JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.52.132

45.3.52.132 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 22%: ?

22%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.52.132

Whois 45.3.52.132

IP Abuse Reports for 45.3.52.132:

This IP address has been reported a total of 16 times from 11 distinct sources. 45.3.52.132 was first reported on October 1st 2024, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 pm33	2026-07-06 20:47:39 (15 hours ago)	Wordpress login attempts	Brute-Force
🇵🇹 Subnet Phantom Veil	2026-07-05 10:31:55 (2 days ago)	[Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatic ... show more [Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatically blocked, and the IP Address banned. [Method]: => GET. [Request]: => /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings. Access revoked. [User-Agent]: curl/8.7.1. [OS]: Unknown. [IP Address]: 45.3.52.132. [Date]: 2026-07-05 11:22:04 UTC. show less	Bad Web Bot DDoS Attack Hacking Port Scan Web App Attack
Anonymous	2026-07-01 01:15:55 (6 days ago)	Web attack blocked by Wordfence on limburgsekunstkring.nl (1 hit). Reported by CRMON.	Web App Attack
🇵🇱 TaKeN	2026-06-26 03:26:33 (1 week ago)	Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application pr ... show more Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 1 matching blocked event(s) between 2026-06-26T05:26:33+02:00 and 2026-06-26T05:26:33+02:00. Sample requested paths: /wp-json/gravitysmtp/v1/tests/mock-data. show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-04-27 14:32:18 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.132 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 10:32:12.215095 2026] [security2:error] [pid 11870:tid 11870] [client 45.3.52.132:61851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trafficstopper.com"] [uri "/.git/HEAD"] [unique_id "ae9zbL40HXG8bq7ipIm5uQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-04-13 21:49:55 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.4 Safari/605.1.15 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
Anonymous	2025-12-31 14:47:32 (6 months ago)	2025-12-31T16:47:32.563475+02:00 zanati wp(www.sahpa.co.za)[7741]: Blocked authentication attempt fo ... show more 2025-12-31T16:47:32.563475+02:00 zanati wp(www.sahpa.co.za)[7741]: Blocked authentication attempt for [email protected] from 45.3.52.132 ... show less	Web App Attack
🇨🇦 SSH-Admin	2025-12-27 13:45:08 (6 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇺🇸 oncord	2025-12-07 03:34:18 (7 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-11-25 07:01:37 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.132 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:01:34.208194 2025] [security2:error] [pid 10089:tid 10089] [client 45.3.52.132:40847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.theurbanlogger.com"] [uri "/.git/HEAD"] [unique_id "aSVUTthTcnpsjZWFHYkcDQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:53:21 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.132 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:53:16.103808 2025] [security2:error] [pid 4407:tid 4407] [client 45.3.52.132:39239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dtla2028.com"] [uri "/.git/HEAD"] [unique_id "aSU2PIOH8kmF1_ixJ-x7xgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 MM-bot	2024-12-22 04:26:00 (1 year ago)	URL-probe: HTTP/1.1 GET request on /wp-login.php (2024-12-22 05:26:00 UTC+1)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-12-03 23:42:04 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.52.132 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.52.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 03 18:42:01.125969 2024] [security2:error] [pid 23064:tid 23064] [client 45.3.52.132:36747] [client 45.3.52.132] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|enko-yama.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "enko-yama.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z0-XSV7q2We2gogsV2MgXgAAAAc"], referer: https://enko-yama.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-30 13:36:19 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 202.71.141.170

🇪🇹 196.189.155.89

🇺🇸 195.184.76.198

🇧🇷 191.237.255.150

🇵🇱 176.53.159.198

🇹🇼 128.14.239.38

🇫🇷 85.217.140.41

🇫🇷 85.217.140.16

🇵🇱 45.141.233.32

🇬🇧 35.203.210.204

🇺🇸 34.46.115.206

🇳🇱 34.13.199.251

🇨🇳 14.103.118.248

🇹🇼 198.235.24.41

🇦🇲 176.32.193.16

🇩🇪 167.94.146.74

🇩🇪 167.94.146.62

🇸🇪 157.52.122.72

🇺🇸 128.203.202.233

🇫🇷 85.217.140.33