JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.38.17

45.3.38.17 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.38.17

Whois 45.3.38.17

IP Abuse Reports for 45.3.38.17:

This IP address has been reported a total of 45 times from 18 distinct sources. 45.3.38.17 was first reported on October 5th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NxtGenIT	2026-09-21 16:55:34 (3 weeks ago)	CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html HTTP/1.1" 302 -,	Brute-Force
🇫🇷 Sklurk	2026-08-08 03:32:39 (2 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-29 02:57:49 (2 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-23 04:17:00 (3 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-17 05:48:10 (3 months ago)	Web App Attack	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (6 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-01-13 18:37:50 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.17 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 13:37:43.752209 2026] [security2:error] [pid 710000:tid 710000] [client 45.3.38.17:40995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.backstore.com"] [uri "/.env"] [unique_id "aWaQ924bqNATcIAZCW3W0gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-09 06:04:11 (10 months ago)	botnet	DDoS Attack
🇦🇺 MAGIC	2025-12-07 00:04:09 (10 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-11-30 13:09:56 (10 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-11-25 06:15:01 (10 months ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:17:14 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.17 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:17:05.018550 2025] [security2:error] [pid 3160:tid 3160] [client 45.3.38.17:18731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mutualdrivingschool.com"] [uri "/.git/HEAD"] [unique_id "aSUtwRgAXYGEBiORwT9P4gAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:26:05 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.17 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:26:01.839544 2025] [security2:error] [pid 14110:tid 14110] [client 45.3.38.17:34849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cns518.com"] [uri "/.git/HEAD"] [unique_id "aSUhyU_nH4NoGiVE7RZD5AAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:38:44 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.17 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:38:33.666339 2025] [security2:error] [pid 18082:tid 18082] [client 45.3.38.17:45457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.patanthony.com"] [uri "/.svn/wc.db"] [unique_id "aSUWqVPO1EPUAs_NgS8efgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:05:34 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.17 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:05:27.015632 2025] [security2:error] [pid 24948:tid 24948] [client 45.3.38.17:47101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.powderriverinc.com"] [uri "/.git/HEAD"] [unique_id "aSUO53GJV-1TlSJrdVKgjAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.190.186

🇷🇺 188.234.165.67

🇺🇸 152.32.206.38

🇦🇱 141.98.140.93

🇨🇳 111.198.53.188

🇮🇳 103.114.64.80

🇷🇺 95.26.248.107

🇺🇸 91.230.168.11

🇹🇼 61.222.211.114

🇸🇬 45.78.204.254

🇮🇩 36.37.73.242

🇧🇪 207.175.76.72

🇨🇦 201.79.62.57

🇨🇳 183.78.181.124

🇦🇷 181.24.82.156

🇨🇭 179.43.158.119

🇬🇧 172.239.117.185

🇮🇶 169.224.7.57

🇺🇸 162.216.150.92

🇺🇸 151.240.102.64