JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.3.50.49

Activity Trending Down

Abuse Confidence Score

15% Caution

29 reports

15 reporters · latest 1 month ago

ISP: 3xK Tech GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS200373
Domain Name: 3xktech.cloud
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

29 from 15 distinct reporters

First reported

October 2nd 2024

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇨🇭 Switzerland 1 🇩🇪 Germany 1 🇲🇽 Mexico 1

Most common categories Web App Attack 3 Bad Web Bot 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-10-08 07:33:58 UTC · (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.08 is noted in report timestamp	Hacking Brute-Force
Anonymous	2025-10-07 15:56:20 UTC · (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report timestamp	Hacking Brute-Force
Anonymous	2025-10-06 06:10:57 UTC · (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.10.06 is noted in report timestamp	Hacking Brute-Force
Anonymous	2025-10-05 23:27:20 UTC · (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.05 is noted in report timestamp	Hacking Brute-Force
Anonymous	2025-10-04 06:56:09 UTC · (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.04 is noted in report timestamp	Hacking Brute-Force
Anonymous	2025-09-30 22:17:09 UTC · (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.30 is noted in report timestamp	Hacking Brute-Force
Anonymous	2025-09-27 13:58:17 UTC · (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.09.27 is noted in report timestamp	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-03-03 23:50:49 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.50.49 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 18:50:45.251599 2025] [security2:error] [pid 3438274:tid 3438274] [client 45.3.50.49:40751] [cl ... show more (mod_security) mod_security (id:225170) triggered by 45.3.50.49 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 18:50:45.251599 2025] [security2:error] [pid 3438274:tid 3438274] [client 45.3.50.49:40751] [client 45.3.50.49] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|slusarczyk.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "slusarczyk.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z8ZAVeeyHYk4h6Cq7XtEFgAAAAQ"], referer: https://slusarczyk.com show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-02-16 06:11:47 UTC · (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-01-08 17:51:10 UTC · (1 year ago)	wordpress-trap	Web App Attack
🇺🇸 ne1for23	2025-01-07 17:01:22 UTC · (1 year ago)	45.3.50.49 - - [07/Jan/2025:17:01:22 +0000] "POST /wp-login.php HTTP/1.1" 403 555 "https://domain-removed.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"	Web App Attack
🇺🇸 TPI-Abuse	2024-12-16 03:54:12 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.3.50.49 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 15 22:54:06.432395 2024] [security2:error] [pid 32638:tid 32638] [client 45.3.50.49:43083] [client ... show more (mod_security) mod_security (id:225170) triggered by 45.3.50.49 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 15 22:54:06.432395 2024] [security2:error] [pid 32638:tid 32638] [client 45.3.50.49:43083] [client 45.3.50.49] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|texaslawman.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "texaslawman.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1-kXm5xQt9SjD75OpmnpAAAAAM"], referer: https://texaslawman.net show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 XICTRON	2024-12-12 11:30:42 UTC · (1 year ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 TPI-Abuse	2024-10-02 05:07:55 UTC · (2 years ago)	(mod_security) mod_security (id:225170) triggered by 45.3.50.49 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 01:07:50.057565 2024] [security2:error] [pid 2982:tid 2982] [client 45.3.50.49:30599] [client 4 ... show more (mod_security) mod_security (id:225170) triggered by 45.3.50.49 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 01:07:50.057565 2024] [security2:error] [pid 2982:tid 2982] [client 45.3.50.49:30599] [client 45.3.50.49] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|greenmountainfeeds.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "greenmountainfeeds.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZvzVJocSnpvMATSQV61rsQAAAAQ"], referer: https://greenmountainfeeds.com show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇦 185.15.38.8

🇰🇷 175.209.156.146

🇮🇳 122.165.162.117

🇵🇱 109.205.211.203

🇫🇷 88.142.46.185

🇩🇪 64.89.163.144

254.196.92.156

🇮🇳 203.145.165.2

🇦🇿 188.253.209.61

🇩🇪 172.68.194.233

🇺🇸 150.107.36.236

🇺🇸 129.203.177.241

🇩🇪 69.5.169.111

🇺🇸 52.188.192.39

🇺🇸 20.40.218.159

🇹🇼 221.120.0.166

🇳🇱 195.178.110.151

🇧🇷 179.116.38.68

🇩🇪 172.68.195.166

🇺🇸 147.185.132.168