 34.81.72.185

🇺🇸 2a04:c300:400::1a1

🇺🇸 195.242.212.180

🇨🇭 34.65.13.197

🇻🇳 27.71.230.31

🇻🇳 14.224.213.222

🇯🇵 8.216.2.147

🇬🇧 2a06:4880:4000::5f

🇳🇱 195.178.110.227

🇲🇻 124.195.199.116

🇧🇩 114.130.85.36

🇮🇳 106.192.197.213

🇺🇦 62.182.86.17

🇺🇸 45.146.54.61

🇺🇸 216.180.246.173

🇲🇽 189.203.97.243

🇵🇰 182.190.217.28