JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.51.156

45.3.51.156 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 40%: ?

40%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.51.156

Whois 45.3.51.156

IP Abuse Reports for 45.3.51.156:

This IP address has been reported a total of 28 times from 17 distinct sources. 45.3.51.156 was first reported on October 12th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-12 08:10:17 (1 week ago)	\| SQL injection attempt.	Web App Attack Hacking SQL Injection
🇺🇸 lostswordfish.com	2026-09-12 06:28:05 (1 week ago)	Wordfence waf block on 1105merrystreet	Web App Attack
🇫🇷 Sklurk	2026-09-12 03:16:48 (1 week ago)	Web App Attack	Web App Attack
Anonymous	2026-09-10 23:58:57 (1 week ago)	2026-09-10T23:58:57.240368+00:00 instance-20260804-1025 wordpress(acbp.org.co)[2374270]: XML-RPC aut ... show more 2026-09-10T23:58:57.240368+00:00 instance-20260804-1025 wordpress(acbp.org.co)[2374270]: XML-RPC authentication attempt for unknown user wertuslash from 45.3.51.156 ... show less	Web App Attack
🇺🇸 drewf.ink	2026-09-04 02:24:01 (2 weeks ago)	[02:24] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [02:24] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇺🇸 ambor	2026-09-02 02:26:46 (2 weeks ago)	Honeypot access: WordPress XML-RPC attack attempt. Path: /xmlrpc.php	Brute-Force Web App Attack
🇧🇪 taivas.nl	2026-08-31 12:32:19 (2 weeks ago)	Bad_requests	Bad Web Bot
🇫🇷 Sklurk	2026-08-14 06:12:21 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-08 00:27:55 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 nowyouknow	2026-05-16 05:18:20 (4 months ago)	(From [email protected]) Hi Cannon County Chiropractic, I wanted to bump this in ca ... show more (From [email protected]) Hi Cannon County Chiropractic, I wanted to bump this in case you missed it — I built an AI agent just for Cannon County Chiropractic, trained on your website, Google info, and everything I could find. It’s ready to answer customer questions, book appointments, and even follow up automatically. On average, our agents help increase leads by 17% without any work needed on your part. Again, this isn’t a pitch — just 20 minutes to test-drive your new AI employee. Here’s the link to book a time: getdandy.com/schedule-a-call/ or call me at (949)-755-7782 Talk soon, Thank you, Jennifer O'Brien \| Director of Operations GetDandy getdandy.com/schedule-a-call/ Unsubscribe here: bit.ly/42wnUsa show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2026-03-15 06:37:07 (6 months ago)	(mod_security) mod_security (id:210410) triggered by 45.3.51.156 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210410) triggered by 45.3.51.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 02:37:01.885385 2026] [security2:error] [pid 8056:tid 8056] [client 45.3.51.156:14439] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:tid outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request\|\|www.powerkiteforum.com\|F\|3"] [data "ARGS:tid=32768\\x00'"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "www.powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "abZTjdO4CnMo6ma0oSt7VQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-09 20:19:45 (9 months ago)	botnet	DDoS Attack
🇱🇻 garmtech.com	2025-12-06 23:55:40 (9 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-55.45.3.51.156.web-spammers ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-55.45.3.51.156.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:47:45 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.51.156 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.51.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:47:36.892407 2025] [security2:error] [pid 18371:tid 18371] [client 45.3.51.156:55501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.weddingcakenapkins.com"] [uri "/.svn/wc.db"] [unique_id "aSVRCEb0XFw_ie6BEA0gAAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:29:38 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.51.156 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.51.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:29:32.116746 2025] [security2:error] [pid 18024:tid 18024] [client 45.3.51.156:53935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cyberdana.com"] [uri "/.env"] [unique_id "aSUUjKzzsG11oywnluOtpwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 203.213.54.5

🇧🇬 109.160.32.114

🇵🇰 103.179.240.25

🇧🇯 154.127.34.197

🇮🇩 103.142.240.142

🇫🇷 91.196.152.205

🇺🇸 69.251.207.70

🇺🇸 24.199.89.38

🇰🇷 211.105.232.99

🇭🇰 202.155.236.242

🇮🇳 182.95.62.22

🇭🇰 101.36.123.159

🇺🇸 91.245.236.49

🇺🇦 91.210.248.251

🇪🇸 80.102.218.187

🇺🇸 66.132.195.50

🇺🇸 12.156.67.18

🇦🇷 179.62.216.38

🇺🇸 162.216.149.96

🇵🇰 118.107.139.224