JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.47.187

45.3.47.187 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 16%: ?

16%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.47.187

Whois 45.3.47.187

IP Abuse Reports for 45.3.47.187:

This IP address has been reported a total of 31 times from 18 distinct sources. 45.3.47.187 was first reported on November 4th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 07:00:00 (4 weeks ago)	Apache probe; attempts=23; exact paths: /xmlrpc.php	Web App Attack
Anonymous	2026-07-23 06:38:37 (1 month ago)	WordPress Brute Force	Brute-Force
🇩🇪 stinpriza	2026-07-12 04:55:03 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 FeG Deutschland	2026-07-11 22:24:17 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇬🇧 PeravixGroup	2026-05-22 11:32:18 (3 months ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇨🇳 ThreatBook.io	2026-04-21 01:02:12 (4 months ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/45.3.47.187 2026 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/45.3.47.187 2026-04-20 05:12:45 /news/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) 2026-04-20 07:40:50 /druid/index.html show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-02 01:37:25 (5 months ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/45.3.47.187 2026 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/45.3.47.187 2026-03-01 07:18:38 /fang/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-02-15 00:30:10 (6 months ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/45.3.47.187 2026 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/45.3.47.187 2026-02-14 14:28:38 /config/DataSetConfig%23.xml show less	Web App Attack
🇩🇪 F242	2026-01-30 05:23:46 (6 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇪🇸 10dencehispahard SL	2026-01-26 11:33:20 (7 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-01-19 03:21:14 (7 months ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/45.3.47.187 2026 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/45.3.47.187 2026-01-18 04:51:24 /v1/cs/configs?search=accurate&dataId=&group=&appName=&config_tags=&pageNo=1&pageSize=999&tenant= show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-13 01:56:09 (7 months ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/45.3.47.187 2026 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/45.3.47.187 2026-01-12 08:07:19 / 2026-01-12 08:07:19 / show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-28 00:43:54 (8 months ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/45.3.47.187 2025 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/45.3.47.187 2025-12-27 11:40:47 /93xoVGzfjz.html 2025-12-27 11:40:50 /bitrix/redirect.php?goto=https://39.129.113.77%[email protected]/ 2025-12-27 11:40:44 /adminer-4.2.5-mysql.php 2025-12-27 11:40:43 /jkstatus;a 2025-12-27 11:40:46 /adminer-4.5.0-mysql-en.php 2025-12-27 11:40:47 /adminer-4.6.2-mysql.php 2025-12-27 11:51:19 /cubecart 2025-12-27 11:40:48 /appliance/login.ns?login%5Bpassword%5D=acxtest%22%3E%3Ckbawgxjlgw%3E&login%5Buse_curr%5D=1&login%5Bsubmit%5D=Change%20Password show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:30:36 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.47.187 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.47.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:30:21.485174 2025] [security2:error] [pid 4889:tid 4889] [client 45.3.47.187:44933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.artichokedesign.net"] [uri "/.env"] [unique_id "aSQlrfKq3a7jbjIojMhh5QAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:03:06 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.47.187 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.47.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:02:58.861974 2025] [security2:error] [pid 31046:tid 31046] [client 45.3.47.187:49483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rosetina.com"] [uri "/.env"] [unique_id "aSQfQkx2hRvToeQaAWkdqQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 217.179.7.82

🇺🇸 129.121.75.215

🇮🇳 122.166.154.21

🇫🇷 91.196.152.21

🇺🇸 52.27.146.57

🇺🇸 44.211.73.79

🇺🇸 40.77.167.21

🇺🇸 20.80.75.177

🇮🇱 176.228.28.28

🇺🇸 162.216.150.250

🇮🇳 123.253.162.254

🇸🇬 43.134.94.96

🇫🇷 2a01:7a7:2:418a:7ec2:55ff:fead:c860

🇧🇪 198.235.24.215

🇺🇸 172.245.157.165

🇺🇸 134.195.210.168

🇮🇳 103.216.145.2

🇨🇳 101.96.192.88

🇷🇴 92.118.39.14

🇩🇿 41.111.172.25