JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.35.238

45.3.35.238 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 36%: ?

36%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.35.238

Whois 45.3.35.238

IP Abuse Reports for 45.3.35.238:

This IP address has been reported a total of 46 times from 22 distinct sources. 45.3.35.238 was first reported on February 9th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 vanderhost	2026-09-01 06:04:54 (2 days ago)	[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/uploads/2019 ... show more [Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/uploads/2019/04/enable_site_search_for_google_analytics_and_wordpress.png via rule: /wp-content show less	Web App Attack Bad Web Bot
🇲🇹 Malta	2026-08-31 22:39:03 (2 days ago)	45.3.35.238 - - [01/Sep/2026:00:39:03 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x8 ... show more 45.3.35.238 - - [01/Sep/2026:00:39:03 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64; rv:119.0) Gecko/20100101 Firefox/119.0" show less	Hacking Web App Attack
Anonymous	2026-08-31 11:16:30 (3 days ago)	Web attack blocked by Wordfence on mergel.nu (1 hit). Reported by CRMON.	Web App Attack
🇮🇹 VHosting	2026-08-29 03:50:03 (5 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇭🇺 bcsaba	2026-08-29 03:43:24 (5 days ago)	CMS (WordPress or Joomla) login attempt. 45.3.35.238 - - [29/Aug/2026:05:43:21 +0200] "POST /wp-logi ... show more CMS (WordPress or Joomla) login attempt. 45.3.35.238 - - [29/Aug/2026:05:43:21 +0200] "POST /wp-login.php HTTP/1.1" 200 3503 "https://REDACTED/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" show less	Hacking Brute-Force Web App Attack
🇫🇷 Sklurk	2026-08-17 04:26:09 (2 weeks ago)	Web App Attack	Web App Attack
🇪🇸 librebit	2026-06-24 02:06:02 (2 months ago)	Brute force	Brute-Force
🇨🇭 backslash	2026-06-13 20:36:01 (2 months ago)	block ruleset 51D5331ECDCF70C2C6410C0D0EEB5F69B17B5F56	Bad Web Bot
🇦🇺 RedBear IT	2026-03-26 10:00:37 (5 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 mnsf	2026-02-19 15:05:21 (6 months ago)	Scanning/Probing (23)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 03:39:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.35.238 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.35.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:39:47.012699 2026] [security2:error] [pid 11818:tid 11818] [client 45.3.35.238:15109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kildarafarms.com"] [uri "/api/.env"] [unique_id "aZaGA_zkfFBWcUZ1OE6SNAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 03:01:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.35.238 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.35.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:01:01.949777 2026] [security2:error] [pid 3285:tid 3285] [client 45.3.35.238:29177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kenmalone.com"] [uri "/frontend/.env"] [unique_id "aZZ87Y3-7SxJNTtZJ4-_FgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 02:33:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.35.238 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.35.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 21:33:19.012483 2026] [security2:error] [pid 26723:tid 26723] [client 45.3.35.238:50597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kcmastercleaners.com"] [uri "/backup/.git/config"] [unique_id "aZZ2bx84ZVJns6vlWI3aLgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 22:51:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.35.238 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.35.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 17:51:45.122507 2026] [security2:error] [pid 19492:tid 19492] [client 45.3.35.238:27121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vandiprojects.com"] [uri "/app/.git/config"] [unique_id "aZZCgRYPSRdyPqOV9TGGbQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 20:14:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.35.238 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.35.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 15:14:43.501499 2026] [security2:error] [pid 28280:tid 28280] [client 45.3.35.238:64973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "transparentforest.com"] [uri "/.env.staging"] [unique_id "aZYds_badW7Ag_ej9jsuKgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.49

🇭🇰 168.76.131.178

🇩🇪 167.94.145.16

🇩🇪 104.140.188.22

🇷🇴 94.52.16.156

🇩🇪 89.245.25.9

🇨🇭 84.226.77.174

🇧🇷 205.210.31.218

🇵🇰 182.178.55.169

🇿🇦 172.253.244.209

🇧🇷 45.183.113.241

🇺🇸 20.3.167.85

🇭🇰 199.45.154.176

🇯🇵 163.227.180.2

🇷🇺 95.67.181.242

🇸🇪 46.59.88.86

🇧🇷 205.210.31.193

🇬🇧 194.50.235.148

🇫🇮 172.253.95.158

🇺🇸 137.184.195.168