JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.38.101

45.3.38.101 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 20%: ?

20%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.38.101

Whois 45.3.38.101

IP Abuse Reports for 45.3.38.101:

This IP address has been reported a total of 45 times from 22 distinct sources. 45.3.38.101 was first reported on November 4th 2024, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 sgofferj	2026-07-03 21:14:13 (3 hours ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇮🇹 Francesco Ippoliti	2026-07-03 19:54:28 (5 hours ago)	[Jul 3 21:54:27] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:201@154 ... show more [Jul 3 21:54:27] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '45.3.38.101:21470' (callid: 5a81178aa7a0b95852b0619c19d48717) - No matching endpoint found [Jul 3 21:54:27] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '45.3.38.101:21470' (callid: 5a81178aa7a0b95852b0619c19d48717) - No matching endpoint found ... show less	Brute-Force Port Scan
🇫🇷 Sklurk	2026-06-23 03:44:12 (1 week ago)	Web App Attack	Web App Attack
🇮🇳 liveaspankaj	2026-02-20 23:22:11 (4 months ago)	DDoS attack: 132 requests in 5m (GET / or repair.php).	DDoS Attack
🇳🇱 homeshowdomain.nl	2026-02-19 22:59:43 (4 months ago)	Auto-ban: >3000 req/min op 2026-02-19	Web App Attack SSH Hacking
🇺🇸 myagent.site	2026-02-19 02:53:02 (4 months ago)	Blocking for trying to access an exploit file: /api/.env	Hacking
🇺🇸 TPI-Abuse	2026-02-19 01:49:17 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.101 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 20:49:11.112370 2026] [security2:error] [pid 7614:tid 7614] [client 45.3.38.101:31581] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karinproctor.com"] [uri "/.env"] [unique_id "aZZsF8fSHcPZWQYiMLMQTgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 00:29:40 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.101 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 19:29:33.235466 2026] [security2:error] [pid 32200:tid 32200] [client 45.3.38.101:33575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "voodooshop.com"] [uri "/frontend/.env"] [unique_id "aZZZbfi5jWiOZ_dzfRCnIwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 23:09:19 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.101 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 18:09:13.086200 2026] [security2:error] [pid 14628:tid 14628] [client 45.3.38.101:52173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "veneye.com"] [uri "/.env.production"] [unique_id "aZZGmQ7Ta2E_I_yEa-2MQgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-18 21:16:29 (4 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 18:47:11 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.101 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:47:05.908334 2026] [security2:error] [pid 32589:tid 32589] [client 45.3.38.101:24413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thommesen.net"] [uri "/v2/.git/config"] [unique_id "aZYJKafDVyu0TcDJaDi91QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-02-18 17:16:49 (4 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 Petros Stefanakis	2026-02-18 15:54:05 (4 months ago)	(mod_security) mod_security triggered on hostname [redacted] 45.3.38.101 (US/United States/-)	SQL Injection
🇺🇸 TPI-Abuse	2026-02-18 12:27:38 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.101 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:27:31.446533 2026] [security2:error] [pid 5925:tid 5925] [client 45.3.38.101:28455] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webjemm.com"] [uri "/config/.env"] [unique_id "aZWwM74qIaWr0nKXB2fcowAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 11:55:27 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.101 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 06:55:18.927023 2026] [security2:error] [pid 24340:tid 24340] [client 45.3.38.101:41247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "warnock.ws"] [uri "/backend/.env"] [unique_id "aZWopsn176yEHMssvKnQKAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.91

🇳🇱 192.42.116.45

🇷🇴 185.102.217.68

🇺🇸 144.172.116.30

🇹🇿 41.93.28.12

🇳🇱 31.14.32.8

🇮🇳 172.83.83.194

🇱🇹 91.108.123.224

🇺🇸 65.49.1.79

🇺🇸 44.106.138.104

🇲🇽 187.161.140.41

🇺🇸 167.172.158.11

🇧🇷 138.36.22.167

🇫🇷 85.217.140.46

🇳🇱 45.148.10.200

🇳🇱 45.148.10.157

🇺🇸 44.101.221.203

🇺🇸 20.169.107.26

🇺🇸 20.15.200.45

🇺🇸 216.25.89.101