JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.135.201.16

3.135.201.16 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 80%: ?

80%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-135-201-16.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.135.201.16

Whois 3.135.201.16

IP Abuse Reports for 3.135.201.16:

This IP address has been reported a total of 21 times from 13 distinct sources. 3.135.201.16 was first reported on July 24th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 vaia.cloud	2026-07-26 08:30:02 (15 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇫🇷 Octopuce	2026-07-26 08:14:00 (15 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇺🇸 mnsf	2026-07-26 08:08:09 (15 hours ago)	Scanning/Probing (22)	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-07-26 07:33:59 (16 hours ago)	IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ... show more IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478) show less	Hacking
🇩🇪 Petros Stefanakis	2026-07-26 06:47:27 (17 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 3.135.201.16 (US/United States/ec2-3-13 ... show more (mod_security) mod_security triggered on hostname [redacted] 3.135.201.16 (US/United States/ec2-3-135-201-16.us-east-2.compute.amazonaws.com) show less	SQL Injection
🇱🇻 garmtech.com	2026-07-26 06:27:51 (17 hours ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
🇫🇷 masterguru	2026-07-26 06:26:04 (17 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇩🇪 grassau.com	2026-07-26 06:20:01 (17 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 3.135.201.16 (US/United States/Ohio/Col ... show more (mod_security) mod_security triggered on hostname [redacted] 3.135.201.16 (US/United States/Ohio/Columbus/ec2-3-135-201-16.us-east-2.compute.amazonaws.com) show less	SQL Injection
Anonymous	2026-07-26 06:06:51 (17 hours ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan
🇳🇱 Site.eu	2026-07-26 05:47:56 (18 hours ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 homeshowdomain.nl	2026-07-24 22:00:20 (2 days ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-24 12:10:54 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.135.201.16 (ec2-3-135-201-16.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.135.201.16 (ec2-3-135-201-16.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 08:10:48.673119 2026] [security2:error] [pid 3948696:tid 3948696] [client 3.135.201.16:52214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "savannah-house.com"] [uri "/.git/config"] [unique_id "amNWSCIK4GkScSCdYPAQMAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 11:27:36 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.135.201.16 (ec2-3-135-201-16.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.135.201.16 (ec2-3-135-201-16.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 07:27:31.816749 2026] [security2:error] [pid 602006:tid 602006] [client 3.135.201.16:42114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saudigreenrecycling.com"] [uri "/.git/config"] [unique_id "amNMI3XmyrP9M3SWZclbHAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 10:41:48 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.135.201.16 (ec2-3-135-201-16.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.135.201.16 (ec2-3-135-201-16.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:41:42.991573 2026] [security2:error] [pid 549448:tid 549456] [client 3.135.201.16:55450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sattraffic.com"] [uri "/.git/config"] [unique_id "amNBZvjjKskB4y0s_3nxrgAAAIU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 08:45:11 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.135.201.16 (ec2-3-135-201-16.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.135.201.16 (ec2-3-135-201-16.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 04:45:06.886597 2026] [security2:error] [pid 615828:tid 615847] [client 3.135.201.16:53938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sasintegrated.com"] [uri "/.git/config"] [unique_id "amMmEnxuguFBODJesR1RKwAAAJA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 2.57.121.25

🇺🇸 2620:171:f3:f0:9999::233

🇲🇽 189.191.74.115

🇺🇸 165.154.218.137

🇭🇰 156.225.1.99

🇮🇩 103.112.5.7

🇫🇷 85.217.140.35

🇬🇧 57.129.138.54

🇵🇰 39.38.248.239

🇨🇳 222.187.115.202

🇹🇼 198.235.24.123

🇲🇽 187.170.224.116

🇧🇷 177.22.167.176

🇯🇴 176.29.160.63

🇨🇦 148.113.130.66

🇩🇪 130.12.180.196

🇵🇰 101.50.83.146

🇺🇸 66.132.172.213

🇲🇾 47.250.135.156

🇧🇷 45.171.178.69