JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.37.3

45.3.37.3

Recent Activity

45 reports found in our database

37% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

3xK Tech GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS200373

Domain Name

3xktech.cloud

Country

🇺🇸 United States of America

City

Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 45.3.37.3:

This IP address has been reported a total of 45 times from 23 distinct sources. 45.3.37.3 was first reported on October 1st 2024, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: France with 7 reports; Germany with 2 reports; Sweden with 2 reports. The most common categories in these recent reports were: Web App Attack 10 times; Hacking 3 times; Brute-Force 2 times; Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-02-22 00:38:57 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 45.3.37.3 (-): 1 in the last 300 secs; Ports: * ... show more (mod_security) mod_security (id:225170) triggered by 45.3.37.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 19:38:53.178710 2026] [security2:error] [pid 25165:tid 25165] [client 45.3.37.3:12225] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nekstlevel.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nekstlevel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZpQHfyDlCuJE33Z1KuFGwAAAAY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-29 05:08:24 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 45.3.37.3 (-): 1 in the last 300 secs; Ports: * ... show more (mod_security) mod_security (id:210730) triggered by 45.3.37.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 00:08:18.063776 2026] [security2:error] [pid 21701:tid 21701] [client 45.3.37.3:10837] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|danharrisphotoart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "danharrisphotoart.com"] [uri "/email:[email protected]"] [unique_id "aXrrQrvNBgtw6NzeGVtgrQAAAAw"], referer: https://danharrisphotoart.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:40 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇦🇺 MAGIC	2025-12-24 05:07:11 (8 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-12-16 03:37:59 (8 months ago)	2025-12-16T05:37:58.288164+02:00 zanati wp(www.sahpa.co.za)[978186]: Blocked authentication attempt ... show more 2025-12-16T05:37:58.288164+02:00 zanati wp(www.sahpa.co.za)[978186]: Blocked authentication attempt for [email protected] from 45.3.37.3 ... show less	Web App Attack
Anonymous	2025-12-08 22:57:59 (9 months ago)	botnet	DDoS Attack
Anonymous	2025-11-14 11:52:23 (10 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇫🇮 Shaik Sai Meera	2025-11-11 22:20:15 (10 months ago)	IM360 WAF: Infectors: Suspicious access attempt (webshell)	FTP Brute-Force Open Proxy Brute-Force
🇸🇪 KIDOS	2025-10-28 21:26:00 (10 months ago)	drupal_exploit	Web App Attack
Anonymous	2025-10-27 08:10:59 (10 months ago)	2025-10-27T09:10:57.717373 localhost.localdomain sshd[1032460]: Failed password for root from 45.3.3 ... show more 2025-10-27T09:10:57.717373 localhost.localdomain sshd[1032460]: Failed password for root from 45.3.37.3 port 48623 ssh2 2025-10-27T09:10:59.093205 localhost.localdomain sshd[1032460]: Connection closed by authenticating user root 45.3.37.3 port 48623 [preauth] ... show less	Brute-Force SSH
🇵🇱 sefinek.net	2025-10-22 11:09:48 (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-10-18 10:51:39 (10 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-17 15:04:19 (10 months ago)	GlobalProtect login attempts with user mackeym.	VPN IP Brute-Force
Anonymous	2025-10-17 13:38:36 (10 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-16 22:04:53 (10 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.16 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.16 is noted in report timestamp show less	Hacking Brute-Force

Showing 16 to 30 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 62.60.130.242

🇮🇪 54.154.73.10

🇨🇳 120.48.171.196

🇳🇱 77.91.71.66

🇺🇸 66.132.195.94

🇺🇸 66.132.195.75

🇧🇷 16.5.0.236

🇳🇱 193.176.31.203

🇦🇺 161.33.230.48

🇺🇸 147.185.132.250

🇨🇳 118.145.155.165

🇮🇩 103.46.186.148

🇭🇰 101.32.33.214

🇫🇷 91.231.89.85

🇺🇸 72.238.32.142

🇺🇸 65.49.1.150

🇮🇪 52.31.203.22

🇻🇳 27.71.26.102

🇧🇷 205.210.31.253

🇧🇷 186.200.6.38