JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.49.74

45.3.49.74 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.49.74

Whois 45.3.49.74

IP Abuse Reports for 45.3.49.74:

This IP address has been reported a total of 40 times from 16 distinct sources. 45.3.49.74 was first reported on October 1st 2024, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 screwlooseit.com.au	2026-07-11 03:52:01 (13 hours ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN US/United States/-	Web App Attack
🇺🇸 mind5t0rm	2026-03-23 06:10:38 (3 months ago)	(XMLRPC) WP XMLPRC Attack 45.3.49.74 (US/United States/-): 3 in the last 3600 secs; Ports: ; Direct ... show more (XMLRPC) WP XMLPRC Attack 45.3.49.74 (US/United States/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.3.49.74 - - [23/Mar/2026:13:10:33 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "curl/7.88.1" 45.3.49.74 - - [23/Mar/2026:13:10:33 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Wget/1.21.4" 45.3.49.74 - - [23/Mar/2026:13:10:34 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Wget/1.21.4" show less	Port Scan
🇺🇸 oncord	2026-03-01 20:38:06 (4 months ago)	Form spam	Web Spam
Anonymous	2026-01-17 04:31:19 (5 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 TPI-Abuse	2026-01-17 04:07:32 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.49.74 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.49.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 23:07:27.226056 2026] [security2:error] [pid 28836:tid 28836] [client 45.3.49.74:18823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.cook-islands-boat-registration.com"] [uri "/.env"] [unique_id "aWsK_1aRQCoMDf0kc47atAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Psycho Solutions LLC	2026-01-10 03:45:18 (6 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 1/10/2026 3:45 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 techboy117	2025-12-22 18:03:29 (6 months ago)	Blocking due to password spraying. Username: kdurham	Brute-Force
🇮🇩 BPS-StatisticsIndonesia	2025-12-20 07:33:13 (6 months ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-18 08:54:36 (6 months ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-11 13:21:57 (7 months ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-09 17:00:06 (7 months ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-08 08:16:22 (7 months ago)	WP Login Scan Activities	Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 14:20:25 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.49.74 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.49.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:20:18.509178 2025] [security2:error] [pid 3350:tid 3350] [client 45.3.49.74:17459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nhgrange.org"] [uri "/.svn/wc.db"] [unique_id "aTWNIrDvXDcYlBBZSwsF1wAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 13:59:11 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.49.74 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.49.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 08:59:04.767959 2025] [security2:error] [pid 19813:tid 19813] [client 45.3.49.74:10085] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "larkinplumbing.net"] [uri "/.svn/wc.db"] [unique_id "aTQ2qCUyHtvp-PRb08nslQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-11-30 13:09:57 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 182.188.69.40

🇻🇳 103.199.16.90

🇮🇳 103.194.243.199

🇺🇸 52.203.152.231

🇬🇧 35.203.210.51

🇰🇪 197.232.165.234

🇿🇦 197.185.147.54

🇺🇸 165.154.173.148

🇺🇸 162.216.149.18

🇧🇩 103.224.55.51

🇧🇩 103.108.91.202

🇮🇩 103.99.214.211

🇻🇳 103.78.1.33

🇱🇹 81.30.98.44

🇫🇷 51.178.114.78

🇬🇧 45.133.173.88

🇺🇸 20.64.105.6

🇹🇳 197.0.99.123

🇰🇷 169.214.142.35

🇿🇦 160.119.55.135