JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.52.79

45.3.52.79 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 22%: ?

22%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.52.79

Whois 45.3.52.79

IP Abuse Reports for 45.3.52.79:

This IP address has been reported a total of 13 times from 11 distinct sources. 45.3.52.79 was first reported on November 26th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-08-23 07:12:12 (3 days ago)	(wordpress) Failed wordpress login from 45.3.52.79 (BR/Brazil/-): (CF_ENABLE)	Brute-Force
🇲🇽 octageeks.com	2026-08-22 04:24:14 (4 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 FeG Deutschland	2026-08-21 20:30:14 (4 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 LRob	2026-06-24 01:30:40 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-05-19 22:30:36 (3 months ago)	Known malicious PHP file or CMS probe	Web App Attack
🇨🇳 ThreatBook.io	2026-05-08 01:10:04 (3 months ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/45.3.52.79 2026- ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/45.3.52.79 2026-05-07 08:42:24 / 2026-05-07 08:40:39 / 2026-05-07 09:04:46 / 2026-05-07 08:43:10 / show less	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:07 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-29 05:39:20 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.79 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:39:16.188162 2025] [security2:error] [pid 7947:tid 7947] [client 45.3.52.79:13093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "habakkukent.com"] [uri "/.env"] [unique_id "aVIUBPsumL57-pt6YqY0nAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:13:51 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.79 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:13:48.004968 2025] [security2:error] [pid 5408:tid 5408] [client 45.3.52.79:28721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kwijlen.com"] [uri "/.env"] [unique_id "aVH__BawAIew84l2sp8V7QAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-02 14:06:08 (9 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:10:49	Port Scan Brute-Force Exploited Host Web App Attack
Anonymous	2025-10-16 12:27:42 (10 months ago)	WordPress Brute Force	Brute-Force
🇺🇸 TPI-Abuse	2025-01-14 23:08:39 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.52.79 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.52.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 14 18:08:33.733604 2025] [security2:error] [pid 2168270:tid 2168270] [client 45.3.52.79:34455] [client 45.3.52.79] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jsbarber.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jsbarber.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z4buceFomMV52ZoUWL4qBwAAAAQ"], referer: https://jsbarber.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ISPLtd	2024-11-26 03:45:14 (1 year ago)	Nov 25 23:45:09 SRC=45.3.52.79 PROTO=TCP SPT=55459 DPT=8443 SYN Nov 25 23:45:10 SRC=45.3.52.79 PROTO ... show more Nov 25 23:45:09 SRC=45.3.52.79 PROTO=TCP SPT=55459 DPT=8443 SYN Nov 25 23:45:10 SRC=45.3.52.79 PROTO=TCP SPT=55459 DPT=8443 SYN Nov 25 23:45:12 SRC=45.3.52.79 PROTO=TCP SPT=55459 DPT=8443 ... show less	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.211.99.18

127.0.0.1

🇳🇱 93.123.109.228

🇳🇱 89.248.165.203

🇨🇦 85.217.149.67

🇮🇩 36.64.68.99

🇺🇸 2400:cb00:119:1000:ae15:66b4:50d4:76b7

🇳🇱 185.224.128.16

🇩🇪 167.94.146.43

🇮🇩 163.7.13.17

🇫🇷 88.136.97.212

🇺🇸 85.239.151.10

🇱🇹 77.90.185.20

🇨🇳 59.172.146.83

🇳🇱 45.148.10.152

🇨🇳 43.226.39.182

🇬🇧 35.203.211.39

🇺🇸 162.255.95.225

🇫🇮 147.185.133.108

🇮🇳 106.222.207.18