JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.45.54

45.3.45.54 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 27%: ?

27%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.45.54

Whois 45.3.45.54

IP Abuse Reports for 45.3.45.54:

This IP address has been reported a total of 13 times from 9 distinct sources. 45.3.45.54 was first reported on October 19th 2024, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-09 14:46:16 (3 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇺🇸 lostswordfish.com	2026-07-09 10:38:03 (7 hours ago)	Wordfence waf block on robdarnell	Web App Attack
🇩🇪 big-cloud.nl	2026-06-25 10:31:49 (2 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 LRob	2026-06-23 14:00:14 (2 weeks ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-06-19 11:30:04 (2 weeks ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-06-14 21:15:13 (3 weeks ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-07 13:30:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 07 08:30:14.126355 2026] [security2:error] [pid 30304:tid 30304] [client 45.3.45.54:49495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darkestdaysclan.com"] [uri "/.git/HEAD"] [unique_id "aV5f5iBeEEPIN5cpBcBK3QAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-05 20:12:11 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-08 11:30:23 (7 months ago)	botnet	DDoS Attack
🇺🇸 hostseries	2025-03-05 18:36:20 (1 year ago)	Brute-force cPanel Services	Brute-Force
🇺🇸 TPI-Abuse	2025-02-15 03:43:23 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.45.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.45.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 14 22:43:18.640649 2025] [security2:error] [pid 2171:tid 2171] [client 45.3.45.54:53625] [client 45.3.45.54] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|beautyradio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "beautyradio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z7ANVlU63t9JdX-mecZVswAAAAA"], referer: https://beautyradio.com show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 afleventoffice.com.au	2024-11-25 06:41:42 (1 year ago)	GET /wp-json/wp/v2/users HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2024-10-19 03:30:39 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.45.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.45.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 18 23:30:32.168592 2024] [security2:error] [pid 16601:tid 16601] [client 45.3.45.54:36005] [client 45.3.45.54] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|vigants.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vigants.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZxMn2GrAUxcf8_QToDXBhQAAAA4"], referer: https://vigants.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.242.3.195

🇺🇸 148.153.53.182

🇨🇳 36.106.167.114

🇸🇬 8.219.76.182

🇺🇸 216.126.224.33

🇩🇪 168.222.43.22

🇫🇮 147.185.133.247

🇫🇷 92.205.28.187

🇷🇴 80.94.92.179

🇫🇷 77.237.239.89

🇺🇸 66.132.195.30

🇺🇸 37.140.223.22

🇨🇳 14.103.127.32

🇺🇸 2607:f8b0:4001:c24::122

🇰🇷 222.239.251.12

🇹🇼 221.120.78.177

🇩🇪 194.88.98.99

🇺🇸 173.239.240.11

🇭🇰 103.203.56.0

🇮🇷 81.12.5.183