JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.52.137

45.3.52.137 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.52.137

Whois 45.3.52.137

IP Abuse Reports for 45.3.52.137:

This IP address has been reported a total of 23 times from 13 distinct sources. 45.3.52.137 was first reported on October 12th 2024, and the most recent report was 58 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-08-14 07:44:15 (58 minutes ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-03 02:34:00 (1 week ago)	Web App Attack	Web App Attack
🇫🇷 dynamix	2026-07-17 02:44:17 (4 weeks ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-17 02:29:17 (4 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇷 masterguru	2026-07-01 07:56:10 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 45.3.52.137 (BR/Brazil/-): 1 in the l ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 45.3.52.137 (BR/Brazil/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇮🇩 Burayot	2026-05-13 14:05:29 (3 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.52.137 (BR/Brazil/-): 2 in the ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.52.137 (BR/Brazil/-): 2 in the last 3600 secs show less	Web App Attack
🇬🇧 PeravixGroup	2026-05-07 06:20:13 (3 months ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇳🇱 homeshowdomain.nl	2025-12-06 23:02:28 (8 months ago)	Auto-ban: >3000 req/min op 2025-12-06	Hacking Web App Attack SSH
🇺🇸 myagent.site	2025-12-05 06:11:49 (8 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2025-11-25 04:29:09 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.137 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:29:02.719101 2025] [security2:error] [pid 6466:tid 6466] [client 45.3.52.137:58553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.littlepeopledelivery.com"] [uri "/.env"] [unique_id "aSUwjioBp31IXAWMkG74QwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:56:22 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.137 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:56:17.533284 2025] [security2:error] [pid 759369:tid 759369] [client 45.3.52.137:21943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.michleen-collins.com"] [uri "/.git/HEAD"] [unique_id "aSUo4e4kF1HM-WZQtx-0QwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:00:31 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.137 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:00:27.508693 2025] [security2:error] [pid 8586:tid 8586] [client 45.3.52.137:18915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.whatcausesmentalillness.com"] [uri "/.git/HEAD"] [unique_id "aSUby5Hjmoh1YWrYtQ914wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:30:05 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.137 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:29:59.408485 2025] [security2:error] [pid 16757:tid 16757] [client 45.3.52.137:39267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.dhsgrad.net"] [uri "/.env"] [unique_id "aSUUp4_nmxvIH-JIWnNq1AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:10:25 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.137 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:10:21.323780 2025] [security2:error] [pid 12256:tid 12256] [client 45.3.52.137:57379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.seekingthemind.com"] [uri "/.git/HEAD"] [unique_id "aSUB_UGKI8eoWIpynhCQMAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:20:48 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.52.137 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.52.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:20:04.794536 2025] [security2:error] [pid 15108:tid 15108] [client 45.3.52.137:13105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.donutburger.com"] [uri "/.env"] [unique_id "aST2NM3h2gX3ew4POe-SfgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 43.172.194.225

🇨🇳 223.73.231.171

🇨🇳 222.76.248.54

🇩🇪 194.88.98.119

🇬🇧 185.247.137.4

🇺🇸 135.237.125.174

🇨🇳 123.161.248.188

🇧🇩 103.84.133.164

🇺🇸 65.111.6.66

🇫🇷 54.38.109.115

🇫🇷 51.75.236.157

🇧🇷 45.205.1.241

🇺🇸 43.153.79.218

🇨🇳 14.116.189.74

🇩🇪 8.211.39.116

🇫🇷 173.249.52.138

🇺🇸 172.174.17.234

🇨🇳 113.128.205.47

🇲🇲 103.59.163.132

🇫🇷 91.231.89.237