JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.36.8

45.3.36.8 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.36.8

Whois 45.3.36.8

IP Abuse Reports for 45.3.36.8:

This IP address has been reported a total of 56 times from 21 distinct sources. 45.3.36.8 was first reported on October 4th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-05-20 07:07:11 (2 weeks ago)	[WedMay2009:07:06.7630202026][security2:error][pid4126340:tid4126392][client45.3.36.8:0]ModSecurity: ... show more [WedMay2009:07:06.7630202026][security2:error][pid4126340:tid4126392][client45.3.36.8:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.chryptofarm.ch\"][uri\"/\"][unique_id\"ag1dmjNXbAO4U5SzBHG_qwAAAFA\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 04:09:21 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.3.36.8 (-): 1 in the last 300 secs; Ports: * ... show more (mod_security) mod_security (id:210492) triggered by 45.3.36.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 00:09:15.168613 2026] [security2:error] [pid 17657:tid 17657] [client 45.3.36.8:48339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.guardmagic.com"] [uri "/.env"] [unique_id "ag0z6_p9FCLNXBKs736LogAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-05-12 00:49:40 (3 weeks ago)	[TueMay1202:49:34.0098082026][security2:error][pid3289033:tid3289041][client45.3.36.8:0]ModSecurity: ... show more [TueMay1202:49:34.0098082026][security2:error][pid3289033:tid3289041][client45.3.36.8:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"xn--tda.pics\"][uri\"/.aws/credentials\"][unique_id\"agJ5HZkqG4YP5ULQImGSdAAAAUY\"] show less	Hacking Web App Attack
🇳🇱 wlt-blocker	2026-05-11 21:00:56 (3 weeks ago)	Unauthorized access to webpage admin	Web App Attack
🇨🇭 4server	2026-04-06 16:46:04 (2 months ago)	[MonApr0618:45:59.6085622026][security2:error][pid446363:tid446413][client45.3.36.8:0]ModSecurity:Ac ... show more [MonApr0618:45:59.6085622026][security2:error][pid446363:tid446413][client45.3.36.8:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"200\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"giuristifriburgo.ch\"][uri\"/xmlrpc.php\"][unique_id\"adPjR-tMEGXKTGDwQ7pSPQAAAVQ\"] show less	Hacking Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇦🇺 oncord	2026-03-23 20:00:17 (2 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-02-28 02:19:17 (3 months ago)	Form spam	Web Spam
🇱🇻 garmtech.com	2026-02-28 01:57:40 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 03-57.45.3.36.8.web-spammers.v ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 03-57.45.3.36.8.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇳🇱 Futunk	2026-02-27 09:42:33 (3 months ago)	Form spam (honeypot): POST /contact	Web Spam
🇨🇦 ISPLtd	2026-02-19 21:53:25 (3 months ago)	Hacking, URL manipulation, malformed requests, or requests for invalid/hidden files like .git/config ... show more Hacking, URL manipulation, malformed requests, or requests for invalid/hidden files like .git/config or .env. Does not honour robots.txt. show less	Hacking Web App Attack Bad Web Bot
🇮🇹 VHosting	2026-02-18 22:11:32 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇦🇺 oncord	2026-02-10 03:04:19 (3 months ago)	Form spam	Web Spam
🇺🇸 oncord	2026-02-03 08:15:16 (4 months ago)	Form spam	Web Spam
🇺🇸 oncord	2026-01-29 18:32:47 (4 months ago)	Form spam	Web Spam

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 212.80.7.172

🇮🇩 180.247.63.135

🇯🇴 176.29.29.71

🇺🇸 172.236.123.208

🇺🇸 162.216.150.113

🇧🇩 103.239.252.132

🇦🇷 45.172.19.79

🇮🇶 5.10.229.212

🇨🇴 181.129.31.42

🇧🇷 179.0.119.222

🇺🇸 148.153.121.224

🇨🇳 120.198.138.185

🇵🇹 85.240.193.104

🇳🇱 81.19.216.107

🇦🇷 45.172.108.181

🇧🇷 45.160.243.56

🇺🇸 40.121.179.100

🇻🇪 38.188.55.46

🇵🇪 38.25.52.127

🇺🇸 24.234.157.122