JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.139.72.134

3.139.72.134 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 61%: ?

61%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-139-72-134.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.139.72.134

Whois 3.139.72.134

IP Abuse Reports for 3.139.72.134:

This IP address has been reported a total of 16 times from 10 distinct sources. 3.139.72.134 was first reported on January 17th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-07-26 02:48:12 (2 hours ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
🇫🇷 Octopuce	2026-07-26 02:28:29 (2 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-25 22:06:22 (6 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-24. show less	Web App Attack SSH Hacking
🇮🇹 VHosting	2026-07-25 01:40:03 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 01:37:20 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.139.72.134 (ec2-3-139-72-134.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.139.72.134 (ec2-3-139-72-134.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 21:37:13.195115 2026] [security2:error] [pid 26446:tid 26446] [client 3.139.72.134:57002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.fairfieldfarms.net"] [uri "/.git/config"] [unique_id "amQTSe-V-LPPG-Ie4NkDigAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Apache	2026-07-25 01:15:44 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.139.72.134 (US/United States/ec2-3-139-72-134 ... show more (mod_security) mod_security (id:210492) triggered by 3.139.72.134 (US/United States/ec2-3-139-72-134.us-east-2.compute.amazonaws.com): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 10:14:23 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.139.72.134 (ec2-3-139-72-134.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.139.72.134 (ec2-3-139-72-134.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:14:16.358522 2026] [security2:error] [pid 3467980:tid 3467980] [client 3.139.72.134:57240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gmacguffin.com"] [uri "/.git/config"] [unique_id "amM6-HZqdsHXGuOlZ9uYEgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-07-24 07:51:24 (1 day ago)	24 attempts against mh-misbehave-ban on glow	Brute-Force Bad Web Bot Web App Attack
🇩🇪 netclix.gr	2026-07-24 07:38:05 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 3.139.72.134 (US/United States/ec2-3-13 ... show more (mod_security) mod_security triggered on hostname [redacted] 3.139.72.134 (US/United States/ec2-3-139-72-134.us-east-2.compute.amazonaws.com): (CF_ENABLE) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-07-24 06:50:10 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.139.72.134 (ec2-3-139-72-134.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.139.72.134 (ec2-3-139-72-134.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 02:50:04.015753 2026] [security2:error] [pid 3433180:tid 3433180] [client 3.139.72.134:57462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "glolady.com"] [uri "/.git/config"] [unique_id "amMLHKHqf_7hsqwSGazWDQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 05:44:33 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.139.72.134 (ec2-3-139-72-134.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.139.72.134 (ec2-3-139-72-134.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 01:44:29.642616 2026] [security2:error] [pid 818543:tid 818543] [client 3.139.72.134:47544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globalvillagecambodia.org"] [uri "/.git/config"] [unique_id "amL7vUZ4B2Rbv4CfeVdhhwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 04:59:35 (2 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 04:50:54 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.139.72.134 (ec2-3-139-72-134.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.139.72.134 (ec2-3-139-72-134.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 00:50:50.112105 2026] [security2:error] [pid 311856:tid 311869] [client 3.139.72.134:48738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globalpartssolution.com"] [uri "/.git/config"] [unique_id "amLvKpy1q8OpGrD7Ty7rdgAAAUg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 04:14:24 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.139.72.134 (ec2-3-139-72-134.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.139.72.134 (ec2-3-139-72-134.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 00:14:20.751715 2026] [security2:error] [pid 407770:tid 407770] [client 3.139.72.134:35224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globalhotels.com.co"] [uri "/.git/config"] [unique_id "amLmnLqYhp_Zu47aSKT-KQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 03:04:06 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.139.72.134 (ec2-3-139-72-134.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.139.72.134 (ec2-3-139-72-134.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 23:04:02.518998 2026] [security2:error] [pid 1484104:tid 1484104] [client 3.139.72.134:37200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globalaccessau.com"] [uri "/.git/config"] [unique_id "amLWInNPF7G5mJHzctq_eAAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.26

🇫🇮 147.185.133.142

🇨🇳 101.126.67.255

🇳🇱 45.148.10.230

🇧🇪 35.233.57.29

🇩🇪 18.159.195.210

🇺🇸 2604:a880:400:d1:0:4:a53b:1001

🇺🇸 2604:a880:2:d1:0:1:51ec:9001

🇺🇸 207.90.244.18

🇹🇼 198.235.24.84

🇳🇱 193.176.31.225

🇳🇱 193.176.31.207

🇩🇪 193.124.20.243

🇳🇱 193.25.167.148

🇦🇷 190.4.122.228

🇺🇸 173.249.209.192

🇭🇰 165.154.4.92

🇺🇸 147.185.132.75

🇺🇸 136.56.34.147

🇮🇩 103.132.236.30