JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.3.37.232

Recent Activity

Abuse Confidence Score

27% Elevated

60 reports

25 reporters · latest 1 day ago

ISP: 3xK Tech GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS200373
Domain Name: 3xktech.cloud
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

60 from 25 distinct reporters

First reported

October 18th 2024

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇨🇿 Czechia 3 🇵🇱 Poland 3 🇫🇷 France 1

Most common categories Web App Attack 8 Bad Web Bot 5 Hacking 5 Brute-Force 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-11-09 00:03:57 UTC · (1 day ago)	cloudlinux2 fail2ban: 2026-11-09 00:58:49,709 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 209.50.163.238 - 2026-11-09 00:58:49cloudlinux2 fail2ban: 2026-11-09 00:59:16,953 fail2ban.filter [1672]: INFO [plesk-modsecuri ... show more cloudlinux2 fail2ban: 2026-11-09 00:58:49,709 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 209.50.163.238 - 2026-11-09 00:58:49cloudlinux2 fail2ban: 2026-11-09 00:59:16,953 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 193.56.28.101 - 2026-11-09 00:59:16cloudlinux2 fail2ban: 2026-11-09 00:59:29,164 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 217.196.163.20 - 2026-11-09 00:59:28cloudlinux2 fail2ban: 2026-11-09 01:00:17,928 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 209.50.169.41 - 2026-11-09 01:00:17cloudlinux2 fail2ban: 2026-11-09 01:00:17,910 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 45.3.36.119 - 2026-11-09 01:00:17cloudlinux2 fail2ban: 2026-11-09 01:00:14,699 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 45.3.39.226 - 2026-11-09 01:00:14cloudlinux2 fail2ban: 2026-11-09 01:00:21,967 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 65.111.7.175 - 2026-11-09 01:00:21 show less	Web App Attack
Anonymous	2026-11-08 14:52:23 UTC · (2 days ago)	IP matched detection query 50 and more bad rqs apache.	Hacking Bad Web Bot Brute-Force Web App Attack
Anonymous	2026-11-04 18:50:29 UTC · (5 days ago)	IP matched detection query 50 and more bad rqs apache.	Hacking Bad Web Bot Brute-Force Web App Attack
Anonymous	2026-11-03 12:01:17 UTC · (1 week ago)	IP matched detection query 50 and more bad rqs apache.	Hacking Bad Web Bot Brute-Force Web App Attack
🇳🇱 BlueWire Hosting	2026-10-16 16:46:08 UTC · (3 weeks ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇵🇱 Budyn	2026-10-11 12:56:09 UTC · (4 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dev.goblinpot.online \| URI: /phpinfo.php \| UA: Mo ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dev.goblinpot.online \| URI: /phpinfo.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-10 12:50:30 UTC · (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.teddypot.space \| URI: /app/.env \| UA: Moz ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.teddypot.space \| URI: /app/.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-10-10 08:35:33 UTC · (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn.astropot.store \| URI: /assets/.env \| UA: M ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn.astropot.store \| URI: /assets/.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇫🇷 Sklurk	2026-10-07 01:15:42 UTC · (1 month ago)	Web App Attack	Web App Attack
🇺🇸 ne1for23	2026-09-02 17:57:27 UTC · (2 months ago)	Attempt to access invalid virtual host name (###.###.###.###:443). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 45.3.37.232 - - [02/Sep/2026:17:57:22 +0000] " ... show more Attempt to access invalid virtual host name (###.###.###.###:443). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 45.3.37.232 - - [02/Sep/2026:17:57:22 +0000] "POST /global-protect/prelogin.esp?tmp=tmp&clientVer=4100&clientos=Windows HTTP/1.1" 403 153 "-" "PAN GlobalProtect" "-" show less	Hacking
🇩🇪 big-cloud.nl	2026-08-23 02:17:17 UTC · (2 months ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 lostswordfish.com	2026-08-17 12:50:05 UTC · (2 months ago)	Wordfence waf block on jestrellafoundation	Web App Attack
🇫🇷 ELYAZ	2026-08-15 23:56:43 UTC · (2 months ago)	(wordpress) Failed wordpress login from 45.3.37.232 (US/United States/-): (CF_ENABLE)	Brute-Force
Anonymous	2026-08-15 01:01:03 UTC · (2 months ago)	WordPress Brute Force	Brute-Force
🇪🇸 SweetHoneyPress	2026-08-13 23:30:56 UTC · (2 months ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=1197843 \| UA: Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36	Web App Attack Brute-Force

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 193.32.209.236

🇵🇱 159.26.110.95

🇳🇱 103.47.145.62

🇫🇷 91.231.89.211

🇨🇦 85.217.149.4

🇪🇸 85.61.28.32

🇷🇺 185.17.67.184

🇨🇳 121.43.126.148

🇵🇰 103.82.121.168

🇩🇪 84.187.83.254

🇺🇸 34.223.103.230

🇺🇸 20.150.212.29

🇺🇸 20.38.15.21

🇲🇽 187.189.29.246

🇵🇱 176.53.159.197

🇭🇰 150.5.141.198

🇺🇸 136.70.234.162

🇸🇬 104.250.53.32

🇻🇳 103.195.237.103

🇺🇸 66.132.159.80