JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.37.185

45.3.37.185 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 21%: ?

21%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.37.185

Whois 45.3.37.185

IP Abuse Reports for 45.3.37.185:

This IP address has been reported a total of 26 times from 14 distinct sources. 45.3.37.185 was first reported on November 10th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-23 03:58:12 (3 days ago)	Web App Attack	Web App Attack
🇺🇸 dtorrer	2026-05-20 03:12:55 (1 month ago)	General vulnerability scan.	Port Scan
Anonymous	2026-05-04 12:10:01 (1 month ago)	suspicious request in access.log	Web App Attack
🇩🇪 FeG Deutschland	2026-04-29 12:41:42 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇬🇧 relianoid.com	2026-04-29 04:17:51 (1 month ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇳🇱 homeshowdomain.nl	2025-11-25 23:04:41 (7 months ago)	Auto-ban: >3000 req/min op 2025-11-25	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-25 04:40:43 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.37.185 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.37.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:40:35.131190 2025] [security2:error] [pid 27514:tid 27514] [client 45.3.37.185:58843] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.stefchild.com"] [uri "/.svn/wc.db"] [unique_id "aSUzQ1ELt0hBvcYAD93-OAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:53:27 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.37.185 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.37.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:53:19.751782 2025] [security2:error] [pid 17395:tid 17395] [client 45.3.37.185:34745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.justkoolit.com"] [uri "/.svn/wc.db"] [unique_id "aSUaH_ieuIjD7TqGBzrGTgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:27:40 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.37.185 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.37.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:27:30.201409 2025] [security2:error] [pid 27522:tid 27522] [client 45.3.37.185:58863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.achillespress.com"] [uri "/.env"] [unique_id "aSUUEua2rGoWYg9WuVW6ogAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:05:00 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.37.185 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.37.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:04:53.273910 2025] [security2:error] [pid 1590769:tid 1590774] [client 45.3.37.185:22499] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.megawattscorp.net"] [uri "/.svn/wc.db"] [unique_id "aSTypWGwGZE4_DDLbJbLHAAAAIM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-18 23:11:03 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-14 17:08:49 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-13 07:20:24 (7 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.11.13 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.11.13 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-10 04:50:58 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.10 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-02 18:04:40 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:32:53	Port Scan Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.153.197.75

🇫🇮 147.185.133.28

🇺🇸 95.164.234.226

🇺🇸 95.164.234.24

🇧🇪 34.79.117.27

🇵🇰 223.123.124.35

🇳🇱 195.178.110.26

🇨🇳 182.43.235.218

🇨🇳 180.76.183.185

🇺🇸 95.164.234.11

🇺🇸 95.164.233.86

🇺🇸 95.164.233.73

🇺🇸 95.164.233.65

🇩🇪 93.216.107.45

🇳🇱 91.92.40.43

🇨🇦 72.11.152.175

🇺🇸 67.205.130.205

🇺🇸 66.132.186.209

🇩🇪 64.89.163.86

🇺🇸 64.62.197.98