JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.55.15

45.3.55.15 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 33%: ?

33%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.55.15

Whois 45.3.55.15

IP Abuse Reports for 45.3.55.15:

This IP address has been reported a total of 40 times from 17 distinct sources. 45.3.55.15 was first reported on October 2nd 2024, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Francesco Ippoliti	2026-07-03 23:11:24 (1 minute ago)	[Jul 4 01:11:23] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:999@154 ... show more [Jul 4 01:11:23] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '45.3.55.15:34461' (callid: 6fc0b609423a3c66327eb76dfc47309a) - No matching endpoint found [Jul 4 01:11:23] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '45.3.55.15:34461' (callid: 6fc0b609423a3c66327eb76dfc47309a) - No matching endpoint found ... show less	Brute-Force Port Scan
🇫🇮 sgofferj	2026-07-03 20:44:11 (2 hours ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇫🇷 ELYAZ	2026-07-03 09:24:15 (13 hours ago)	(y4) Failed scan -byebye- from 45.3.55.15 (DE/Germany/-): (CF_ENABLE)	Hacking
🇲🇹 Malta	2026-07-02 08:10:57 (1 day ago)	45.3.55.15 - - [02/Jul/2026:10:10:57 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 1 ... show more 45.3.55.15 - - [02/Jul/2026:10:10:57 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" show less	Hacking Web App Attack
🇫🇷 Sklurk	2026-06-23 03:56:45 (1 week ago)	Web App Attack	Web App Attack
🇺🇸 ambor	2026-03-23 18:38:10 (3 months ago)	Repeat spam attempt from blocked email [email protected] via tcpdata.com contact form. Atte ... show more Repeat spam attempt from blocked email [email protected] via tcpdata.com contact form. Attempt #5. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68. Timestamp: 2026-03-23T18:38:10.528Z show less	Web Spam
🇺🇸 TPI-Abuse	2026-02-15 12:27:28 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.55.15 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.55.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:27:01.463611 2026] [security2:error] [pid 19297:tid 19297] [client 45.3.55.15:38497] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "templehistorical.org"] [uri "/.env.save"] [unique_id "aZG7lddd9ZCqlkiW5jWd5QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-02-15 06:13:29 (4 months ago)	12 attacks on env grabbing URLs, password grabbing URLs, VC URLs: GET /config/.env HTTP/1.1 GET /.aw ... show more 12 attacks on env grabbing URLs, password grabbing URLs, VC URLs: GET /config/.env HTTP/1.1 GET /.aws/credentials HTTP/1.1 GET /api/.git/config HTTP/1.1 show less	Hacking
🇺🇸 TPI-Abuse	2026-02-15 06:05:09 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.55.15 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.55.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:05:02.926565 2026] [security2:error] [pid 877108:tid 877108] [client 45.3.55.15:60309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sykesclan.com"] [uri "/.env.staging"] [unique_id "aZFiDkyQqZBZcr1vz_DNZAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 05:34:48 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.55.15 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.55.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:34:45.714260 2026] [security2:error] [pid 26672:tid 26672] [client 45.3.55.15:41235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "susansambou.org"] [uri "/dev/.git/config"] [unique_id "aZFa9dtaSOweQceelMCHFQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 04:44:25 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.55.15 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.55.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:44:19.411436 2026] [security2:error] [pid 9352:tid 9352] [client 45.3.55.15:38055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "styxfreeworld.com"] [uri "/admin/.env"] [unique_id "aZFPI-ssIOUFDmWp-kbtlwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 03:51:35 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.55.15 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.55.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:51:31.722494 2026] [security2:error] [pid 27148:tid 27148] [client 45.3.55.15:18823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stewhist.org"] [uri "/api/.env"] [unique_id "aZFCw8aPk6qDlyNUt7kQJAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-15 03:05:48 (4 months ago)	Scanning/Probing (25)	Brute-Force Web App Attack
🇷🇴 INTEQ	2026-02-15 02:32:23 (4 months ago)	Web attack from 45.3.55.15	Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 02:28:22 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.55.15 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.55.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 21:28:14.960771 2026] [security2:error] [pid 18879:tid 18879] [client 45.3.55.15:52309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spiht.com"] [uri "/admin/.git/config"] [unique_id "aZEvPigMKxcGl27_6t0FkQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.73

🇺🇾 179.27.99.9

🇮🇳 136.232.11.10

🇺🇸 45.156.129.156

🇦🇺 27.32.40.37

🇫🇷 213.32.68.85

🇵🇱 145.239.81.31

🇸🇬 129.212.237.153

🇺🇸 62.132.18.53

🇺🇸 45.74.252.103

🇺🇸 44.252.135.77

🇵🇰 223.123.65.97

🇵🇱 217.182.73.60

🇿🇦 185.132.186.67

🇵🇱 178.219.105.156

🇮🇩 157.10.182.14

🇫🇷 141.94.94.40

🇨🇳 117.33.242.180

🇺🇸 107.150.110.199

🇬🇧 57.129.139.88