JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.37.152

45.3.37.152 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 16%: ?

16%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.37.152

Whois 45.3.37.152

IP Abuse Reports for 45.3.37.152:

This IP address has been reported a total of 30 times from 15 distinct sources. 45.3.37.152 was first reported on September 29th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-08-08 03:17:24 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-30 01:49:08 (3 weeks ago)	Web App Attack	Web App Attack
Anonymous	2026-07-05 20:45:23 (1 month ago)	B: f2b asterisk aggressive 3x	Email Spam
🇮🇹 Francesco Ippoliti	2026-07-05 03:24:09 (1 month ago)	[Jul 5 05:24:08] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:500@154 ... show more [Jul 5 05:24:08] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '45.3.37.152:16534' (callid: 02da497a15d54d0e4891b39ae4d8e711) - No matching endpoint found ... show less	Brute-Force Port Scan
🇫🇮 sgofferj	2026-07-03 22:54:00 (1 month ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇨🇭 backslash	2026-05-23 05:12:13 (3 months ago)		Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-24 03:10:10 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.37.152 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.37.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 22:10:04.759547 2026] [security2:error] [pid 11026:tid 11062] [client 45.3.37.152:63527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bitcoin.brucejoell.com"] [uri "/.git/config"] [unique_id "aZ0WjEmGxd_Hyj4vqAtATwAAANY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-02-23 10:08:43 (6 months ago)	45.3.37.152 - - [23/Feb/2026:03:08:43 -0700] "GET /.git/config HTTP/1.1" 301 466 "-" "Mozilla/5.0 (W ... show more 45.3.37.152 - - [23/Feb/2026:03:08:43 -0700] "GET /.git/config HTTP/1.1" 301 466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" ... show less	Web App Attack
🇪🇸 10dencehispahard SL	2026-01-23 07:12:06 (7 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:02:02 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇦🇺 MAGIC	2025-12-07 00:04:07 (8 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-03 08:13:51 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.37.152 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.37.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 03:13:45.962591 2025] [security2:error] [pid 5697:tid 5697] [client 45.3.37.152:50097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fetchamreadingroom.org"] [uri "/.env"] [unique_id "aS_xOSEZKKhbN26VammCBQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:01:46 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.37.152 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.37.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:01:20.592046 2025] [security2:error] [pid 21126:tid 21126] [client 45.3.37.152:51517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thehallway.net"] [uri "/.svn/wc.db"] [unique_id "aSUqEKyAToGN69nDxPUYfgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:44:02 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.37.152 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.37.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:43:53.159645 2025] [security2:error] [pid 4410:tid 4410] [client 45.3.37.152:19219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ultratecnologia.com"] [uri "/.svn/wc.db"] [unique_id "aSQo2Ul_B65vh7ch-qXpjAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:12:03 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.37.152 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.37.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:11:56.941473 2025] [security2:error] [pid 27581:tid 27581] [client 45.3.37.152:42135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gmroyalties.com"] [uri "/.svn/wc.db"] [unique_id "aSQFPJXlV7r7TC53HM9zhQAAADI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.145.21

🇧🇩 104.28.230.135

🇺🇸 66.132.186.131

🇺🇸 100.29.192.44

🇨🇦 85.217.149.71

🇺🇸 73.147.19.171

🇫🇷 45.91.22.105

🇲🇩 37.221.65.15

🇬🇧 35.203.210.222

🇮🇳 27.123.114.190

🇫🇷 2001:41d0:8:4d94::1

🇳🇱 193.29.139.231

🇦🇷 190.104.36.229

🇳🇱 45.142.193.169

🇸🇬 43.173.180.88

🇰🇷 220.121.182.228

🇳🇱 193.47.62.69

🇩🇪 185.242.3.151

🇮🇩 163.7.13.17

🇰🇷 106.251.244.178