JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.38.221

45.3.38.221 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 35%: ?

35%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.38.221

Whois 45.3.38.221

IP Abuse Reports for 45.3.38.221:

This IP address has been reported a total of 41 times from 22 distinct sources. 45.3.38.221 was first reported on October 11th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇷 bubausluge	2026-09-13 15:14:11 (2 days ago)	Blocked by https://aegis.hr — WAF: ModSec rule match - (MITRE T1190), 1 attempts, Period: 2026-09-13 ... show more Blocked by https://aegis.hr — WAF: ModSec rule match - (MITRE T1190), 1 attempts, Period: 2026-09-13 14:52:55 to 2026-09-13 14:52:55 show less	Web App Attack Hacking
🇫🇷 dynamix	2026-09-10 16:07:15 (5 days ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇺🇸 SX Communications	2026-09-05 12:40:52 (1 week ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 45.3.38.221: traffic from this addr ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 45.3.38.221: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-09-03 12:37:53 (1 week ago)	45.3.38.221 - - [03/Sep/2026:14:37:38 +0200] "GET /wp-login.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 ( ... show more 45.3.38.221 - - [03/Sep/2026:14:37:38 +0200] "GET /wp-login.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 drewf.ink	2026-09-02 09:13:56 (1 week ago)	[09:13] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [09:13] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇺🇸 drewf.ink	2026-09-01 17:19:09 (2 weeks ago)	[17:19] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [17:19] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇩🇪 FeG Deutschland	2026-08-05 07:48:21 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇫🇷 Sklurk	2026-07-29 00:31:04 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-17 08:02:16 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2026-04-27 20:16:46 (4 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇩🇪 LRob	2026-03-04 01:00:38 (6 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇫🇷 Tilellit.PRO	2026-02-22 10:52:39 (6 months ago)	Fail2Ban banned 45.3.38.221 for security violations in jail wp-armour. Log: 2026/02/22 10:52:39 [err ... show more Fail2Ban banned 45.3.38.221 for security violations in jail wp-armour. Log: 2026/02/22 10:52:39 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.3.38.221 \| Target: wplogin" , client: 45.3.38.221, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇮🇹 VHosting	2026-02-18 22:16:48 (6 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-30 18:53:13 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.221 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 13:53:03.803008 2025] [security2:error] [pid 4361:tid 4361] [client 45.3.38.221:17341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.allcostaricarentals.com"] [uri "/.svn/wc.db"] [unique_id "aVQfj8bNsI80N9CrTKFTmAAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 11:19:20 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.221 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 06:19:16.159393 2025] [security2:error] [pid 2934607:tid 2934626] [client 45.3.38.221:13895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "charteredeconomist.com"] [uri "/.git/HEAD"] [unique_id "aVJjtCMYB56TY8mpxxS6SQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 192.253.248.215

🇺🇦 172.68.238.94

🇲🇦 81.192.46.49

🇱🇹 2a02:4780:c:7638::1

🇦🇷 216.244.224.79

🇧🇪 198.235.24.244

🇫🇷 161.97.169.200

🇺🇸 159.89.51.220

🇺🇸 52.224.109.126

🇬🇧 37.10.113.213

🇺🇸 35.255.192.136

🇺🇸 23.234.77.90

🇺🇸 3.82.209.93

🇺🇸 207.90.244.28

🇨🇴 200.118.61.4

🇹🇼 198.235.24.117

🇨🇳 101.43.209.134

🇫🇷 91.196.152.81

🇵🇹 80.243.81.198

🇱🇹 77.90.185.20