AbuseIPDB » 3.112.83.83
3.112.83.83
This IP was reported 8 times. Confidence of
Abuse
is 35% : ?
ISP
Amazon Data Services Japan
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-3-112-83-83.ap-northeast-1.compute.amazonaws.com
Domain Name
amazon.com
Country
🇯🇵
Japan
City
Tokyo, Tokyo
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 3.112.83.83 :
This IP address has been reported a total of
8
times from
6 distinct
sources.
3.112.83.83 was first reported on
May 18th 2026 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
Lino Project
2026-07-17 20:38:44
(2 days ago)
3.112.83.83 - - [17/Jul/2026:22:38:43 +0200] "GET /config.json HTTP/1.1" 403 359 "-" "Mozilla/5.0 (c ...
show more
3.112.83.83 - - [17/Jul/2026:22:38:43 +0200] "GET /config.json HTTP/1.1" 403 359 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 20:37:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 3.112.83.83 (ec2-3-112-83-83.ap-northeast-1.com ...
show more
(mod_security) mod_security (id:210492) triggered by 3.112.83.83 (ec2-3-112-83-83.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 16:37:52.838738 2026] [security2:error] [pid 442628:tid 442628] [client 3.112.83.83:44278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.missyshinoski.info"] [uri "/wp-config.old"] [unique_id "alqSoCrOpqjUtmwyjOsa5AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-07-17 20:26:59
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇺🇸
kadour
2026-07-17 20:01:21
(2 days ago)
[Fri Jul 17 15:01:18.899679 2026] [proxy_fcgi:error] [pid 1008:tid 1157] [client 3.112.83.83:59782] ...
show more
[Fri Jul 17 15:01:18.899679 2026] [proxy_fcgi:error] [pid 1008:tid 1157] [client 3.112.83.83:59782] AH01071: Got error 'Primary script unknown'
[Fri Jul 17 15:01:18.990006 2026] [proxy_fcgi:error] [pid 1008:tid 1159] [client 3.112.83.83:59676] AH01071: Got error 'Primary script unknown'
[Fri Jul 17 15:01:19.298030 2026] [proxy_fcgi:error] [pid 5645:tid 5693] [client 3.112.83.83:59698] AH01071: Got error 'Primary script unknown'
[Fri Jul 17 15:01:20.086177 2026] [proxy_fcgi:error] [pid 967:tid 1097] [client 3.112.83.83:59524] AH01071: Got error 'Primary script unknown'
[Fri Jul 17 15:01:20.221504 2026] [proxy_fcgi:error] [pid 1008:tid 1167] [client 3.112.83.83:59802] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack
🇫🇷
masterguru
2026-07-17 19:18:44
(2 days ago)
Restricted File Access Attempt. Matched phrase "config.yml" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇮🇹
VHosting
2026-05-19 00:30:03
(2 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 23:14:21
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 3.112.83.83 (ec2-3-112-83-83.ap-northeast-1.com ...
show more
(mod_security) mod_security (id:210492) triggered by 3.112.83.83 (ec2-3-112-83-83.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 19:14:17.770951 2026] [security2:error] [pid 24073:tid 24073] [client 3.112.83.83:59936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wordpresskb.karenbernsteinlaw.com"] [uri "/.git/config"] [unique_id "agudSeAtoSMtivuWFiZYeQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 22:40:11
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 3.112.83.83 (ec2-3-112-83-83.ap-northeast-1.com ...
show more
(mod_security) mod_security (id:210492) triggered by 3.112.83.83 (ec2-3-112-83-83.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 18:40:05.167122 2026] [security2:error] [pid 8767:tid 8767] [client 3.112.83.83:48486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wordpress.martinka.org"] [uri "/.git/config"] [unique_id "aguVRf6QYF0pxYfaUjTJLQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: