JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.129.172.46

3.129.172.46 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-129-172-46.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.129.172.46

Whois 3.129.172.46

IP Abuse Reports for 3.129.172.46:

This IP address has been reported a total of 50 times from 35 distinct sources. 3.129.172.46 was first reported on July 5th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-18 02:09:23 (1 hour ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 ghostwarriors	2026-07-18 01:20:11 (2 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-07-17 22:08:00 (5 hours ago)	[SatJul1800:07:58.0458592026][security2:error][pid2314252:tid2314260][client3.129.172.46:0]ModSecuri ... show more [SatJul1800:07:58.0458592026][security2:error][pid2314252:tid2314260][client3.129.172.46:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".backup\"][severity\"ERROR\"][hostname\"sisuconsulting.net\"][uri\"/.env.backup\"][unique_id\"alqnvng8-O7cO1z-MC6gKwAAAMU\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-17 22:01:35 (5 hours ago)	Auto-ban: >3000 req/min op 2026-07-17	Web App Attack SSH Hacking
🇦🇺 paulshipley.com.au	2026-07-17 21:34:53 (5 hours ago)	[Sat Jul 18 07:34:52.357065 2026] [security2:error] [pid 698602] [client 3.129.172.46:24844] [client ... show more [Sat Jul 18 07:34:52.357065 2026] [security2:error] [pid 698602] [client 3.129.172.46:24844] [client 3.129.172.46] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "rjryanpartners.com.au"] [uri "/.env.local"] [unique_id "alqf_E3JWYDmko1fqrRL1QAAAAU"], referer: https://www.google.com/search?q=rjryanpartners.com.au ... show less	Web App Attack
🇩🇪 piticu iuli	2026-07-17 18:41:10 (8 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 3.129.172.46 (US/United States/ec2-3-12 ... show more (mod_security) mod_security triggered on hostname [redacted] 3.129.172.46 (US/United States/ec2-3-129-172-46.us-east-2.compute.amazonaws.com) show less	SQL Injection
🇧🇪 taivas.nl	2026-07-17 16:32:02 (11 hours ago)	Fake_GoogleBot	Bad Web Bot SSH
Anonymous	2026-07-17 15:22:05 (12 hours ago)	Bot / scanning and/or hacking attempts: HEAD /.env.old HTTP/1.1, HEAD /.env.dist HTTP/1.1, HEAD /.py ... show more Bot / scanning and/or hacking attempts: HEAD /.env.old HTTP/1.1, HEAD /.env.dist HTTP/1.1, HEAD /.pypirc HTTP/1.1, HEAD /secrets.yaml HTTP/1.1, HEAD /.env.production.local HTTP/1.1, HEAD /.netrc HTTP/1.1, HEAD /config.yml HTTP/1.1, HEAD /.vscode/settings.json HTTP/1.1, HEAD /.env.development.local HTTP/1.1, HEAD /.claude/.credentials.json HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 gadix	2026-07-17 15:13:09 (12 hours ago)	[17/Jul/2026:17:13:09.027823 +0200] alpGhcqxSpkmS_A64agcJAAAAI8 3.129.172.46 53424 127.0.0.1 7081 [1 ... show more [17/Jul/2026:17:13:09.027823 +0200] alpGhcqxSpkmS_A64agcJAAAAI8 3.129.172.46 53424 127.0.0.1 7081 [17/Jul/2026:17:13:09.029296 +0200] alpGhcqxSpkmS_A64agcJgAAAJQ 3.129.172.46 53438 127.0.0.1 7081 [17/Jul/2026:17:13:09.035994 +0200] alpGhcOVqrrb1EcoUz6ESQAAAE0 3.129.172.46 53456 127.0.0.1 7081 ... show less	Web App Attack
🇩🇪 LRob	2026-07-17 14:11:20 (13 hours ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: /.env.backup \| 5 distinct paths \| UA: Mozilla/5. ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: /.env.backup \| 5 distinct paths \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 show less	Hacking
🇳🇱 e.fierstra	2026-07-17 12:27:40 (15 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇦🇺 AWW-Admin	2026-07-17 12:14:57 (15 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 3.129.172.46 (US/United States/ec2-3-12 ... show more (mod_security) mod_security triggered on hostname [redacted] 3.129.172.46 (US/United States/ec2-3-129-172-46.us-east-2.compute.amazonaws.com) show less	SQL Injection
Anonymous	2026-07-17 12:04:02 (15 hours ago)	Web attack	Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-07-17 11:45:06 (15 hours ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 10:32:11 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.129.172.46 (ec2-3-129-172-46.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.129.172.46 (ec2-3-129-172-46.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 06:32:08.026072 2026] [security2:error] [pid 16080:tid 16080] [client 3.129.172.46:16950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "antiradares.net"] [uri "/.env.local"] [unique_id "aloEqFmHqxHjK6B_AFDxvgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.231.246.16

🇲🇽 201.138.165.213

🇹🇼 198.235.24.91

🇦🇴 193.163.125.123

🇨🇳 183.250.52.220

🇮🇳 172.232.108.36

🇩🇪 172.71.172.71

🇩🇪 172.71.144.43

🇺🇸 162.216.150.182

🇸🇬 162.158.108.28

🇮🇩 139.255.254.163

🇻🇳 120.72.98.5

🇭🇰 118.26.153.102

🇮🇩 103.16.116.249

🇺🇸 74.125.184.147

🇬🇧 35.203.211.161

🇬🇧 35.203.210.126

🇧🇪 34.156.20.224

🇫🇷 198.23.161.254

🇸🇪 193.183.171.187