JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.124.115.92

3.124.115.92 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 49%: ?

49%

ISP	A100 ROW GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-124-115-92.eu-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.124.115.92

Whois 3.124.115.92

IP Abuse Reports for 3.124.115.92:

This IP address has been reported a total of 13 times from 9 distinct sources. 3.124.115.92 was first reported on June 1st 2022, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MatCat	2026-07-18 09:34:59 (9 hours ago)	Banned by fail2ban: apache-webprobe	Port Scan Bad Web Bot
🇵🇱 Jacqb	2026-07-16 15:12:40 (2 days ago)	Adres potencjalnie niebezpieczny	Brute-Force Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-16 13:47:58 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.124.115.92 (ec2-3-124-115-92.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.124.115.92 (ec2-3-124-115-92.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 09:47:52.048907 2026] [security2:error] [pid 2613:tid 2613] [client 3.124.115.92:47380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heinzmail.com"] [uri "/.git/config"] [unique_id "aljhCAzjxNNoznJUeit-pgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-16 10:09:06 (2 days ago)	Bot / scanning and/or hacking attempts: GET /.env.prod HTTP/1.1, GET /.env~ HTTP/1.1, GET /.env.prep ... show more Bot / scanning and/or hacking attempts: GET /.env.prod HTTP/1.1, GET /.env~ HTTP/1.1, GET /.env.preprod HTTP/1.1, GET /.env2 HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.dist HTTP/1.1, GET /.env.ci HTTP/1.1, GET /.env.stage HTTP/1.1, POST / HTTP/1.1, GET /.env.docker HTTP/1.1, GET /.env.swp HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.env.live HTTP/1.1, GET /.env.uat HTTP/1.1, GET /.env1 HTTP/1.1, GET /.env HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 06:10:06 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.124.115.92 (ec2-3-124-115-92.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.124.115.92 (ec2-3-124-115-92.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 02:10:00.869554 2026] [security2:error] [pid 9322:tid 9322] [client 3.124.115.92:34888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heavenonearthonline.net"] [uri "/.git/config"] [unique_id "alh1uBmh-uzA8q3x9gFuqQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Savvii	2026-07-16 05:28:15 (2 days ago)	20 attempts against mh-misbehave-ban on heat	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 04:17:42 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.124.115.92 (ec2-3-124-115-92.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.124.115.92 (ec2-3-124-115-92.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 00:17:37.797637 2026] [security2:error] [pid 2215937:tid 2215937] [client 3.124.115.92:41024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heathdiesel.com"] [uri "/.git/config"] [unique_id "alhbYaJUZDgjktgRo_X2iwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 01:30:40 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.124.115.92 (ec2-3-124-115-92.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.124.115.92 (ec2-3-124-115-92.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 21:30:37.106606 2026] [security2:error] [pid 11511:tid 11585] [client 3.124.115.92:57106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heartfailuredev.howiek.com"] [uri "/.git/config"] [unique_id "alg0PfHosP7RPh0Ke06X0gAAAc8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-07-16 00:21:18 (2 days ago)	3.124.115.92 - - [16/Jul/2026:03:21:09 +0300] "GET /.env HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Macinto ... show more 3.124.115.92 - - [16/Jul/2026:03:21:09 +0300] "GET /.env HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.124.115.92 - - [16/Jul/2026:03:21:16 +0300] "GET /app/.env HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 14:04:38 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 3.124.115.92 (ec2-3-124-115-92.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.124.115.92 (ec2-3-124-115-92.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 10:04:34.776982 2026] [security2:error] [pid 1212:tid 1212] [client 3.124.115.92:37634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kevintheadventurer.org"] [uri "/.git/config"] [unique_id "aleTcrsJ_5uPZS02vmpuUwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 venus.launch.bz	2026-07-14 15:38:49 (4 days ago)	(mod_security) mod_security triggered on hostname [redacted] 3.124.115.92 (DE/Germany/ec2-3-124-115- ... show more (mod_security) mod_security triggered on hostname [redacted] 3.124.115.92 (DE/Germany/ec2-3-124-115-92.eu-central-1.compute.amazonaws.com) show less	SQL Injection
🇧🇾 lns.bz	2026-07-14 15:31:44 (4 days ago)	Too many 404 requests [BY]	Web App Attack
🇨🇭 backslash	2022-06-01 05:50:07 (4 years ago)	block ruleset bad bot: ignores robots.txt 8010B44F7E78AD8B94C70711C72D11CDE0DAC0F4	Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 120.46.18.15

🇰🇷 112.169.8.251

🇮🇳 160.187.68.132

🇺🇸 104.225.250.214

🇺🇸 91.230.168.32

🇳🇱 45.142.193.144

🇮🇩 36.91.101.203

🇬🇧 35.203.210.48

🇷🇴 2.57.122.238

🇹🇼 221.120.42.196

🇰🇷 211.48.60.35

🇮🇳 203.223.190.48

🇺🇸 162.216.149.39

🇦🇷 148.222.194.21

🇩🇪 139.28.241.54

🇨🇳 120.48.54.130

🇺🇸 104.23.201.173

🇨🇳 58.242.60.193

🇩🇪 47.91.65.106

🇹🇼 45.133.176.101