JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.49.185

45.3.49.185 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 9%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.49.185

Whois 45.3.49.185

IP Abuse Reports for 45.3.49.185:

This IP address has been reported a total of 30 times from 11 distinct sources. 45.3.49.185 was first reported on February 14th 2025, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 martenmark	2026-06-06 10:29:21 (22 hours ago)	45.3.49.185 - - [06/Jun/2026:10:29:20 +0000] "GET http://www.beapp.co/.git/HEAD HTTP/1.1" 301 669 "- ... show more 45.3.49.185 - - [06/Jun/2026:10:29:20 +0000] "GET http://www.beapp.co/.git/HEAD HTTP/1.1" 301 669 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" ... show less	Web App Attack
🇩🇪 Lino Project	2026-05-21 23:41:23 (2 weeks ago)	45.3.49.185 - - [22/May/2026:01:41:22 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3665 "-" "Mozilla/5.0 ( ... show more 45.3.49.185 - - [22/May/2026:01:41:22 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3665 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-30 02:42:40 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.49.185 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.49.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 21:42:33.129721 2025] [security2:error] [pid 789:tid 789] [client 45.3.49.185:58495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "computerservicesofflorida.com"] [uri "/wp-config.php"] [unique_id "aVM8GWBOnZ14To56ZDon0AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-23 05:12:15 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.49.185 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.49.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 00:12:11.676013 2025] [security2:error] [pid 23474:tid 23474] [client 45.3.49.185:41903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4115thewestford.com"] [uri "/wp-config.php"] [unique_id "aUokq_7_ZGbQjkdxILKqwwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2025-12-15 16:47:40 (5 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 09:43:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.49.185 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.49.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:43:14.029678 2025] [security2:error] [pid 21062:tid 21062] [client 45.3.49.185:56227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mgmlawnservice.buffaloweddingdeejay.com"] [uri "/.svn/wc.db"] [unique_id "aSbLsoYETmS-IZmdWmoRpAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:55:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.49.185 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.49.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:55:34.400147 2025] [security2:error] [pid 9607:tid 9686] [client 45.3.49.185:21083] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.anthonydalessandro.com"] [uri "/.env"] [unique_id "aSakZvkDcg6wFbLmNJ0WrgAAAg4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:28:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.49.185 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.49.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:28:03.661400 2025] [security2:error] [pid 28631:tid 28631] [client 45.3.49.185:37553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.superstargambling.com"] [uri "/.svn/wc.db"] [unique_id "aSZlsw9fJ_BeOEroKH92UAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:11:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.49.185 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.49.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:11:07.525955 2025] [security2:error] [pid 25420:tid 25420] [client 45.3.49.185:40099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.eboredom.net"] [uri "/.env"] [unique_id "aSZFm1lPY3RVOzYtKawKPQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-18 21:43:37 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.49.185 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.49.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 18 16:43:30.061899 2025] [security2:error] [pid 8047:tid 8047] [client 45.3.49.185:21099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thewhispertwins.com"] [uri "/.git/HEAD"] [unique_id "aRzogg_AmW1-iPyW4kJWbgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-01 03:10:24 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.01 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-28 07:57:54 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.28 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.28 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-21 13:05:54 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.21 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 08:47:59 (7 months ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-17 17:35:07 (7 months ago)	GlobalProtect login attempts with user jhanna.	VPN IP Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.181.51.118

🇨🇳 218.58.73.238

🇷🇺 217.150.37.249

🇧🇷 201.159.146.106

🇹🇭 171.100.121.127

🇺🇸 162.216.149.58

🇻🇳 157.66.80.97

🇭🇰 152.32.172.108

🇺🇸 136.118.86.242

🇵🇭 112.207.164.90

🇺🇦 95.46.142.91

🇷🇴 80.94.92.184

🇰🇷 58.124.86.81

🇵🇾 45.161.237.218

🇹🇿 41.59.114.85

🇬🇧 35.203.210.148

🇺🇸 24.35.193.204

🇮🇳 2a02:4780:11:1226:0:2ce4:2a8a:1

🇺🇸 2604:a880:400:d1:0:4:8c01:7001

🇨🇳 223.109.252.250