JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.38.176

45.3.38.176 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 18%: ?

18%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.38.176

Whois 45.3.38.176

IP Abuse Reports for 45.3.38.176:

This IP address has been reported a total of 48 times from 21 distinct sources. 45.3.38.176 was first reported on October 21st 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 jebla.ch	2026-09-11 18:18:22 (2 hours ago)	Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked ... show more Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked at the edge, logged, and shared with the community. Last seen 2026-09-11 18:13 UTC. show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-09-11 14:26:50 (6 hours ago)	[11/Sep/2026:17:26:50 +0300] -- 45.3.38.176 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-log ... show more [11/Sep/2026:17:26:50 +0300] -- 45.3.38.176 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-login.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-08-05 02:13:37 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-09 01:27:37 (2 months ago)	Web App Attack	Web App Attack
🇱🇻 garmtech.com	2026-02-24 11:25:13 (6 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 TPI-Abuse	2026-02-13 09:17:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.176 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 04:17:13.806247 2026] [security2:error] [pid 1734:tid 1734] [client 45.3.38.176:19185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "langkawi-boat-registration.com"] [uri "/dev/.git/config"] [unique_id "aY7sGaMwVXZVBHPun0ff6QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 Anytech	2026-02-13 09:12:25 (6 months ago)	CrowdSec detected: crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 08:46:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.176 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:46:54.844265 2026] [security2:error] [pid 7147:tid 7147] [client 45.3.38.176:64167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lakependoreillemobility.com"] [uri "/admin/.env"] [unique_id "aY7k_v2HU9iTPg31_ayBDAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 07:41:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.176 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:41:48.999217 2026] [security2:error] [pid 24215:tid 24215] [client 45.3.38.176:64785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kwcccarshow.com"] [uri "/site/.git/config"] [unique_id "aY7VvLWU1banTglRx_cq2wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 05:34:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.176 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:34:21.879122 2026] [security2:error] [pid 22436:tid 22436] [client 45.3.38.176:35111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koeckeritz.com"] [uri "/app/.env"] [unique_id "aY633REJxlx7r2mx1FDrtwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-13 05:06:51 (6 months ago)	Scanning/Probing (25)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 04:11:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.176 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:11:27.885051 2026] [security2:error] [pid 27796:tid 27796] [client 45.3.38.176:63959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingscruff.com"] [uri "/.git/config"] [unique_id "aY6kb9PIfCHfFcwl8JDEfQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 03:26:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.176 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:26:40.009448 2026] [security2:error] [pid 12776:tid 12776] [client 45.3.38.176:34059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "khtcpl.com"] [uri "/backup/.git/config"] [unique_id "aY6Z8PkynTb0AlBxxi7yRgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 02:33:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.176 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:32:58.248930 2026] [security2:error] [pid 10913:tid 10913] [client 45.3.38.176:44995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ken-parker.com"] [uri "/.env.production"] [unique_id "aY6NWq-FlFOyiGHj99v7CQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-02-12 16:17:16 (6 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 185.177.72.205

🇫🇷 185.177.72.56

🇫🇷 185.177.72.38

🇫🇷 185.177.72.29

🇧🇷 179.48.18.42

🇦🇲 176.32.193.16

🇺🇸 172.70.115.117

🇺🇸 167.99.53.123

🇺🇸 147.185.132.213

🇨🇴 138.84.41.28

🇺🇸 104.238.222.26

🇮🇩 103.59.161.64

🇺🇸 98.189.198.171

🇱🇹 77.90.185.20

🇸🇬 47.128.118.160

🇸🇬 47.128.118.154

🇺🇸 35.237.137.98

🇺🇸 34.223.63.98

🇳🇱 34.178.179.132

🇧🇪 34.52.225.199