JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.48.158

45.3.48.158 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.48.158

Whois 45.3.48.158

IP Abuse Reports for 45.3.48.158:

This IP address has been reported a total of 25 times from 10 distinct sources. 45.3.48.158 was first reported on February 16th 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-10 06:01:10 (4 weeks ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-01-10 00:09:14 (4 months ago)	wordpress-trap	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:18 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇳🇱 i-turnradio.nl	2025-12-24 01:04:58 (5 months ago)	2025-12-24 @ 02:04:58 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack
Anonymous	2025-12-04 05:29:31 (6 months ago)	botnet	DDoS Attack
Anonymous	2025-11-27 08:09:50 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.27 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 07:45:55 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.48.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.48.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:45:39.920321 2025] [security2:error] [pid 8276:tid 8276] [client 45.3.48.158:37555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.monteriggioni.montepulciano.org"] [uri "/.svn/wc.db"] [unique_id "aSQNI3n4vQp6CODUl7S4RwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:15:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.48.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.48.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:14:50.422969 2025] [security2:error] [pid 21628:tid 21628] [client 45.3.48.158:54571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.partybuswhistler.com"] [uri "/.git/HEAD"] [unique_id "aSP32vSxhZMx9OnprkuW6wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:36:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.48.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.48.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:35:48.111160 2025] [security2:error] [pid 3965260:tid 3965364] [client 45.3.48.158:47799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.aapm.info"] [uri "/.git/HEAD"] [unique_id "aSPgpKyiyKH59MCrZuEUDAAAAgw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-16 10:15:35 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.48.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.48.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 05:15:31.974543 2025] [security2:error] [pid 18891:tid 18891] [client 45.3.48.158:28561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lisagilinger.com"] [uri "/.env"] [unique_id "aRmkQx4uf3aWYVl3ZvKZ0QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-16 07:10:50 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.16 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.16 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-14 12:24:41 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-11 21:14:15 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.11 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-09 11:04:31 (6 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.09 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.09 is noted in report timestamp show less	Hacking Brute-Force
🇨🇿 lp	2025-11-07 23:52:00 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.3.48.158 2025-11-08T00:31:30+01:00 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.3.48.158 2025-11-08T00:31:30+01:00 vpn Access-Reject '[email protected]' station: 45.3.48.158 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.254.212.59

🇺🇸 162.216.149.129

🇺🇸 74.82.47.36

🇺🇸 4.246.117.137

🇲🇽 187.174.238.116

🇧🇷 186.204.58.116

🇪🇨 186.47.138.55

🇮🇳 185.100.212.141

🇨🇳 183.184.120.160

🇮🇶 176.222.60.228

🇺🇸 162.216.150.168

🇮🇳 103.135.228.121

🇧🇷 45.184.96.166

🇨🇴 152.231.30.77

🇨🇳 120.235.115.161

🇵🇰 111.92.145.50

🇮🇳 103.171.12.42

🇮🇩 103.74.5.44

🇦🇩 93.123.109.101

🇸🇬 47.79.10.17