JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.52.125

45.3.52.125 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 50%: ?

50%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.52.125

Whois 45.3.52.125

IP Abuse Reports for 45.3.52.125:

This IP address has been reported a total of 35 times from 19 distinct sources. 45.3.52.125 was first reported on October 1st 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 it.inka	2026-08-26 02:12:27 (5 days ago)	45.3.52.125 - - [26/Aug/2026:09:07:28 +0700] "GET /bootstrap-select-1.13.0/wap/?wap=jhonbet77 HTTP/1 ... show more 45.3.52.125 - - [26/Aug/2026:09:07:28 +0700] "GET /bootstrap-select-1.13.0/wap/?wap=jhonbet77 HTTP/1.1" 403 189 "https://e-office.inka.co.id/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 YaBrowser/25.4.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 london2038.com	2026-08-24 13:29:16 (1 week ago)	Attacking WordPress 45.3.52.125 - - [24/Aug/2026:15:29:12 +0200] "POST /xmlrpc.php HTTP/1.1" 503 189 ... show more Attacking WordPress 45.3.52.125 - - [24/Aug/2026:15:29:12 +0200] "POST /xmlrpc.php HTTP/1.1" 503 18967 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" show less	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-08-24 09:07:59 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇲🇽 octageeks.com	2026-08-23 04:09:10 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 conseilgouz	2026-08-22 17:26:56 (1 week ago)	mae-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
🇮🇹 VHosting	2026-08-22 03:00:11 (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇫🇷 Sklurk	2026-08-16 01:07:07 (2 weeks ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-08-12 12:44:42 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.125 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 08:44:36.116298 2026] [security2:error] [pid 2070164:tid 2070164] [client 45.3.52.125:53237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salernospizza.com"] [uri "/.env"] [unique_id "anxqtI6BvNqImig4XkOpTQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-08-12 02:06:41 (2 weeks ago)	45.3.52.125 - - [11/Aug/2026:22:03:52 -0400] "GET /.env HTTP/1.0" 403 5761 "-" "Mozilla/5.0 (Windows ... show more 45.3.52.125 - - [11/Aug/2026:22:03:52 -0400] "GET /.env HTTP/1.0" 403 5761 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.3.52.125 - - [11/Aug/2026:22:06:31 -0400] "GET /phpinfo.php HTTP/1.0" 404 5762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.3.52.125 - - [11/Aug/2026:22:06:40 -0400] "GET /info.php HTTP/1.0" 404 5762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇵🇱 sefinek.net	2026-07-15 23:30:31 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) obsidian/1.6.5 Chrome/124.0.6367.243 Electron/30.1.2 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Jason Howell	2026-06-13 15:06:09 (2 months ago)	45.3.52.125 - - [13/Jun/2026:09:44:25 -0500] "GET /wp-login.php HTTP/1.1" 200 5865 "https://www.goog ... show more 45.3.52.125 - - [13/Jun/2026:09:44:25 -0500] "GET /wp-login.php HTTP/1.1" 200 5865 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.3.52.125 - - [13/Jun/2026:09:44:26 -0500] "POST /wp-login.php HTTP/1.1" 200 5965 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.3.52.125 - - [13/Jun/2026:09:44:27 -0500] "GET /wp-admin/ HTTP/1.1" 302 4187 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.3.52.125 - - [13/Jun/2026:09:44:35 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.abstractco.com%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 8027 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.3.52.125 - - [13/Jun/2026:10:06:09 -0500] "G ... show less	Web App Attack
Anonymous	2026-01-09 12:38:48 (7 months ago)	Malicious activity detected	Hacking Web App Attack
🇱🇻 garmtech.com	2026-01-08 18:50:16 (7 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-50.45.3.52.125.web-spammers ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-50.45.3.52.125.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-01-08 05:09:44 (7 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-09.45.3.52.125.web-spammers ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-09.45.3.52.125.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-01-06 18:22:55 (7 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-22.45.3.52.125.web-spammers ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-22.45.3.52.125.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇾 176.60.193.216

🇳🇱 164.92.221.148

🇺🇸 147.185.132.219

🇫🇷 91.196.152.113

🇵🇪 45.170.50.2

🇳🇱 45.148.10.152

🇮🇩 43.133.140.5

🇨🇳 8.146.201.206

🇨🇴 179.32.56.192

🇦🇲 178.78.176.40

🇺🇸 162.216.149.234

🇬🇧 154.16.44.77

🇺🇸 147.185.132.162

🇨🇳 116.179.32.67

🇵🇰 116.90.103.127

🇨🇮 102.207.1.114

🇺🇸 91.230.168.99

🇫🇷 91.196.152.28

🇳🇱 81.19.216.118

🇺🇸 65.111.6.191