JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.38.158

45.3.38.158 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 30%: ?

30%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.38.158

Whois 45.3.38.158

IP Abuse Reports for 45.3.38.158:

This IP address has been reported a total of 25 times from 15 distinct sources. 45.3.38.158 was first reported on October 8th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 thedreamer.nl	2026-08-20 01:20:51 (6 days ago)	45.3.38.158 - - [20/Aug/2026:03:18:44 +0200] "GET /.git/objects/36/fbba17002d627269646765732f4e41435 ... show more 45.3.38.158 - - [20/Aug/2026:03:18:44 +0200] "GET /.git/objects/36/fbba17002d627269646765732f4e4143536f75 HTTP/1.1" 404 118 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" 45.3.38.158 - - [20/Aug/2026:03:18:50 +0200] "GET /.git/objects/17/8177e787786414243b92940afb77685b083d5b HTTP/1.1" 404 118 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" 45.3.38.158 - - [20/Aug/2026:03:19:26 +0200] "GET /.git/objects/22/aead4ad2573bcc4effc5ee97a3b7984949c2f3 HTTP/1.1" 404 118 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" 45.3.38.158 - - [20/Aug/2026:03:19:36 +0200] "GET /.git/objects/8e/293e0f2a248a7156e4ee189f3a6f028ba21eb9 HTTP/1.1" 404 118 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" ... show less	Brute-Force Bad Web Bot
🇩🇪 Jochen Pretli	2026-08-14 12:24:40 (1 week ago)	connection to honeypot	Email Spam Port Scan
🇩🇪 Avocuard	2026-08-14 08:51:02 (1 week ago)	Honeypot Triggered \| Method: GET \| URL: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64 ... show more Honeypot Triggered \| Method: GET \| URL: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| Accept-Lang: en-US,en;q=0.9 \| Accept-Enc: gzip show less	Bad Web Bot Web App Attack
🇺🇸 LSPCCU	2026-08-09 07:08:12 (2 weeks ago)	TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: cowrie, ssh-telne ... show more TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: cowrie, ssh-telnet. Context: Attacker IP 45.3.38.158 observed using HTTP client fingerprint 'HTTP Client: git/2.40.0' 5 times when connecting to a healthcare sector honeypot between 2026-08-09 05:54 and 2026-08-09 05:54 UTC. show less	Hacking
🇳🇿 Antinson	2026-08-08 18:34:15 (2 weeks ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇫🇷 Sklurk	2026-08-05 01:28:01 (3 weeks ago)	Web App Attack	Web App Attack
🇺🇸 mnsf	2026-05-31 20:05:57 (2 months ago)	Abuse Detected (3)	Brute-Force Web App Attack
Anonymous	2026-03-01 19:30:37 (5 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 TPI-Abuse	2025-12-08 08:48:16 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 03:48:09.932484 2025] [security2:error] [pid 8309:tid 8309] [client 45.3.38.158:46997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crossfiregold.com"] [uri "/.git/HEAD"] [unique_id "aTaQyWnfZZdgxKfnTutp3wAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 12:12:31 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 07:12:25.373320 2025] [security2:error] [pid 15660:tid 15660] [client 45.3.38.158:37187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americancryonics.org"] [uri "/.git/HEAD"] [unique_id "aTVvKTMTrxTF9eWC7HgVUgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 10:55:11 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:55:06.970754 2025] [security2:error] [pid 19024:tid 19024] [client 45.3.38.158:42067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cleanbuildingservices.com"] [uri "/.svn/wc.db"] [unique_id "aTK6Clv_6PnjqI5HlSrXcwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 10:33:27 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:33:22.570546 2025] [security2:error] [pid 12611:tid 12611] [client 45.3.38.158:37173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wplusw.com"] [uri "/.git/HEAD"] [unique_id "aTK08mfxIKX0UV5TbjSgBAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 05:59:40 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 00:59:32.332174 2025] [security2:error] [pid 13884:tid 13884] [client 45.3.38.158:17801] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casalaaldehuela.com"] [uri "/.svn/wc.db"] [unique_id "aTJ0xIBIa0l5xi0Su3tV6gAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:23:21 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:23:10.580869 2025] [security2:error] [pid 24060:tid 24060] [client 45.3.38.158:53845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.businesssympathycards.com"] [uri "/.env"] [unique_id "aSVZXlz6LwJkZZgCdiUmTgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:08:28 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:08:24.597691 2025] [security2:error] [pid 1976:tid 1976] [client 45.3.38.158:25771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "e-taxicaller.com"] [uri "/.git/HEAD"] [unique_id "aSU5yFovgdUIYS-PZVAfOAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 186.96.145.241

🇸🇬 165.22.254.150

🇺🇸 104.225.250.214

🇭🇰 199.45.155.73

🇭🇰 199.45.155.66

🇧🇷 177.188.228.138

🇫🇷 172.71.130.185

🇵🇰 161.248.202.88

🇳🇱 160.119.66.49

🇺🇸 159.89.128.182

🇦🇷 148.227.69.197

🇨🇳 111.26.106.117

🇺🇸 104.131.114.30

🇺🇸 91.230.168.82

🇳🇱 81.19.216.76

🇸🇬 47.84.197.51

🇺🇸 45.79.153.72

🇺🇸 18.218.126.98

🇬🇧 217.154.38.181

🇭🇰 199.45.155.106