JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.139.101.216

3.139.101.216 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-139-101-216.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.139.101.216

Whois 3.139.101.216

IP Abuse Reports for 3.139.101.216:

This IP address has been reported a total of 30 times from 24 distinct sources. 3.139.101.216 was first reported on June 18th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 [email protected]	2026-06-18 21:29:51 (20 hours ago)	Attack attempt against Interwebbi servers; Port Scan detected from 3.139.101.216 (US/United States ... show more Attack attempt against Interwebbi servers; Port Scan detected from 3.139.101.216 (US/United States/ec2-3-139-101-216.us-east-2.compute.amazonaws.com). 5 hits in the last 406 seconds; IP: 3.139.101.216; Ports: *; Direction: 0; Trigger: PS_LIMIT; show less	Brute-Force
🇫🇷 LRNP	2026-06-18 20:06:33 (21 hours ago)	_:80 3.139.101.216 - - [18/Jun/2026:20:06:00 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (M ... show more _:80 3.139.101.216 - - [18/Jun/2026:20:06:00 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" ... show less	Bad Web Bot Web App Attack
🇺🇸 MPL	2026-06-18 19:25:19 (22 hours ago)	tcp ports: 80,2077 (4 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-06-18 19:14:52 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.139.101.216 (ec2-3-139-101-216.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 3.139.101.216 (ec2-3-139-101-216.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 15:14:48.679984 2026] [security2:error] [pid 21343:tid 21343] [client 3.139.101.216:57012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.20"] [uri "/.git/HEAD"] [unique_id "ajRDqIrM5D1LuxsVgYtDaQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 18:46:51 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.139.101.216 (ec2-3-139-101-216.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 3.139.101.216 (ec2-3-139-101-216.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 14:46:47.424992 2026] [security2:error] [pid 12835:tid 12846] [client 3.139.101.216:36874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.123"] [uri "/.git/HEAD"] [unique_id "ajQ9F92Cl2uTBxaTNdOyZgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-06-18 18:34:10 (23 hours ago)	tcp ports: 2083,2096 (2 or more attempts)	Port Scan
🇫🇷 Version Net	2026-06-18 18:03:39 (23 hours ago)	IPS Detection: HTPasswd.Access	Hacking
🇳🇱 pearbright	2026-06-18 17:24:36 (1 day ago)	[Thu Jun 18 17:24:32.756021 2026] [php:error] [pid 647100:tid 647100] [client 3.139.101.216:49800] s ... show more [Thu Jun 18 17:24:32.756021 2026] [php:error] [pid 647100:tid 647100] [client 3.139.101.216:49800] script '/var/www/html/phpinfo.php' not found or unable to stat [Thu Jun 18 17:24:35.541430 2026] [php:error] [pid 647096:tid 647096] [client 3.139.101.216:49842] script '/var/www/html/config.php' not found or unable to stat ... show less	Web App Attack
Anonymous	2026-06-18 16:46:45 (1 day ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇦🇺 2000cn.com.au	2026-06-18 16:33:25 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 MPL	2026-06-18 16:17:30 (1 day ago)	tcp ports: 2078,2077 (2 or more attempts)	Port Scan
🇹🇷 muratkaya665	2026-06-18 15:39:44 (1 day ago)	IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: HTPasswd.Access. Dest Por ... show more IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: HTPasswd.Access. Dest Port: 80. Service: HTTP. Message: web_server: HTPasswd.Access. show less	Hacking
🇺🇸 kelliwic.net	2026-06-18 15:09:17 (1 day ago)	Port scan detected (F2B)	Port Scan
🇺🇸 TPI-Abuse	2026-06-18 15:08:49 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.139.101.216 (ec2-3-139-101-216.us-east-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 3.139.101.216 (ec2-3-139-101-216.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 11:08:44.874570 2026] [security2:error] [pid 16613:tid 16613] [client 3.139.101.216:34998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.76"] [uri "/.git/HEAD"] [unique_id "ajQJ_A_dWwz0vCz6E1wclgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 Esko	2026-06-18 14:24:06 (1 day ago)	3.139.101.216 - - [18/Jun/2026:14:24:06 +0000] "GET /.git/logs/HEAD HTTP/1.1" 488 0 "-" "Mozilla/5.0 ... show more 3.139.101.216 - - [18/Jun/2026:14:24:06 +0000] "GET /.git/logs/HEAD HTTP/1.1" 488 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" show less	Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.189.244.233

🇽🇰 91.187.113.68

🇺🇸 193.56.116.53

🇨🇭 185.211.94.76

🇺🇸 184.105.247.247

🇺🇸 173.91.46.151

🇺🇸 162.216.149.11

🇭🇰 152.32.212.224

🇳🇱 91.92.40.8

🇪🇸 79.144.83.140

🇭🇰 45.120.216.232

🇪🇸 212.227.99.59

🇹🇭 183.88.209.93

🇦🇺 115.130.226.103

🇦🇲 91.103.248.58

🇺🇸 66.132.195.108

🇭🇰 47.239.55.49

🇮🇳 34.14.214.227

🇫🇮 172.253.83.216

🇻🇳 160.191.165.249