JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.50.134

45.3.50.134 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.50.134

Whois 45.3.50.134

IP Abuse Reports for 45.3.50.134:

This IP address has been reported a total of 23 times from 15 distinct sources. 45.3.50.134 was first reported on October 7th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-30 01:04:43 (3 weeks ago)	Web App Attack	Web App Attack
🇺🇸 mnsf	2026-06-04 19:09:18 (2 months ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇺🇸 nowyouknow	2026-05-07 06:56:05 (3 months ago)	(From [email protected]) Hey, Just a quick note I just opened a free giveaway and saved you a s ... show more (From [email protected]) Hey, Just a quick note I just opened a free giveaway and saved you a spot. Use this link before it fills: https://suniljaindvg.systeme.io/6850adaf ~10 seconds. Hope you grab a spot, Sunil Moten (Sunil T Jain) P.S. Don’t wait around: https://suniljaindvg.systeme.io/6850adaf If you don’t want to receive messages from me, please submit the form on my site show less	Phishing Web Spam
🇱🇻 garmtech.com	2026-05-01 17:14:26 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-14.45.3.50.134.web-spammers ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-14.45.3.50.134.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 big-cloud.nl	2026-02-06 13:44:38 (6 months ago)	Try to access /xmlrpc.php	Web App Attack
🇮🇹 VHosting	2025-12-23 19:10:09 (8 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-26 08:39:20 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.50.134 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.50.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:39:17.404805 2025] [security2:error] [pid 19373:tid 19373] [client 45.3.50.134:33857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.vangentholding.com"] [uri "/.env"] [unique_id "aSa8tZI15Kz-yLQTaQyXpQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:22:35 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.50.134 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.50.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:22:30.463069 2025] [security2:error] [pid 3365542:tid 3365615] [client 45.3.50.134:46129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.learndoexplore.com"] [uri "/.git/HEAD"] [unique_id "aSZkZgivzmMXD2VG4A7_bwAAANY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:54:13 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.50.134 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.50.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:54:07.879532 2025] [security2:error] [pid 3314480:tid 3314480] [client 45.3.50.134:15579] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.healthy4youllc.com"] [uri "/.env"] [unique_id "aSPk76el1uynF936IVWcZAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 02:48:50 (9 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-02 21:15:35 (9 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:26:02	Port Scan Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-10-30 15:32:14 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 45.3.50.134 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.50.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 11:32:06.580941 2025] [security2:error] [pid 16008:tid 16008] [client 45.3.50.134:34571] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|yogitunes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "yogitunes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQOE9oPLR2hZTgbtk7PeFAAAAAw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-29 10:19:09 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 45.3.50.134 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 45.3.50.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 06:19:03.876994 2025] [security2:error] [pid 9796:tid 9796] [client 45.3.50.134:52163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|wplusw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wplusw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQHqF8RAph1GUJhCsxvaBAAAABI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-10-27 15:58:06 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 wil.com	2025-10-14 05:19:30 (10 months ago)	GlobalProtect login attempts with user skdilworth.	VPN IP Brute-Force

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 116.206.89.14

🇫🇷 91.231.89.69

🇺🇸 91.230.168.255

🇨🇦 85.217.149.26

🇲🇾 47.250.83.23

🇳🇱 45.156.87.93

🇦🇷 190.196.253.124

🇮🇳 122.168.194.41

🇧🇩 103.240.4.35

🇱🇹 77.90.185.5

🇹🇭 49.49.4.219

🇸🇪 46.59.92.80

🇺🇸 31.132.55.197

🇨🇦 20.48.147.90

🇨🇳 211.143.37.66

🇺🇸 195.184.76.187

🇩🇪 194.187.176.208

🇷🇴 193.32.162.84

🇧🇷 191.177.175.236

🇳🇱 185.242.226.81