JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.46.250

45.3.46.250 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.46.250

Whois 45.3.46.250

IP Abuse Reports for 45.3.46.250:

This IP address has been reported a total of 40 times from 16 distinct sources. 45.3.46.250 was first reported on October 21st 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-05-12 21:50:15 (3 weeks ago)	Kingcopy(AI-IDS):IP does Multiple AWS Environment Abuse	Hacking Web App Attack
🇨🇭 4server	2026-05-03 19:39:03 (1 month ago)	[SunMay0321:38:59.8011392026][security2:error][pid1881300:tid1881582][client45.3.46.250:0]ModSecurit ... show more [SunMay0321:38:59.8011392026][security2:error][pid1881300:tid1881582][client45.3.46.250:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"swiss-web-hosting.ch\"][uri\"/\"][unique_id\"afekU5s9ujedfhdzSNBKggAAAQ0\"] show less	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-30 22:09:21 (1 month ago)	Auto-ban: >3000 req/min op 2026-04-30	Web App Attack SSH Hacking
🇳🇱 jjnxpct	2026-04-30 03:49:14 (1 month ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.aws/credentials (Rule ID: 930130) - Restricted File Access Attempt show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-02-20 09:23:51 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 45.3.46.250 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.46.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 04:23:47.266785 2026] [security2:error] [pid 27823:tid 27823] [client 45.3.46.250:17043] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|darkstarsystems.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "darkstarsystems.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZgoI56-pXFo5Cv-XkQNhwAAAB0"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-05 20:11:43 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇧🇷 hostseries	2025-12-24 06:39:27 (5 months ago)	Trigger: LF_DISTATTACK	Brute-Force
🇬🇧 openstrike.co.uk	2025-12-10 08:48:34 (5 months ago)	9 packets to port 2083	Port Scan
🇱🇹 NotACaptcha	2025-11-26 20:03:43 (6 months ago)	webserver:80 [26/Nov/2025] "GET /.env HTTP/1.1" 302 459 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X ... show more webserver:80 [26/Nov/2025] "GET /.env HTTP/1.1" 302 459 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 09:35:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.46.250 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.46.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:35:49.648435 2025] [security2:error] [pid 10716:tid 10716] [client 45.3.46.250:50151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.yourbrandhere.com"] [uri "/.git/HEAD"] [unique_id "aSbJ9WbFoF_nnW4k-EW7MAAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:14:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.46.250 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.46.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:14:13.489060 2025] [security2:error] [pid 8796:tid 8796] [client 45.3.46.250:28665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.neilvboyer.com"] [uri "/.git/HEAD"] [unique_id "aSZideNX5e70eRQ4i8PddgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:12:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.46.250 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.46.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:12:12.474605 2025] [security2:error] [pid 27547:tid 27547] [client 45.3.46.250:34837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.veracurnow.com"] [uri "/.svn/wc.db"] [unique_id "aSVIvLmRCBIDwAkBES9rxwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:44:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.46.250 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.46.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:44:03.529640 2025] [security2:error] [pid 17777:tid 17777] [client 45.3.46.250:46045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.eran.construction"] [uri "/.env"] [unique_id "aSVCIyaKwU-GbjFmfF3f-gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:02:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.46.250 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.46.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:02:07.085438 2025] [security2:error] [pid 14859:tid 14859] [client 45.3.46.250:15773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.openhouses.iainrealtor.com"] [uri "/.git/HEAD"] [unique_id "aSU4T6oCjb3ADTjGHWvqSgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:36:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.46.250 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.46.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:36:26.665565 2025] [security2:error] [pid 14659:tid 14659] [client 45.3.46.250:28097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tyllo.title26.com"] [uri "/.svn/wc.db"] [unique_id "aST6ChpddiFeGDlDAdhCdgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 104.23.221.173

🇩🇪 213.209.159.11

🇹🇼 198.235.24.122

🇩🇪 167.94.146.64

🇨🇳 118.195.163.19

🇨🇳 106.13.122.198

🇩🇪 69.5.169.130

🇺🇸 64.23.131.174

🇪🇬 62.193.91.121

🇬🇧 45.82.76.117

🇺🇸 43.166.137.151

🇬🇧 195.250.23.247

🇳🇱 176.65.139.41

🇺🇸 172.233.219.44

🇺🇸 147.185.132.167

🇮🇳 122.187.229.220

🇵🇱 95.214.53.196

🇮🇪 52.51.176.122

🇧🇷 45.205.1.71

🇫🇮 31.76.51.127