JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.50.54

45.3.50.54 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.50.54

Whois 45.3.50.54

IP Abuse Reports for 45.3.50.54:

This IP address has been reported a total of 45 times from 16 distinct sources. 45.3.50.54 was first reported on September 26th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-12 06:05:54 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-09 00:54:54 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-23 03:52:50 (2 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-20 00:15:33 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 webgobe	2026-06-16 17:54:44 (2 months ago)	wew-Joomla User : try to access forms...	Hacking
Anonymous	2026-06-16 15:00:38 (2 months ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/1412/form_key/YOmJvofD8WYeBGLR/ \| UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇩🇪 LRob	2026-04-05 07:30:03 (4 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-02-18 04:42:27 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-42.45.3.50.54.web-spammers. ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-42.45.3.50.54.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2025-12-26 04:18:43 (8 months ago)	ASWEEDCO WEBFORM SPAM 45.3.50.54 (45.3.50.54)	Web Spam
🇮🇹 VHosting	2025-12-24 03:55:58 (8 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-12-06 18:19:49 (8 months ago)	botnet	DDoS Attack
Anonymous	2025-12-02 12:44:29 (8 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-27 22:44:15 (9 months ago)	(mod_security) mod_security (id:210740) triggered by 45.3.50.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210740) triggered by 45.3.50.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 17:43:36.579167 2025] [security2:error] [pid 13002:tid 13002] [client 45.3.50.54:16361] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.powerastronomy.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.powerastronomy.com"] [uri "/Runequest/CGI/guestbook"] [unique_id "aSjUGFwy0_urAayYxIDY6wAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 10:51:17 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.50.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.50.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:51:11.837064 2025] [security2:error] [pid 11442:tid 11442] [client 45.3.50.54:41395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.haywardcarpentry.com"] [uri "/.env"] [unique_id "aSbbn1YxkSmV6-4VXhItzQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:04:00 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.50.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.50.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:03:51.008137 2025] [security2:error] [pid 2650:tid 2653] [client 45.3.50.54:58855] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.dubarch.com"] [uri "/.env"] [unique_id "aSaYR6cpXMNW-93ob63OWgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 212.132.112.12

🇧🇪 209.85.221.104

🇧🇩 202.84.34.85

🇧🇷 200.223.25.122

🇺🇸 198.74.50.114

🇩🇪 151.243.11.17

🇺🇸 136.107.133.28

🇨🇳 101.126.67.70

🇲🇿 98.97.151.49

🇺🇸 71.172.40.69

🇳🇱 45.148.10.151

🇺🇸 34.55.115.239

🇺🇸 8.228.72.198

🇮🇷 194.5.176.212

🇺🇸 136.112.14.93

🇺🇸 136.107.227.169

🇨🇳 124.72.180.231

🇧🇩 103.138.250.204

🇧🇩 103.124.249.235

🇰🇷 59.26.33.16