JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.53.199

45.3.53.199 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.53.199

Whois 45.3.53.199

IP Abuse Reports for 45.3.53.199:

This IP address has been reported a total of 17 times from 11 distinct sources. 45.3.53.199 was first reported on October 1st 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-07-14 03:00:05 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 stinpriza	2026-07-12 04:51:29 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-08 00:03:19 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 LRob	2026-06-22 19:15:23 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-05-27 19:08:03 (2 months ago)	Known malicious PHP file or CMS probe	Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 00:49:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.53.199 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.53.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 19:49:41.697541 2026] [security2:error] [pid 452:tid 452] [client 45.3.53.199:46531] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "r-390a.net"] [uri "/.env.local"] [unique_id "aZUMpRmOUFtYQgYDKePw9wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2026-01-26 11:39:38 (6 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇲🇾 syokadmin	2025-11-12 00:43:57 (9 months ago)	45.3.53.199 (BR/Brazil/-), more than 2 Apache 403 hits in the last 3600 secs	Brute-Force
Anonymous	2025-11-02 22:24:30 (9 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:41:46	Port Scan Brute-Force Exploited Host Web App Attack
Anonymous	2025-10-26 23:02:10 (9 months ago)	wordpress-trap	Web App Attack
🇺🇸 TPI-Abuse	2025-02-24 20:29:25 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.53.199 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.53.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 24 15:29:20.163131 2025] [security2:error] [pid 3384:tid 3384] [client 45.3.53.199:38541] [client 45.3.53.199] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|varalla.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "varalla.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z7zWoCFGLH3TGFOmugXPoAAAAAE"], referer: https://varalla.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-07 00:29:30 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.53.199 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.53.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 06 19:29:23.102525 2025] [security2:error] [pid 2779836:tid 2779836] [client 45.3.53.199:46675] [client 45.3.53.199] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|arriagarealestate.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arriagarealestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z6VT46K1rZKJPiZL2n4YjgAAAAc"], referer: https://arriagarealestate.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-01 23:50:11 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.53.199 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.53.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 01 18:50:08.815795 2025] [security2:error] [pid 6430:tid 6430] [client 45.3.53.199:42021] [client 45.3.53.199] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|protonmultimedia.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "protonmultimedia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z3XUsO4ZgfP6m1anYAQcxQAAAAI"], referer: https://protonmultimedia.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-18 10:57:31 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.53.199 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.53.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 18 05:57:29.087430 2024] [security2:error] [pid 6174:tid 6174] [client 45.3.53.199:41851] [client 45.3.53.199] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|endemic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "endemic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z2KqmYUPKMoiQj4K8AEyvQAAAAU"], referer: https://endemic.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-13 03:34:55 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.53.199 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.53.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 12 22:34:48.854111 2024] [security2:error] [pid 1594041:tid 1594041] [client 45.3.53.199:40019] [client 45.3.53.199] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|webwzl.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "webwzl.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1urWBa8Zvl8ykCO3vZDAQAAAAI"], referer: https://webwzl.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.206.182.199

🇧🇷 187.49.144.147

🇳🇵 182.50.66.249

🇧🇷 179.189.196.196

🇷🇴 172.120.166.138

🇸🇪 171.25.158.87

🇧🇴 166.114.136.203

🇺🇸 162.216.150.78

🇮🇩 118.99.110.155

🇺🇸 107.173.169.201

🇧🇩 103.204.69.235

🇮🇳 103.147.248.23

🇮🇳 103.79.170.217

🇺🇸 66.132.172.187

🇸🇬 43.134.189.190

🇻🇳 42.119.87.41

🇬🇧 35.203.211.139

🇮🇩 2001:448a:c080:7487:6160:fbf9:d82:d07

🇺🇸 205.210.31.27

🇧🇷 200.204.243.202