JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.138.68.160

3.138.68.160 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 70%: ?

70%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-138-68-160.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.138.68.160

Whois 3.138.68.160

IP Abuse Reports for 3.138.68.160:

This IP address has been reported a total of 14 times from 12 distinct sources. 3.138.68.160 was first reported on December 4th 2024, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 mail.avx.gr	2026-07-24 12:13:56 (11 hours ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 3.138.68.160 - - [24/Jul/2026:15:13:55 +0300] "GE ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 3.138.68.160 - - [24/Jul/2026:15:13:55 +0300] "GET /.env.txt HTTP/1.1" 403 6284 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇳🇱 Site.eu	2026-07-24 12:09:39 (11 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 grassau.com	2026-07-24 11:51:33 (11 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 3.138.68.160 (US/United States/Ohio/Col ... show more (mod_security) mod_security triggered on hostname [redacted] 3.138.68.160 (US/United States/Ohio/Columbus/ec2-3-138-68-160.us-east-2.compute.amazonaws.com) show less	SQL Injection
🇪🇸 robotstxt	2026-07-24 11:41:20 (11 hours ago)	3.138.68.160 - - [24/Jul/2026:11:40:52 +0000] "GET /mail/phpinfo.php HTTP/1.1" 404 13268 "-" rt="0.0 ... show more 3.138.68.160 - - [24/Jul/2026:11:40:52 +0000] "GET /mail/phpinfo.php HTTP/1.1" 404 13268 "-" rt="0.078" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="3.138.68.160" h="changelog-ms.wpfuturo.com" sn="changelog-ms.wpfuturo.com" ru="/mail/phpinfo.php" u="/index.php" ucs="-" ua="unix:/var/run/php/changelogms82.sock" us="404" uct="0.000" urt="0.078" 3.138.68.160 - - [24/Jul/2026:11:40:53 +0000] "GET /webmail/phpinfo.php HTTP/1.1" 404 13268 "-" rt="0.069" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="3.138.68.160" h="changelog-ms.wpfuturo.com" sn="changelog-ms.wpfuturo.com" ru="/webmail/phpinfo.php" u="/index.php" ucs="-" ua="unix:/var/run/php/changelogms82.sock" us="404" uct="0.000" urt="0.068" 3.138.68.160 - - [24/Jul/2026:11:40:52 +0000] "GET /mail/phpinfo.php HTTP/1.1" 404 13268 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-24 11:07:58 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.138.68.160 (ec2-3-138-68-160.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.138.68.160 (ec2-3-138-68-160.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 07:07:52.650530 2026] [security2:error] [pid 215176:tid 215176] [client 3.138.68.160:54022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chandlerowen.com"] [uri "/.git/config"] [unique_id "amNHiPicWmw4qYRnepq13wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 9LEVEL.com.br	2026-07-24 10:01:22 (13 hours ago)	Blocked by Fail2ban for traefik-404 abuse	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 08:31:00 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.138.68.160 (ec2-3-138-68-160.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.138.68.160 (ec2-3-138-68-160.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 04:30:52.991309 2026] [security2:error] [pid 4009550:tid 4009550] [client 3.138.68.160:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chaitanyaconsult.in"] [uri "/.git/config"] [unique_id "amMivLccRUtiqMzFTMl46QAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-24 08:27:38 (15 hours ago)	IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ... show more IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478) show less	Hacking
🇺🇸 mnsf	2026-07-24 08:05:33 (15 hours ago)	Scanning/Probing (25)	Brute-Force Web App Attack
🇫🇷 masterguru	2026-07-24 07:24:41 (16 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇫🇷 Octopuce	2026-07-24 06:48:03 (16 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇩🇪 FeG Deutschland	2026-07-24 05:23:56 (18 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 04:07:55 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.138.68.160 (ec2-3-138-68-160.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.138.68.160 (ec2-3-138-68-160.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 00:07:48.405231 2026] [security2:error] [pid 3370716:tid 3370716] [client 3.138.68.160:56552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cffragrances.iee-usa.com"] [uri "/.git/config"] [unique_id "amLlFKhQJrpKC9tlHWihdAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2024-12-04 12:28:15 (1 year ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 202.29.225.158

🇳🇱 185.93.89.71

🇫🇮 157.180.60.102

🇺🇸 135.237.122.43

🇺🇸 104.236.53.110

🇮🇳 103.137.16.162

🇫🇷 85.217.140.18

🇺🇸 8.230.116.39

🇵🇪 161.132.42.84

🇫🇷 149.202.63.35

🇨🇳 121.229.9.110

🇰🇷 112.217.164.58

🇧🇩 103.94.134.160

🇲🇲 103.59.163.133

🇩🇪 85.216.81.75

🇺🇸 52.53.238.93

🇳🇱 45.148.10.152

🇺🇸 2a10:3c0:5:0:1:24:0:5

🇭🇰 223.197.178.95

🇹🇭 202.29.220.126