AbuseIPDB » 3.148.164.12
3.148.164.12
This IP was reported 6 times. Confidence of
Abuse
is 36% : ?
ISP
Amazon Technologies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-3-148-164-12.us-east-2.compute.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸
United States of America
City
Columbus, Ohio
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 3.148.164.12 :
This IP address has been reported a total of
6
times from
5 distinct
sources.
3.148.164.12 was first reported on
June 17th 2026 , and the most recent report was
4 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-17 21:23:06
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 3.148.164.12 (ec2-3-148-164-12.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 3.148.164.12 (ec2-3-148-164-12.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 17:23:02.595096 2026] [security2:error] [pid 10195:tid 10195] [client 3.148.164.12:60854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "azfilmguild.org"] [uri "/.git/config"] [unique_id "ajMQNrYV4l5NTvzsDTOrgAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-06-17 15:17:33
(4 days ago)
3.148.164.12 - - [17/Jun/2026:17:17:32 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ( ...
show more
3.148.164.12 - - [17/Jun/2026:17:17:32 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇩🇪
pigro
2026-06-17 14:43:58
(4 days ago)
3.148.164.12 - - [17/Jun/2026:16:43:57 +0200] "GET /app/.env/ HTTP/1.1" 404 2303 "-" "Mozilla/5.0 (W ...
show more
3.148.164.12 - - [17/Jun/2026:16:43:57 +0200] "GET /app/.env/ HTTP/1.1" 404 2303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
3.148.164.12 - - [17/Jun/2026:16:43:57 +0200] "GET /api/.env HTTP/1.1" 301 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 13:49:48
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 3.148.164.12 (ec2-3-148-164-12.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 3.148.164.12 (ec2-3-148-164-12.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 09:49:41.717178 2026] [security2:error] [pid 15981:tid 15981] [client 3.148.164.12:34212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.phsna.org"] [uri "/.git/config"] [unique_id "ajKl9WgDtW-9GDFVpa9hVQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
bigscoots.com
2026-06-17 12:00:32
(4 days ago)
(PERMBLOCK) 3.148.164.12 (US/United States/ec2-3-148-164-12.us-east-2.compute.amazonaws.com) has had ...
show more
(PERMBLOCK) 3.148.164.12 (US/United States/ec2-3-148-164-12.us-east-2.compute.amazonaws.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Brute-Force
SSH
🇮🇹
VHosting
2026-06-17 08:50:03
(4 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: