JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.34.21

45.3.34.21 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.34.21

Whois 45.3.34.21

IP Abuse Reports for 45.3.34.21:

This IP address has been reported a total of 36 times from 17 distinct sources. 45.3.34.21 was first reported on September 29th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Francesco Ippoliti	2026-07-03 22:29:46 (4 hours ago)	[Jul 4 00:29:45] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:801@154 ... show more [Jul 4 00:29:45] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '45.3.34.21:34720' (callid: 6dd6c9443d22d2dd69a3a43d06fd6497) - No matching endpoint found [Jul 4 00:29:45] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '45.3.34.21:34720' (callid: 6dd6c9443d22d2dd69a3a43d06fd6497) - No matching endpoint found ... show less	Brute-Force Port Scan
🇫🇮 sgofferj	2026-07-03 21:38:16 (5 hours ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇮🇹 Francesco Ippoliti	2026-07-03 21:13:23 (5 hours ago)	[Jul 3 23:13:22] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:501@154 ... show more [Jul 3 23:13:22] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '45.3.34.21:24765' (callid: 4ed22a6fa7a37bbea8a28ebcbd0afa52) - No matching endpoint found [Jul 3 23:13:22] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '45.3.34.21:24765' (callid: 4ed22a6fa7a37bbea8a28ebcbd0afa52) - No matching endpoint found ... show less	Brute-Force Port Scan
Anonymous	2026-05-16 12:28:27 (1 month ago)	RdpGuard detected brute-force attempt on RD-WEB	Brute-Force
Anonymous	2026-03-07 15:38:07 (3 months ago)	Forum/form spam	Web Spam
Anonymous	2026-01-25 21:44:20 (5 months ago)	Forum/form spam	Web Spam
Anonymous	2025-12-30 11:10:16 (6 months ago)	wordpress-trap	Web App Attack
🇺🇸 Vano Ganzzz	2025-12-21 03:00:21 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from US. Action taken: BLOCK ASN: 200373 (DREI-K-TECH-GMBH) Protoc ... show more Triggered Cloudflare WAF (l7ddos) from US. Action taken: BLOCK ASN: 200373 (DREI-K-TECH-GMBH) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-12-21T03:00:21Z Ray ID: 9b1420f13bcaef66 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2025-12-18 03:20:39 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 oncord	2025-12-10 11:34:35 (6 months ago)	Form spam	Web Spam
Anonymous	2025-12-02 18:18:43 (7 months ago)	botnet	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-11-30 13:10:03 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-26 09:44:02 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.34.21 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.34.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:43:57.904428 2025] [security2:error] [pid 31162:tid 31162] [client 45.3.34.21:37255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.dandksupply.com"] [uri "/.env"] [unique_id "aSbL3WF5eMqtXOTqQ133CwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 08:58:47 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.34.21 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.34.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:58:40.447560 2025] [security2:error] [pid 9558:tid 9558] [client 45.3.34.21:38447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tcmu.org"] [uri "/.svn/wc.db"] [unique_id "aSbBQFH9cs4g2UXEqLZVIQAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:34:17 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.34.21 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.34.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:34:12.699085 2025] [security2:error] [pid 31005:tid 31005] [client 45.3.34.21:18591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.step1nutrition.com"] [uri "/.git/HEAD"] [unique_id "aSaRVAFwZz5gdcYab1pFBAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.50.171.190

🇬🇧 195.206.182.205

🇻🇳 116.110.145.68

🇺🇸 65.111.4.95

🇺🇸 65.49.1.19

🇨🇳 36.140.218.211

🇺🇸 18.212.223.42

🇺🇸 2001:470:2cc:1::16c

🇭🇰 199.45.155.105

🇷🇸 109.72.54.69

🇺🇸 98.101.34.22

🇺🇸 65.111.14.174

🇺🇸 45.3.32.234

🇬🇧 35.203.210.124

🇩🇪 4.182.219.135

🇬🇧 2a06:4882:b000::ce

🇺🇿 213.230.87.246

🇮🇩 202.157.177.133

🇳🇱 91.92.40.237

🇺🇸 88.135.73.16