JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.52.164

45.3.52.164 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 46%: ?

46%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.52.164

Whois 45.3.52.164

IP Abuse Reports for 45.3.52.164:

This IP address has been reported a total of 26 times from 15 distinct sources. 45.3.52.164 was first reported on January 10th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 thedreamer.nl	2026-08-20 01:20:36 (3 days ago)	45.3.52.164 - - [20/Aug/2026:03:19:11 +0200] "GET /.git/objects/d6/06c4e1c254ea29076931835401d23e3d0 ... show more 45.3.52.164 - - [20/Aug/2026:03:19:11 +0200] "GET /.git/objects/d6/06c4e1c254ea29076931835401d23e3d0410af HTTP/1.1" 499 0 "-" "git/2.40.0" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610" 45.3.52.164 - - [20/Aug/2026:03:19:20 +0200] "GET /.git/objects/c2/98d462d8c45bf4f54ae6960291659c2448fe59 HTTP/1.1" 499 0 "-" "git/2.40.0" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610" 45.3.52.164 - - [20/Aug/2026:03:19:20 +0200] "GET /.git/objects/38/761ed8f4aca1ba065a8447d2921242c9b9f50e HTTP/1.1" 499 0 "-" "git/2.40.0" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610" 45.3.52.164 - - [20/Aug/2026:03:19:22 +0200] "GET /.git/objects/e1/2f629f00afa0c7eefe256bd005e34351c9162c HTTP/1.1" 499 0 "-" "git/2.40.0" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-16 06:06:24 (6 days ago)	Trying to access config files	Web App Attack
🇫🇷 ELYAZ	2026-08-15 17:02:18 (1 week ago)	(wordpress) Failed wordpress login from 45.3.52.164 (BR/Brazil/-): (CF_ENABLE)	Brute-Force
🇮🇹 Progetto1	2026-08-15 11:55:06 (1 week ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇲🇽 octageeks.com	2026-08-15 04:18:47 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇮🇹 Progetto1	2026-08-13 03:15:13 (1 week ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇮🇹 VHosting	2026-08-12 04:45:04 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-08-10 16:33:59 (1 week ago)	(wordpress) Failed wordpress login from 45.3.52.164 (BR/Brazil/-): (CF_ENABLE)	Brute-Force
🇺🇸 lostswordfish.com	2026-08-10 13:26:03 (1 week ago)	Wordfence waf block on pameganslaw	Web App Attack
🇺🇸 LSPCCU	2026-08-09 07:08:13 (1 week ago)	TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: cowrie, ssh-telne ... show more TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: cowrie, ssh-telnet. Context: Attacker IP 45.3.52.164 observed using HTTP client fingerprint 'HTTP Client: git/2.40.0' 4 times when connecting to a healthcare sector honeypot between 2026-08-09 05:54 and 2026-08-09 05:54 UTC. show less	Hacking
🇺🇸 Jason Howell	2026-06-12 02:24:15 (2 months ago)	45.3.52.164 - - [11/Jun/2026:20:41:48 -0500] "GET /wp-login.php HTTP/1.1" 200 5864 "https://www.goog ... show more 45.3.52.164 - - [11/Jun/2026:20:41:48 -0500] "GET /wp-login.php HTTP/1.1" 200 5864 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.3.52.164 - - [11/Jun/2026:20:41:49 -0500] "POST /wp-login.php HTTP/1.1" 200 5966 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.3.52.164 - - [11/Jun/2026:20:41:50 -0500] "GET /wp-admin/ HTTP/1.1" 302 4188 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.3.52.164 - - [11/Jun/2026:20:41:51 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.abstractco.com%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 8026 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.3.52.164 - - [11/Jun/2026:21:24:14 -0500] "G ... show less	Web App Attack
🇱🇻 garmtech.com	2025-12-14 03:52:55 (8 months ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 10:51:18 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.164 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:51:11.316773 2025] [security2:error] [pid 6523:tid 6523] [client 45.3.52.164:50505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.haywardcarpentry.com"] [uri "/.git/HEAD"] [unique_id "aSbbnxn8oOmK8iPa8arhhQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 07:06:28 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.164 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:06:22.206126 2025] [security2:error] [pid 16824:tid 16824] [client 45.3.52.164:29935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.epicureankids.com"] [uri "/.svn/wc.db"] [unique_id "aSam7o_Bra6TGmZ2_X2yxwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:10:05 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.164 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:09:57.186111 2025] [security2:error] [pid 7203:tid 7203] [client 45.3.52.164:29205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.eissenstat.com"] [uri "/.svn/wc.db"] [unique_id "aSZhdSZedZFC6Rc1gMhipQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.152

🇺🇸 147.185.132.110

🇺🇸 103.143.231.24

🇧🇬 79.124.62.230

🇨🇿 78.44.192.210

🇩🇪 47.245.137.98

🇬🇧 35.203.210.88

🇯🇵 8.209.208.244

🇬🇧 5.252.83.186

🇫🇷 216.26.255.73

🇨🇳 203.107.24.160

🇹🇯 185.105.229.241

🇲🇴 182.93.7.194

🇸🇮 176.65.134.46

🇯🇵 170.33.80.156

🇺🇸 167.160.57.78

🇺🇸 164.92.103.99

🇹🇭 124.120.26.253

🇵🇭 118.193.72.109

🇺🇸 108.165.204.110