JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.38.88

45.3.38.88 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 60%: ?

60%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.38.88

Whois 45.3.38.88

IP Abuse Reports for 45.3.38.88:

This IP address has been reported a total of 45 times from 26 distinct sources. 45.3.38.88 was first reported on December 12th 2024, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-03 04:58:15 (17 hours ago)	45.3.38.88 - - [02/Jul/2026:22:58:15 -0600] "POST /xmlrpc.php HTTP/1.1" 200 413 "https://duckduckgo. ... show more 45.3.38.88 - - [02/Jul/2026:22:58:15 -0600] "POST /xmlrpc.php HTTP/1.1" 200 413 "https://duckduckgo.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" ... show less	Web App Attack
🇫🇷 pm33	2026-06-28 04:03:27 (5 days ago)	Wordpress login attempts	Brute-Force
🇺🇸 puddleduck	2026-06-26 21:53:00 (1 week ago)	Login attempt	Spoofing Brute-Force Hacking
Anonymous	2026-06-24 11:41:29 (1 week ago)	[server.tmg.gr] httpd-login-spray-site: sites=cardiorenal2020.gr; logs=/var/log/httpd/domains/cardio ... show more [server.tmg.gr] httpd-login-spray-site: sites=cardiorenal2020.gr; logs=/var/log/httpd/domains/cardiorenal2020.gr.log; samples=site_wide=true \| distinct_ips=13 \| /wp-login.php show less	Hacking Web App Attack
🇫🇮 6kilowatti	2026-06-23 09:36:37 (1 week ago)	45.3.38.88 - [23/Jun/2026:12:36:36 +0300] "POST /wp-login.php HTTP/1.1" 404 12288 "https://oh6ah.fi/ ... show more 45.3.38.88 - [23/Jun/2026:12:36:36 +0300] "POST /wp-login.php HTTP/1.1" 404 12288 "https://oh6ah.fi/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" 45.3.38.88 - - [23/Jun/2026:12:36:37 +0300] "POST /wp-login.php HTTP/1.1" 404 12994 "https://oh6ah.fi/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" ... show less	Web App Attack
🇫🇷 pm33	2026-06-23 08:29:48 (1 week ago)	Wordpress login attempts	Brute-Force
🇬🇷 setupgr	2026-06-22 16:55:32 (1 week ago)	(mod_security) mod_security (id:900001) triggered by 45.3.38.88 (US/United States/Virginia/Ashburn/- ... show more (mod_security) mod_security (id:900001) triggered by 45.3.38.88 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 22 19:55:27.747197 2026] [security2:error] [pid 1934813:tid 1934929] [client 45.3.38.88:30291] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: doityourself.gr"] [severity "CRITICAL"] [tag "security"] [hostname "doityourself.gr"] [uri "/wp-login.php"] [unique_id "ajlo__VHAYoCTqtXWiWuYAAAAIc"], referer: https://doityourself.gr/wp-login.php show less	Port Scan
🇬🇷 setupgr	2026-06-22 15:27:53 (1 week ago)	(mod_security) mod_security (id:900001) triggered by 45.3.38.88 (US/United States/Virginia/Ashburn/- ... show more (mod_security) mod_security (id:900001) triggered by 45.3.38.88 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 22 18:27:48.412552 2026] [security2:error] [pid 2059052:tid 2059086] [client 45.3.38.88:32059] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.pankoskal.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.pankoskal.gr"] [uri "/wp-login.php"] [unique_id "ajlUdFNPFwkSkEkc_m2A9AAAAQc"], referer: https://mail.pankoskal.gr/wp-login.php show less	Port Scan
🇩🇪 georgengelmann	2026-06-22 07:47:34 (1 week ago)	Failed login attempt for administrator	Brute-Force Web App Attack
🇬🇷 setupgr	2026-06-21 00:59:56 (1 week ago)	(mod_security) mod_security (id:900001) triggered by 45.3.38.88 (US/United States/Virginia/Ashburn/- ... show more (mod_security) mod_security (id:900001) triggered by 45.3.38.88 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 21 03:59:51.918908 2026] [security2:error] [pid 785068:tid 785095] [client 45.3.38.88:35447] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.setworldup.com"] [severity "CRITICAL"] [tag "security"] [hostname "mail.setworldup.com"] [uri "/wp-login.php"] [unique_id "ajc3hxGXBK2iHtemAo8EbQAAAQA"], referer: https://mail.setworldup.com/wp-login.php show less	Port Scan
🇪🇸 librebit	2026-06-18 08:25:34 (2 weeks ago)	Brute force	Brute-Force
🇱🇻 garmtech.com	2026-06-16 23:08:21 (2 weeks ago)	IM360 WAF: Prohibited WordPress username login/registration	Web App Attack
🇫🇷 ELYAZ	2026-06-15 20:12:05 (2 weeks ago)	(y4) Failed scan -byebye- from 45.3.38.88 (US/United States/-): (CF_ENABLE)	Hacking
🇩🇪 F242	2026-06-14 19:08:37 (2 weeks ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 dtorrer	2026-06-14 12:59:11 (2 weeks ago)	Brute-force general attack.	Brute-Force

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 217.12.75.108

🇺🇸 162.243.138.30

🇨🇳 144.123.76.33

🇵🇰 103.73.102.53

🇸🇪 90.230.212.29

🇵🇰 210.56.12.205

🇭🇰 152.32.185.141

🇩🇪 69.5.169.96

🇰🇷 20.194.4.121

🇨🇳 203.83.234.180

🇬🇧 178.128.38.74

🇩🇪 167.94.146.37

🇺🇸 159.223.98.12

🇰🇭 110.235.254.213

🇨🇳 106.12.26.158

🇸🇬 101.47.158.56

🇮🇶 65.20.141.202

🇭🇰 13.70.1.178

🇨🇳 223.73.78.216

🇦🇷 200.32.52.150