JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.3.38.158

45.3.38.158 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 32%: ?

32%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.3.38.158

Whois 45.3.38.158

IP Abuse Reports for 45.3.38.158:

This IP address has been reported a total of 25 times from 15 distinct sources. 45.3.38.158 was first reported on October 8th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 thedreamer.nl	2026-08-20 01:20:51 (4 days ago)	45.3.38.158 - - [20/Aug/2026:03:18:44 +0200] "GET /.git/objects/36/fbba17002d627269646765732f4e41435 ... show more 45.3.38.158 - - [20/Aug/2026:03:18:44 +0200] "GET /.git/objects/36/fbba17002d627269646765732f4e4143536f75 HTTP/1.1" 404 118 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" 45.3.38.158 - - [20/Aug/2026:03:18:50 +0200] "GET /.git/objects/17/8177e787786414243b92940afb77685b083d5b HTTP/1.1" 404 118 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" 45.3.38.158 - - [20/Aug/2026:03:19:26 +0200] "GET /.git/objects/22/aead4ad2573bcc4effc5ee97a3b7984949c2f3 HTTP/1.1" 404 118 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" 45.3.38.158 - - [20/Aug/2026:03:19:36 +0200] "GET /.git/objects/8e/293e0f2a248a7156e4ee189f3a6f028ba21eb9 HTTP/1.1" 404 118 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" ... show less	Brute-Force Bad Web Bot
🇩🇪 Jochen Pretli	2026-08-14 12:24:40 (1 week ago)	connection to honeypot	Email Spam Port Scan
🇩🇪 Avocuard	2026-08-14 08:51:02 (1 week ago)	Honeypot Triggered \| Method: GET \| URL: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64 ... show more Honeypot Triggered \| Method: GET \| URL: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| Accept-Lang: en-US,en;q=0.9 \| Accept-Enc: gzip show less	Bad Web Bot Web App Attack
🇺🇸 LSPCCU	2026-08-09 07:08:12 (2 weeks ago)	TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: cowrie, ssh-telne ... show more TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: cowrie, ssh-telnet. Context: Attacker IP 45.3.38.158 observed using HTTP client fingerprint 'HTTP Client: git/2.40.0' 5 times when connecting to a healthcare sector honeypot between 2026-08-09 05:54 and 2026-08-09 05:54 UTC. show less	Hacking
🇳🇿 Antinson	2026-08-08 18:34:15 (2 weeks ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇫🇷 Sklurk	2026-08-05 01:28:01 (2 weeks ago)	Web App Attack	Web App Attack
🇺🇸 mnsf	2026-05-31 20:05:57 (2 months ago)	Abuse Detected (3)	Brute-Force Web App Attack
Anonymous	2026-03-01 19:30:37 (5 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 TPI-Abuse	2025-12-08 08:48:16 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 03:48:09.932484 2025] [security2:error] [pid 8309:tid 8309] [client 45.3.38.158:46997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crossfiregold.com"] [uri "/.git/HEAD"] [unique_id "aTaQyWnfZZdgxKfnTutp3wAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 12:12:31 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 07:12:25.373320 2025] [security2:error] [pid 15660:tid 15660] [client 45.3.38.158:37187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americancryonics.org"] [uri "/.git/HEAD"] [unique_id "aTVvKTMTrxTF9eWC7HgVUgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 10:55:11 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:55:06.970754 2025] [security2:error] [pid 19024:tid 19024] [client 45.3.38.158:42067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cleanbuildingservices.com"] [uri "/.svn/wc.db"] [unique_id "aTK6Clv_6PnjqI5HlSrXcwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 10:33:27 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:33:22.570546 2025] [security2:error] [pid 12611:tid 12611] [client 45.3.38.158:37173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wplusw.com"] [uri "/.git/HEAD"] [unique_id "aTK08mfxIKX0UV5TbjSgBAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 05:59:40 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 00:59:32.332174 2025] [security2:error] [pid 13884:tid 13884] [client 45.3.38.158:17801] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casalaaldehuela.com"] [uri "/.svn/wc.db"] [unique_id "aTJ0xIBIa0l5xi0Su3tV6gAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:23:21 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:23:10.580869 2025] [security2:error] [pid 24060:tid 24060] [client 45.3.38.158:53845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.businesssympathycards.com"] [uri "/.env"] [unique_id "aSVZXlz6LwJkZZgCdiUmTgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:08:28 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.3.38.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:08:24.597691 2025] [security2:error] [pid 1976:tid 1976] [client 45.3.38.158:25771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "e-taxicaller.com"] [uri "/.git/HEAD"] [unique_id "aSU5yFovgdUIYS-PZVAfOAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 121.29.84.229

🇳🇱 91.92.42.11

🇺🇸 74.235.100.0

🇺🇿 213.230.78.34

🇦🇷 190.5.222.65

🇨🇷 190.2.220.226

🇳🇱 176.65.149.220

🇮🇩 160.19.145.165

🇵🇰 154.80.66.194

🇵🇰 119.73.19.167

🇧🇩 103.7.122.9

🇨🇮 102.209.223.51

🇬🇦 102.142.99.73

🇳🇬 102.90.98.105

🇺🇦 91.207.245.214

🇫🇷 89.226.205.223

🇩🇪 77.83.39.94

🇺🇸 69.164.214.243

🇵🇸 62.16.65.147

🇺🇦 46.37.202.221