JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.138.94.247

3.138.94.247 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-138-94-247.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.138.94.247

Whois 3.138.94.247

IP Abuse Reports for 3.138.94.247:

This IP address has been reported a total of 37 times from 31 distinct sources. 3.138.94.247 was first reported on May 15th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-07-08 06:29:13 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 octageeks.com	2026-05-18 04:07:38 (3 months ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 octageeks.com	2026-05-17 04:07:05 (3 months ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇫🇷 masterguru	2026-05-17 01:28:52 (3 months ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 3.138.94.247 (US/United States/ec2-3-138-94-2 ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 3.138.94.247 (US/United States/ec2-3-138-94-247.us-east-2.compute.amazonaws.com): 1 in the last 3600 secs (0-197) show less	Hacking
Anonymous	2026-05-16 23:44:56 (3 months ago)	WordPress Brute Force	Brute-Force
🇮🇹 eliosbrocchi	2026-05-16 22:38:12 (3 months ago)	2026-05-17T00:38:11.296134+02:00 thunderchild wordpress(www.crislio.com)[1844839]: Immediately block ... show more 2026-05-17T00:38:11.296134+02:00 thunderchild wordpress(www.crislio.com)[1844839]: Immediately block connections from 3.138.94.247 ... show less	VPN IP
🇨🇿 plzenskypruvodce.cz	2026-05-16 22:35:09 (3 months ago)	2026-05-17T00:35:09.167982+02:00 web wordpress(varhanykolin.cz)[3839403]: Immediately block connecti ... show more 2026-05-17T00:35:09.167982+02:00 web wordpress(varhanykolin.cz)[3839403]: Immediately block connections from 3.138.94.247 ... show less	Brute-Force
🇫🇷 tecnicorioja	2026-05-16 22:01:05 (3 months ago)	wp-login attack [16/May/2026:20:43:43	Brute-Force Web App Attack
🇲🇹 Malta	2026-05-16 20:18:05 (3 months ago)	3.138.94.247 - - [16/May/2026:22:18:05 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; CrOS ... show more 3.138.94.247 - - [16/May/2026:22:18:05 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇨🇦 polycoda	2026-05-16 18:32:51 (3 months ago)	📄 Probes for wp-login.php and other inexistent URLs	Hacking Web App Attack
🇫🇷 masterguru	2026-05-16 18:29:40 (3 months ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 3.138.94.247 (US/United States/ec2-3-138-94-2 ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 3.138.94.247 (US/United States/ec2-3-138-94-247.us-east-2.compute.amazonaws.com): 1 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 TPI-Abuse	2026-05-16 15:22:56 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 3.138.94.247 (ec2-3-138-94-247.us-east-2.comput ... show more (mod_security) mod_security (id:225170) triggered by 3.138.94.247 (ec2-3-138-94-247.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 11:22:51.941414 2026] [security2:error] [pid 19880:tid 19880] [client 3.138.94.247:39042] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|abcollie.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abcollie.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agiLyyBRiVpAlSWAxHODBgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-05-16 15:15:36 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇮 6kilowatti	2026-05-16 14:34:05 (3 months ago)	3.138.94.247 - - [16/May/2026:17:34:04 +0300] "GET /graphql?password-protected=login&redirect_to=htt ... show more 3.138.94.247 - - [16/May/2026:17:34:04 +0300] "GET /graphql?password-protected=login&redirect_to=https%3A%2F%2Flvi-viitala.6kw.fi%2Fgraphql HTTP/1.1" 404 1529 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-05-16 14:26:03 (3 months ago)	Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/2.0, GET /wp-login.php HTTP/2.0, [2/ ... show more Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/2.0, GET /wp-login.php HTTP/2.0, [2/2] done show less	Hacking Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 68.145.136.239

🇸🇪 188.150.160.117

🇫🇮 147.185.133.135

🇷🇺 95.174.127.55

🇺🇸 45.131.195.229

🇺🇸 216.73.160.86

🇦🇷 181.118.65.135

🇺🇦 91.225.162.113

🇹🇼 61.230.51.19

🇺🇸 38.132.109.100

🇬🇧 37.156.64.182

🇦🇷 201.176.82.176

🇺🇸 189.104.241.222

🇦🇷 181.47.126.134

🇫🇷 93.1.105.109

🇲🇲 37.111.127.42

🇦🇷 200.59.88.158

🇦🇷 200.59.88.76

🇩🇪 193.124.20.226

🇦🇷 181.45.46.66