JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.52.164

45.3.52.164

Activity Trending Down

26 reports found in our database

40% ▼ ▼ ▼ Elevated

Abuse confidence score ?

ISP

3xK Tech GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS200373

Domain Name

3xktech.cloud

Country

🇨🇦 Canada

City

Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 45.3.52.164:

This IP address has been reported a total of 26 times from 15 distinct sources. 45.3.52.164 was first reported on January 10th 2025, and the most recent report was 1 week ago. In the last 60 days, the top reporter locations were: France with 3 reports; Italy with 3 reports; United States of America with 2 reports. The most common categories in these recent reports were: Web App Attack 7 times; Brute-Force 4 times; Bad Web Bot 3 times; Exploited Host 2 times; Hacking 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 thedreamer.nl	2026-08-20 01:20:36 (1 week ago)	45.3.52.164 - - [20/Aug/2026:03:19:11 +0200] "GET /.git/objects/d6/06c4e1c254ea29076931835401d23e3d0 ... show more 45.3.52.164 - - [20/Aug/2026:03:19:11 +0200] "GET /.git/objects/d6/06c4e1c254ea29076931835401d23e3d0410af HTTP/1.1" 499 0 "-" "git/2.40.0" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610" 45.3.52.164 - - [20/Aug/2026:03:19:20 +0200] "GET /.git/objects/c2/98d462d8c45bf4f54ae6960291659c2448fe59 HTTP/1.1" 499 0 "-" "git/2.40.0" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610" 45.3.52.164 - - [20/Aug/2026:03:19:20 +0200] "GET /.git/objects/38/761ed8f4aca1ba065a8447d2921242c9b9f50e HTTP/1.1" 499 0 "-" "git/2.40.0" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610" 45.3.52.164 - - [20/Aug/2026:03:19:22 +0200] "GET /.git/objects/e1/2f629f00afa0c7eefe256bd005e34351c9162c HTTP/1.1" 499 0 "-" "git/2.40.0" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-16 06:06:24 (1 week ago)	Trying to access config files	Web App Attack
🇫🇷 ELYAZ	2026-08-15 17:02:18 (2 weeks ago)	(wordpress) Failed wordpress login from 45.3.52.164 (BR/Brazil/-): (CF_ENABLE)	Brute-Force
🇮🇹 Progetto1	2026-08-15 11:55:06 (2 weeks ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇲🇽 octageeks.com	2026-08-15 04:18:47 (2 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇮🇹 Progetto1	2026-08-13 03:15:13 (2 weeks ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇮🇹 VHosting	2026-08-12 04:45:04 (2 weeks ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-08-10 16:33:59 (2 weeks ago)	(wordpress) Failed wordpress login from 45.3.52.164 (BR/Brazil/-): (CF_ENABLE)	Brute-Force
🇺🇸 lostswordfish.com	2026-08-10 13:26:03 (2 weeks ago)	Wordfence waf block on pameganslaw	Web App Attack
🇺🇸 LSPCCU	2026-08-09 07:08:13 (2 weeks ago)	TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: cowrie, ssh-telne ... show more TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: cowrie, ssh-telnet. Context: Attacker IP 45.3.52.164 observed using HTTP client fingerprint 'HTTP Client: git/2.40.0' 4 times when connecting to a healthcare sector honeypot between 2026-08-09 05:54 and 2026-08-09 05:54 UTC. show less	Hacking
🇺🇸 Jason Howell	2026-06-12 02:24:15 (2 months ago)	45.3.52.164 - - [11/Jun/2026:20:41:48 -0500] "GET /wp-login.php HTTP/1.1" 200 5864 "https://www.goog ... show more 45.3.52.164 - - [11/Jun/2026:20:41:48 -0500] "GET /wp-login.php HTTP/1.1" 200 5864 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.3.52.164 - - [11/Jun/2026:20:41:49 -0500] "POST /wp-login.php HTTP/1.1" 200 5966 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.3.52.164 - - [11/Jun/2026:20:41:50 -0500] "GET /wp-admin/ HTTP/1.1" 302 4188 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.3.52.164 - - [11/Jun/2026:20:41:51 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.abstractco.com%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 8026 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.3.52.164 - - [11/Jun/2026:21:24:14 -0500] "G ... show less	Web App Attack
🇱🇻 garmtech.com	2025-12-14 03:52:55 (8 months ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 10:51:18 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.164 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:51:11.316773 2025] [security2:error] [pid 6523:tid 6523] [client 45.3.52.164:50505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.haywardcarpentry.com"] [uri "/.git/HEAD"] [unique_id "aSbbnxn8oOmK8iPa8arhhQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 07:06:28 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.164 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:06:22.206126 2025] [security2:error] [pid 16824:tid 16824] [client 45.3.52.164:29935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.epicureankids.com"] [uri "/.svn/wc.db"] [unique_id "aSam7o_Bra6TGmZ2_X2yxwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:10:05 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.164 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:09:57.186111 2025] [security2:error] [pid 7203:tid 7203] [client 45.3.52.164:29205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.eissenstat.com"] [uri "/.svn/wc.db"] [unique_id "aSZhdSZedZFC6Rc1gMhipQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 115.84.178.56

🇸🇬 103.187.147.0

🇩🇪 85.190.101.248

🇨🇳 218.95.73.31

🇨🇳 218.94.115.164

🇨🇳 211.155.100.9

🇹🇳 196.179.87.103

🇳🇱 192.253.248.229

🇺🇸 162.158.158.140

🇯🇵 104.46.209.135

🇺🇸 71.194.253.58

🇯🇲 67.230.61.181

🇬🇧 45.133.173.232

🇨🇳 218.92.244.10

🇨🇳 218.92.201.254

🇸🇪 217.211.208.125

🇦🇺 210.0.90.82

🇺🇸 192.178.115.215

🇦🇪 165.154.12.38

🇫🇮 147.185.133.212