JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.45.109

45.3.45.109 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 27%: ?

27%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.45.109

Whois 45.3.45.109

IP Abuse Reports for 45.3.45.109:

This IP address has been reported a total of 14 times from 9 distinct sources. 45.3.45.109 was first reported on December 20th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-08-18 12:05:02 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-07-29 07:00:00 (4 weeks ago)	Apache probe; attempts=18; exact paths: /xmlrpc.php	Web App Attack
🇩🇪 stinpriza	2026-07-25 06:20:42 (1 month ago)	Web App Attack	Web App Attack
🇮🇹 Francesco Ippoliti	2026-07-24 17:59:30 (1 month ago)	[Jul 24 19:59:30] NOTICE[182193] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:100@15 ... show more [Jul 24 19:59:30] NOTICE[182193] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '45.3.45.109:25150' (callid: c5a9539057df4c3eb5072dac8c09b82a) - No matching endpoint found [Jul 24 19:59:30] NOTICE[182036] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '45.3.45.109:25150' (callid: c5a9539057df4c3eb5072dac8c09b82a) - No matching endpoint found ... show less	Brute-Force Port Scan
🇩🇪 stinpriza	2026-07-23 19:28:57 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2026-07-22 12:01:12 (1 month ago)	Suspicious or malicious traffic has been detected	Web App Attack
🇫🇷 Tilellit.PRO	2026-07-13 02:38:35 (1 month ago)	WP Armour Plugin detection	Web Spam Brute-Force
🇩🇪 stinpriza	2026-07-12 05:11:04 (1 month ago)	Web App Attack	Web App Attack
🇺🇸 lostswordfish.com	2026-07-10 15:10:05 (1 month ago)	Wordfence waf block on registrymatters	Web App Attack
🇨🇴 ingentar	2026-06-21 02:50:02 (2 months ago)	2026-06-20T21:47:54.146433-05:00 web wordpress(ingentar.com)[744697]: Blocked authentication attempt ... show more 2026-06-20T21:47:54.146433-05:00 web wordpress(ingentar.com)[744697]: Blocked authentication attempt for admin from 45.3.45.109 ... show less	Web App Attack Brute-Force
🇮🇹 VHosting	2025-12-24 04:05:20 (8 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-24 08:01:04 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.109 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:00:58.861820 2025] [security2:error] [pid 27380:tid 27380] [client 45.3.45.109:40755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.penguinexpressmag.com"] [uri "/.env"] [unique_id "aSQQur00X9bzKTRY3hF_OgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:40:52 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.45.109 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.45.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:40:43.944479 2025] [security2:error] [pid 23710:tid 23710] [client 45.3.45.109:15051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.barkdull.org"] [uri "/.env"] [unique_id "aSQL-xCZxFkNgES4Iw2L3wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-20 05:46:16 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.45.109 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.45.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 20 00:46:09.729880 2024] [security2:error] [pid 7359:tid 7359] [client 45.3.45.109:45491] [client 45.3.45.109] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|scrase.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "scrase.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z2UEoU9cfI2JgiTHtIkCOwAAAAY"], referer: https://scrase.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.94

🇳🇱 45.148.10.151

🇳🇱 185.242.226.126

🇨🇴 181.129.41.162

🇳🇱 172.94.9.55

🇨🇳 118.145.237.239

🇨🇳 101.89.141.184

🇨🇦 85.217.149.68

🇺🇸 52.21.227.35

🇫🇷 51.83.127.189

🇳🇱 45.148.10.240

🇩🇪 2a00:17d8:100::2261

🇺🇸 216.73.217.68

🇦🇷 186.158.183.66

🇺🇸 162.159.106.156

🇺🇸 91.230.168.234

🇺🇸 68.183.18.188

🇻🇳 42.96.19.37

🇹🇼 34.80.233.4

🇮🇳 4.224.40.94