JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.148.189.35

3.148.189.35 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 95%: ?

95%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-148-189-35.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.148.189.35

Whois 3.148.189.35

IP Abuse Reports for 3.148.189.35:

This IP address has been reported a total of 27 times from 17 distinct sources. 3.148.189.35 was first reported on July 24th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hazzard	2026-07-27 18:28:48 (14 hours ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇺🇸 oralunal	2026-07-27 18:27:42 (14 hours ago)	IP banned by Fail2Ban in jail its-suss access.log mvfnds ...	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 18:12:13 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.148.189.35 (ec2-3-148-189-35.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.148.189.35 (ec2-3-148-189-35.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 14:12:09.022437 2026] [security2:error] [pid 22493:tid 22493] [client 3.148.189.35:44386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.itimetable21.com"] [uri "/.git/config"] [unique_id "amefeRq8Uq1JL9m5LocXswAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 16:54:23 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.148.189.35 (ec2-3-148-189-35.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.148.189.35 (ec2-3-148-189-35.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 12:54:20.009871 2026] [security2:error] [pid 510377:tid 510377] [client 3.148.189.35:54800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.islanublarproperties.com"] [uri "/.git/config"] [unique_id "ameNPJLWm9d4OzB0TTSM1AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 14:27:36 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.148.189.35 (ec2-3-148-189-35.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.148.189.35 (ec2-3-148-189-35.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:27:28.208724 2026] [security2:error] [pid 3721475:tid 3721475] [client 3.148.189.35:50098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.invisiblecitydesigns.com"] [uri "/.git/config"] [unique_id "amdq0EvPhOHwrszMUOXMLwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 13:39:05 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.148.189.35 (ec2-3-148-189-35.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.148.189.35 (ec2-3-148-189-35.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 09:38:57.326352 2026] [security2:error] [pid 94100:tid 94100] [client 3.148.189.35:51156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.intershine.com"] [uri "/.git/config"] [unique_id "amdfcRSMni94EOeUAaMHkAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 13:22:09 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.148.189.35 (ec2-3-148-189-35.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.148.189.35 (ec2-3-148-189-35.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 09:22:04.488051 2026] [security2:error] [pid 490932:tid 490932] [client 3.148.189.35:57584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.international-aerospace.com"] [uri "/.git/config"] [unique_id "amdbfIpVyOzA0M3SsCJhMQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 mondor.ro	2026-07-27 11:57:24 (21 hours ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 3.148.189.35, Reason:[ ... show more Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 3.148.189.35, Reason:[(mod_security) mod_security (id:210492) triggered by 3.148.189.35 (US/United States/ec2-3-148-189-35.us-east-2.compute.amazonaws.com): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇪🇸 alferez	2026-07-27 10:51:43 (22 hours ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 08:33:06 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.148.189.35 (ec2-3-148-189-35.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.148.189.35 (ec2-3-148-189-35.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:33:00.177910 2026] [security2:error] [pid 1688620:tid 1688681] [client 3.148.189.35:46988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.infectioncontrolsys.com"] [uri "/.git/config"] [unique_id "amcXvHaXIRKgyharhhjpawAAAcU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-26 06:46:00 (2 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇺🇸 bigscoots.com	2026-07-26 06:03:26 (2 days ago)	(PERMBLOCK) 3.148.189.35 (US/United States/ec2-3-148-189-35.us-east-2.compute.amazonaws.com) has had ... show more (PERMBLOCK) 3.148.189.35 (US/United States/ec2-3-148-189-35.us-east-2.compute.amazonaws.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-26 05:23:44 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.148.189.35 (ec2-3-148-189-35.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.148.189.35 (ec2-3-148-189-35.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 01:23:36.295447 2026] [security2:error] [pid 3252:tid 3270] [client 3.148.189.35:44284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.theextraordinaryoffice.com"] [uri "/.git/config"] [unique_id "amWZ2K6Cx56tn6QOA9pwuAAAAE4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 R.G.	2026-07-26 05:04:57 (2 days ago)	(ScanningForFiles) Scanning for files triggerd 3.148.189.35 (US/United States/ec2-3-148-189-35.us-ea ... show more (ScanningForFiles) Scanning for files triggerd 3.148.189.35 (US/United States/ec2-3-148-189-35.us-east-2.compute.amazonaws.com): 10 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 Blexyel	2026-07-26 04:51:51 (2 days ago)	3.148.189.35 - - [26/Jul/2026:06:51:50 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ( ... show more 3.148.189.35 - - [26/Jul/2026:06:51:50 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇵 202.79.57.136

🇨🇦 85.217.149.65

🇵🇰 43.230.92.46

🇺🇸 34.197.70.90

🇮🇹 188.241.126.41

🇺🇸 178.128.13.184

🇫🇮 147.185.133.88

🇺🇸 91.230.168.125

🇳🇱 91.92.40.50

🇲🇾 47.254.202.19

🇺🇸 34.181.138.153

🇮🇳 206.84.233.38

🇳🇴 193.90.12.40

🇷🇴 193.32.162.15

🇺🇸 191.101.33.225

🇮🇶 185.158.22.150

🇫🇮 172.102.223.136

🇺🇸 162.216.150.242

🇮🇳 143.110.241.64

🇨🇳 114.217.10.60