JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.139.66.201

3.139.66.201 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 32%: ?

32%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-139-66-201.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.139.66.201

Whois 3.139.66.201

IP Abuse Reports for 3.139.66.201:

This IP address has been reported a total of 27 times from 22 distinct sources. 3.139.66.201 was first reported on December 21st 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 07:00:00 (1 month ago)	Apache probe; attempts=447; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.en ... show more Apache probe; attempts=447; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.env.bak \| /.env.ci \| /.env.dev \| /.env.development \| /.env.dist \| /.env.docker \| /.env.example \| /.env.json \| /.env.live \| /.env.local \| /.env.old \| /.env.preprod \| /.env.prod \| /.env.production \| /.env.remote \| /.env.sample \| /.env.save \| /.env.stage \| /.env.staging \| /.env.swp \| /.env.test \| /.env.txt \| /.env.uat \| /.env.yaml \| /.env.yml \| /.env~ \| /.git/.env \| /.git/config \| /actions/.env \| /admin-panel/.env \| /admin/.env \| /administrator/.env \| /angular/.env \| /ansible/.env \| /api/.env \| /api/dev/.env \| /api/staging/.env \| /api/v1/.env \| /api/v2/.env \| /api/v3/.env \| /app/.env \| /application/.env \| /apps/.env \| /assets/.env \| /aws/.env \| /azure/.env \| /backend/.env \| /backup/.env \| /backups/.env \| /beta/.env \| /bin/.env \| /bootstrap/.env \| /brevo/.env \| /build/.env \| /buildkite/.env \| /bulk/.env \| /cache/.en \| ... [204 exact paths total] show less	Web App Attack
Anonymous	2026-07-28 06:02:17 (1 month ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇮🇹 mediarama.com	2026-07-27 12:29:34 (1 month ago)	Banned by Fail2Ban	Web App Attack
🇩🇪 LRob	2026-07-27 10:12:38 (1 month ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: /.git/config \| 5 distinct paths \| UA: Mozilla/5. ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: /.git/config \| 5 distinct paths \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Hacking
🇷🇺 DZBOT	2026-07-27 09:50:10 (1 month ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-07-27 06:01:50 (1 month ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-26 09:16:02 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 milcraft.nl	2026-07-26 07:19:23 (1 month ago)	Honeypot / Fake URL Access: Access to hidden and / or intentionally fake URLs designed to detect aut ... show more Honeypot / Fake URL Access: Access to hidden and / or intentionally fake URLs designed to detect automated scanners or malicious bots. .env, .env.local, .env.production, .htpasswd Related signal: Requests targeting sensitive WordPress files or com... show less	Hacking Web App Attack
Anonymous	2026-07-26 07:06:04 (1 month ago)	Bot / scanning and/or hacking attempts: GET /public/.env HTTP/1.1, GET /.env.remote HTTP/1.1, GET /. ... show more Bot / scanning and/or hacking attempts: GET /public/.env HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.env.test HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.backup HTTP/1.1, GET /admin/.env HTTP/1.1, GET /.env.development HTTP/1.1, GET /.env.yaml HTTP/1.1, GET /app/.env HTTP/1.1, GET /.env HTTP/1.1, GET /.env.yml HTTP/1.1, GET /.env1 HTTP/1.1, GET /api/.env HTTP/1.1, GET /.env.preprod HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env.old HTTP/1.1, GET /web/.env HTTP/1.1, GET /apps/.env HTTP/1.1, POST / HTTP/1.1, GET /site/.env HTTP/1.1, GET /.env.docker HTTP/1.1, GET /.env.live HTTP/1.1 show less	Hacking Web App Attack
🇫🇷 masterguru	2026-07-26 05:41:37 (1 month ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 03:32:25 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 3.139.66.201 (ec2-3-139-66-201.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.139.66.201 (ec2-3-139-66-201.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 23:32:20.901258 2026] [security2:error] [pid 1544946:tid 1544946] [client 3.139.66.201:39852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bodyworkbydallas.com"] [uri "/.git/config"] [unique_id "amV_xM33aAuYgFFZAalZoQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-26 02:49:18 (1 month ago)	3.139.66.201 - - [26/Jul/2026:04:49:18 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ( ... show more 3.139.66.201 - - [26/Jul/2026:04:49:18 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-25 22:03:26 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-24. show less	Web App Attack SSH Hacking
Anonymous	2026-07-25 04:10:39 (1 month ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇫🇷 breubit	2026-07-25 03:31:45 (1 month ago)	3.139.66.201 - - [25/Jul/2026:05:31:45 +0200] "GET /.env HTTP/1.1" 403 554 "-" "Mozilla/5.0 (Macinto ... show more 3.139.66.201 - - [25/Jul/2026:05:31:45 +0200] "GET /.env HTTP/1.1" 403 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.47.80

🇨🇳 222.184.120.50

🇧🇷 177.174.89.99

🇨🇳 175.169.91.12

🇭🇰 165.154.224.136

🇳🇱 146.190.30.97

🇨🇳 120.71.11.120

🇰🇷 118.194.249.72

🇮🇳 103.161.3.45

🇲🇲 103.154.241.61

🇫🇷 91.231.89.87

🇺🇸 66.132.195.30

🇷🇺 45.195.221.26

🇵🇰 223.123.73.108

🇨🇳 202.110.133.54

🇨🇱 200.27.142.120

🇸🇬 193.37.32.47

🇺🇸 162.216.149.191

🇺🇸 162.216.149.122

🇦🇺 115.130.30.158