JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.54.0

45.3.54.0 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 16%: ?

16%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.54.0

Whois 45.3.54.0

IP Abuse Reports for 45.3.54.0:

This IP address has been reported a total of 15 times from 9 distinct sources. 45.3.54.0 was first reported on October 18th 2024, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-09 01:09:33 (10 hours ago)	Web App Attack	Web App Attack
🇩🇪 Hazzard	2026-05-23 17:14:58 (1 month ago)	(wordpress) Failed wordpress login from 45.3.54.0 (GB/United Kingdom/England/City of London/-/[redac ... show more (wordpress) Failed wordpress login from 45.3.54.0 (GB/United Kingdom/England/City of London/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇫🇷 pm33	2026-05-23 04:38:13 (1 month ago)	Wordpress login attempts	Brute-Force
🇺🇸 TPI-Abuse	2026-01-17 01:37:13 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.54.0 (-): 1 in the last 300 secs; Ports: * ... show more (mod_security) mod_security (id:210492) triggered by 45.3.54.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 20:37:08.287109 2026] [security2:error] [pid 1817659:tid 1817659] [client 45.3.54.0:23017] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.consultoresasociadosdeca.com"] [uri "/.env"] [unique_id "aWrnxISOvqAvmllsHXIrBwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-16 01:58:49 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 45.3.54.0 (-): 1 in the last 300 secs; Ports: * ... show more (mod_security) mod_security (id:210730) triggered by 45.3.54.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 20:58:45.399328 2026] [security2:error] [pid 2262:tid 2262] [client 45.3.54.0:50621] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|sandiegoautostarsmog.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sandiegoautostarsmog.com"] [uri "/s3cmd.ini"] [unique_id "aWmbVQ3UG6bUwtV4vsSs8gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-01-15 08:39:04 (5 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2025-11-29 01:03:32 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.54.0 (-): 1 in the last 300 secs; Ports: * ... show more (mod_security) mod_security (id:210492) triggered by 45.3.54.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 20:03:24.835436 2025] [security2:error] [pid 27189:tid 27189] [client 45.3.54.0:10521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abramson-offner.com"] [uri "/.env.production"] [unique_id "aSpGXK5weCzcptjUY6MLSAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-29 00:45:58 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.54.0 (-): 1 in the last 300 secs; Ports: * ... show more (mod_security) mod_security (id:210492) triggered by 45.3.54.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 19:45:54.515209 2025] [security2:error] [pid 9621:tid 9621] [client 45.3.54.0:30711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aboutio.com"] [uri "/.git/config"] [unique_id "aSpCQn31ZtaZKOtgerjkOwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 london2038.com	2025-10-26 05:25:40 (8 months ago)	Detected by WP fail2ban 2025-10-26T06:25:39.728922+01:00 wordpress: Authentication attempt from 45.3 ... show more Detected by WP fail2ban 2025-10-26T06:25:39.728922+01:00 wordpress: Authentication attempt from 45.3.54.0 show less	Brute-Force Web App Attack
Anonymous	2025-10-16 12:49:52 (8 months ago)	WordPress Brute Force	Brute-Force
🇺🇸 PulseServers	2024-11-10 00:52:34 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS1 ... show less	DDoS Attack Exploited Host
🇺🇸 PulseServers	2024-11-09 03:23:03 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS2 ... show less	DDoS Attack Exploited Host
🇺🇸 PulseServers	2024-11-08 00:44:32 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS2 ... show less	DDoS Attack Exploited Host
🇺🇸 PulseServers	2024-11-04 05:04:10 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS2 ... show less	DDoS Attack Exploited Host
Anonymous	2024-10-18 09:31:49 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 104.28.162.55

🇳🇱 91.92.42.34

🇷🇺 77.66.192.139

🇬🇧 35.203.210.105

🇳🇱 217.60.195.2

🇧🇷 186.215.245.175

🇺🇸 172.71.31.195

🇬🇧 78.153.140.250

🇺🇸 3.143.169.150

🇺🇸 178.130.47.49

🇩🇪 164.92.228.62

🇸🇬 128.199.225.7

🇵🇰 103.164.9.74

🇺🇸 91.230.168.214

🇺🇸 78.138.55.130

🇺🇸 68.192.194.89

🇨🇳 61.145.177.151

🇷🇺 46.188.119.26

🇮🇩 27.123.220.136

🇻🇳 27.66.98.209