JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.53.57

45.3.53.57 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 44%: ?

44%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.53.57

Whois 45.3.53.57

IP Abuse Reports for 45.3.53.57:

This IP address has been reported a total of 27 times from 13 distinct sources. 45.3.53.57 was first reported on November 16th 2024, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-20 00:10:40 (4 hours ago)	Web App Attack	Web App Attack
Anonymous	2026-06-19 05:55:25 (22 hours ago)	45.3.53.57 - - [19/Jun/2026:13:55:25 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Wi ... show more 45.3.53.57 - - [19/Jun/2026:13:55:25 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-06-17 05:08:04 (2 days ago)	Wordfence waf block on restore georgia	Web App Attack
🇫🇷 ELYAZ	2026-06-17 02:03:15 (3 days ago)	(y4) Failed scan -byebye- from 45.3.53.57 (BR/Brazil/-): (CF_ENABLE)	Hacking
🇫🇷 ELYAZ	2026-06-15 20:13:46 (4 days ago)	(y4) Failed scan -byebye- from 45.3.53.57 (BR/Brazil/-): (CF_ENABLE)	Hacking
🇦🇹 neo72	2026-06-14 07:29:10 (5 days ago)	Detected malicious activity - bulk block	Brute-Force Web App Attack
Anonymous	2026-06-13 08:22:50 (6 days ago)	[server.tmg.gr] httpd-login-spray-site: sites=hacm.gr; logs=/var/log/httpd/domains/hacm.gr.log; samp ... show more [server.tmg.gr] httpd-login-spray-site: sites=hacm.gr; logs=/var/log/httpd/domains/hacm.gr.log; samples=site_wide=true \| distinct_ips=20 \| /wp-login.php show less	Hacking Web App Attack
🇫🇷 pm33	2026-06-12 14:07:10 (1 week ago)	Wordpress login attempts	Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 05:25:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.53.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.53.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:25:43.891659 2025] [security2:error] [pid 20893:tid 20893] [client 45.3.53.57:52025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.needtoorderprinting.com"] [uri "/.svn/wc.db"] [unique_id "aSaPV9qhH7AFuKdrHF2PIwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:51:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.53.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.53.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:51:38.217894 2025] [security2:error] [pid 30007:tid 30007] [client 45.3.53.57:34023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.portelizabeth.jbaycabs.com"] [uri "/.git/HEAD"] [unique_id "aSZdKrSVZMxoiFgKKTwVbwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:27:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.53.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.53.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:27:38.722631 2025] [security2:error] [pid 31244:tid 31244] [client 45.3.53.57:18473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cienmalos.hodlmoser.com"] [uri "/.env"] [unique_id "aSZXioA_xdaElK3jX8r3hgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:43:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.53.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.53.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:43:28.717777 2025] [security2:error] [pid 31252:tid 31252] [client 45.3.53.57:35567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.stucohen.com"] [uri "/.env"] [unique_id "aSZNMCOoIu5_rw1_NdDD7gAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:02:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.53.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.53.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:02:21.461577 2025] [security2:error] [pid 4311:tid 4327] [client 45.3.53.57:50441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.lzmarketingsolutions.com"] [uri "/.env"] [unique_id "aSUAHaO7-HhXDlACxWpBowAAAIM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:55:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.53.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.53.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:55:54.897869 2025] [security2:error] [pid 13009:tid 13009] [client 45.3.53.57:55155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.gisur.com"] [uri "/.svn/wc.db"] [unique_id "aSQrqk4EkF-aA0sdSEBUuQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:16:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.53.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.53.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:16:04.129695 2025] [security2:error] [pid 8953:tid 8953] [client 45.3.53.57:39817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.visionremota.info"] [uri "/.git/HEAD"] [unique_id "aSQiVBwmZaOyQXN-Ep2hSgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 193.124.20.250

🇩🇪 172.253.1.208

🇨🇳 106.111.222.196

🇨🇳 43.226.36.171

🇨🇳 139.198.5.147

🇻🇳 125.212.217.143

🇨🇳 116.228.58.100

🇨🇳 116.179.32.196

🇯🇵 111.238.174.6

🇨🇳 111.77.115.116

🇳🇱 91.92.40.25

🇱🇹 81.30.98.62

🇳🇱 45.156.87.253

🇸🇬 43.134.74.12

🇨🇦 216.26.234.43

🇲🇽 187.190.35.163

🇳🇱 185.213.174.141

🇺🇸 185.98.170.34

🇷🇸 185.82.111.26

🇩🇪 172.71.144.104