JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.38.57

45.3.38.57 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.38.57

Whois 45.3.38.57

IP Abuse Reports for 45.3.38.57:

This IP address has been reported a total of 27 times from 12 distinct sources. 45.3.38.57 was first reported on October 3rd 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇵🇱 nfsec.pl	2026-01-22 03:35:47 (4 months ago)	45.3.38.57 - - [22/Jan/2026:03:35:38 +0000] "GET /index.php?option=com_search&searchword=%20atak%20U ... show more 45.3.38.57 - - [22/Jan/2026:03:35:38 +0000] "GET /index.php?option=com_search&searchword=%20atak%20UNION%20ALL%20SELECT%20NULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%20FROM%20INFORMATION_SCHEMA.SYSTEM_USERS--%20LGMp&searchphrase=exact&ordering=newest HTTP/1.1" 403 5834 "-" "Mozilla/5.0 (X11; CrOS x86_64 14816.131.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 45.3.38.57 - - [22/Jan/2026:03:35:40 +0000] "GET /index.php?option=com_search&searchword=%20atak%20UNION%20ALL%20SELECT%20NULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%20FROM%20INFORMATION_SCHEMA.SYSTEM_USERS--%20tUHt&searchphrase=exact&ordering=newest HTTP/1.1" 403 5834 "-" "Mozilla/5.0 (X11; CrOS x86_64 14816.131.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 45.3.38.57 - - [22/Jan/2026:03:35:42 +0000] "GET /index.php?option=com_search&searchword=%20atak%20UNION%20ALL%20SELECT%20NULL%2CNULL%2CNUL ... show less	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 02:04:18 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 21:04:13.728796 2026] [security2:error] [pid 1353:tid 1353] [client 45.3.38.57:10841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.publicspeakingforwinners.com"] [uri "/.env"] [unique_id "aWruHT0bysxAA-hUZk_UTAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-03 03:07:19 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-26 12:31:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 07:31:16.158860 2025] [security2:error] [pid 18953:tid 18953] [client 45.3.38.57:11115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.artaria.us"] [uri "/.svn/wc.db"] [unique_id "aSbzFGDYEWlckum5cWPKcwAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:04:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:04:25.343432 2025] [security2:error] [pid 6186:tid 6186] [client 45.3.38.57:45445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.iconbizpromo.com"] [uri "/.git/HEAD"] [unique_id "aSZuOY_ykcNT2CyVOYK6MAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:17:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:17:09.673428 2025] [security2:error] [pid 28118:tid 28118] [client 45.3.38.57:19315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ik3co.com"] [uri "/.env"] [unique_id "aSUtxV7ZxfTlV97j5GgCJgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:06:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:06:00.990935 2025] [security2:error] [pid 24000:tid 24000] [client 45.3.38.57:25867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.crowmoonmarketing.com"] [uri "/.svn/wc.db"] [unique_id "aSUdGCC3azctjNS8IgNdggAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:24:57 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:24:48.714414 2025] [security2:error] [pid 9626:tid 9626] [client 45.3.38.57:60407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rkhindustries.com"] [uri "/.svn/wc.db"] [unique_id "aSUTcOPvuLZneGZ8WepA9AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:02:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:02:35.375566 2025] [security2:error] [pid 19323:tid 19323] [client 45.3.38.57:25583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.partybussantafe.com"] [uri "/.env"] [unique_id "aSUOO6SzoBgO3K8iDVWxNAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:37:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:37:36.241829 2025] [security2:error] [pid 17023:tid 17077] [client 45.3.38.57:20655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jazzzcatz.prismatik.com"] [uri "/.git/HEAD"] [unique_id "aSUIYL1hG8E8_fObGRhtWwAAAQ8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:18:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:18:31.829712 2025] [security2:error] [pid 31541:tid 31541] [client 45.3.38.57:40221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.jharsch.com"] [uri "/.git/HEAD"] [unique_id "aSQi51RkmH0iMms5N2sh4gAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:03:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:03:26.252771 2025] [security2:error] [pid 13942:tid 14007] [client 45.3.38.57:45363] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cipm.us.aafm.us"] [uri "/.git/HEAD"] [unique_id "aSQDPg9TCbHXOd9uq_eN-wAAAcI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:43:08 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:42:55.776370 2025] [security2:error] [pid 17939:tid 17939] [client 45.3.38.57:42299] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.noxiousthoughts.com"] [uri "/.git/HEAD"] [unique_id "aSPiT8M-lOaSu6ofl4c37QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:46:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:45:54.045729 2025] [security2:error] [pid 16856:tid 16856] [client 45.3.38.57:45065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.sharonmauldin.com"] [uri "/.git/HEAD"] [unique_id "aSPU8hAYL396RjCG0AcVfwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 130.94.12.189

🇻🇳 45.117.179.232

🇮🇩 180.252.55.1

🇺🇸 173.172.188.26

🇬🇷 149.102.246.9

🇨🇳 111.225.148.192

🇨🇳 111.225.148.143

🇭🇰 103.158.29.100

🇧🇬 79.124.62.134

🇺🇸 64.62.197.241

🇺🇸 2607:f8b0:4001:c24::12a

🇭🇰 218.255.103.194

🇩🇪 167.94.145.31

🇩🇪 167.94.145.19

🇺🇸 84.37.214.213

🇧🇬 79.124.60.146

🇺🇸 64.62.156.91

🇩🇪 213.209.159.56

🇸🇬 152.32.218.30

🇧🇷 148.227.91.88