JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.46.138

45.3.46.138 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 19%: ?

19%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.46.138

Whois 45.3.46.138

IP Abuse Reports for 45.3.46.138:

This IP address has been reported a total of 21 times from 15 distinct sources. 45.3.46.138 was first reported on October 1st 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-09-14 23:53:28 (5 days ago)	[TueSep1501:53:21.1452502026][security2:error][pid2588669:tid2588884][client45.3.46.138:0]ModSecurit ... show more [TueSep1501:53:21.1452502026][security2:error][pid2588669:tid2588884][client45.3.46.138:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mail.rssolution.ch\"][uri\"/xmlrpc.php\"][unique_id\"aqiI8b6HTyrqW-9g5_DEMAAAAME\"] show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-09-12 10:39:23 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇫🇷 Sklurk	2026-08-14 09:13:43 (1 month ago)	Web App Attack	Web App Attack
🇱🇻 garmtech.com	2026-03-29 23:11:44 (5 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-11.45.3.46.138.web-spammers ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-11.45.3.46.138.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-03-20 09:15:25 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 11-15.45.3.46.138.web-spammers ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 11-15.45.3.46.138.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 mind5t0rm	2026-01-26 02:30:18 (7 months ago)	(WPLOGIN) WP Login Attack 45.3.46.138 (CA/Canada/-): 3 in the last 3600 secs; Ports: ; Direction: i ... show more (WPLOGIN) WP Login Attack 45.3.46.138 (CA/Canada/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.3.46.138 - - [26/Jan/2026:09:30:00 +0700] "GET /wp-login.php HTTP/2.0" 200 2469 "-" "Wget/1.21.4" 45.3.46.138 - - [26/Jan/2026:09:30:11 +0700] "POST /wp-login.php HTTP/2.0" 302 0 "https://www.zerowaterthailand.com/wp-login.php" "Wget/1.21.4" 45.3.46.138 - - [26/Jan/2026:09:30:17 +0700] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.zerowaterthailand.com%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 2464 "https://www.zerowaterthailand.com/wp-admin/" "Wget/1.21.4" show less	Port Scan
🇳🇱 applemooz	2026-01-20 23:53:04 (7 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇺🇸 myagent.site	2026-01-20 14:06:37 (7 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇮🇳 Altis Shield	2025-12-01 08:45:15 (9 months ago)	Connection closed by 45.3.46.138 [preauth] or weird packet	Brute-Force SSH
🇵🇱 sefinek.net	2025-11-28 06:47:53 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Xbox; Xbox One) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edge/44.18363.8131 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-24 09:28:04 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.46.138 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.46.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:27:54.153893 2025] [security2:error] [pid 653:tid 653] [client 45.3.46.138:11779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "warbonnetmusic.tremulant.com"] [uri "/.svn/wc.db"] [unique_id "aSQlGh92UB6EE-LXKoIB_gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:17:08 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.46.138 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.46.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:16:58.422409 2025] [security2:error] [pid 2058:tid 2058] [client 45.3.46.138:55891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.love-n-promises.com"] [uri "/.svn/wc.db"] [unique_id "aSQGatPEKFgJpB4zsZW6kgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:56:08 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.46.138 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.46.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:55:59.628829 2025] [security2:error] [pid 24234:tid 24234] [client 45.3.46.138:29767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.allisonokon.com"] [uri "/.svn/wc.db"] [unique_id "aSPlX39ZtoHERNvmO_pAgwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-11-22 13:07:12 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-11-03 18:24:00 (10 months ago)	Unauthorized connection attempt	Brute-Force

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.161.118.46

🇺🇸 184.105.247.215

🇺🇸 184.105.247.195

🇺🇸 172.96.182.111

🇯🇵 165.154.241.44

🇷🇴 92.118.39.225

🇲🇾 85.211.245.141

🇺🇸 68.183.113.3

🇮🇶 62.201.212.54

🇬🇧 2a06:4882:7000::82

🇦🇷 201.176.230.20

🇧🇷 186.238.242.194

🇨🇳 182.100.145.185

🇭🇰 156.225.1.98

🇩🇪 139.59.133.58

🇺🇸 135.237.122.43

🇻🇳 113.163.202.114

🇺🇸 109.105.210.63

🇨🇳 106.117.105.24

🇺🇸 100.50.94.209