JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.149.240.66

3.149.240.66 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-149-240-66.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.149.240.66

Whois 3.149.240.66

IP Abuse Reports for 3.149.240.66:

This IP address has been reported a total of 57 times from 49 distinct sources. 3.149.240.66 was first reported on August 27th 2026, and the most recent report was 49 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-08-29 05:43:01 (49 minutes ago)	Cloudflare WAF: Request Path: /.env Request Query: Host: api.elhacker.net userAgent: Mozilla/5.0 (c ... show more Cloudflare WAF: Request Path: /.env Request Query: Host: api.elhacker.net userAgent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot) Action: block Source: firewallManaged ASN Description: Amazon.com, Inc. Country: US Method: GET Timestamp: 2026-08-29T05:43:01Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇩🇪 macrob	2026-08-29 05:01:03 (1 hour ago)	2026/08/29 05:00:46 [error] 4017415#4017415: 532304404 access forbidden by rule, client: 3.149.240. ... show more 2026/08/29 05:00:46 [error] 4017415#4017415: 532304404 access forbidden by rule, client: 3.149.240.66, server: binixo.pl, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "binixo.pl" 2026/08/29 05:00:46 [error] 4017411#4017411: 532300779 access forbidden by rule, client: 3.149.240.66, server: binixo.pl, request: "GET /.vite/manifest.json HTTP/2.0", host: "binixo.pl" 2026/08/29 05:01:01 [error] 4017411#4017411: 532304359 access forbidden by rule, client: 3.149.240.66, server: binixo.pl, request: "GET /admin/login HTTP/2.0", host: "binixo.pl" ... show less	Web App Attack
🇫🇮 as211431.net	2026-08-29 04:27:05 (2 hours ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /.git/config UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇹 CoreTech srl	2026-08-29 02:25:48 (4 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact	Hacking
Anonymous	2026-08-28 23:17:49 (7 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Back ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Backup file probing, Cloud secrets probing, Directory traversal show less	Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-08-28 20:49:12 (9 hours ago)	CrowdSec abuse IP report (host SRV-2) Scenario: crowdsecurity/http-probing	Hacking
🇩🇪 macrob	2026-08-28 20:20:59 (10 hours ago)	2026/08/28 20:20:48 [error] 3672837#3672837: 531283786 access forbidden by rule, client: 3.149.240. ... show more 2026/08/28 20:20:48 [error] 3672837#3672837: 531283786 access forbidden by rule, client: 3.149.240.66, server: binixo.lk, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "www.binixo.lk" 2026/08/28 20:20:49 [error] 3672837#3672837: 531283794 access forbidden by rule, client: 3.149.240.66, server: binixo.lk, request: "GET /.vite/manifest.json HTTP/2.0", host: "www.binixo.lk" 2026/08/28 20:20:57 [error] 3672837#3672837: 531283790 access forbidden by rule, client: 3.149.240.66, server: binixo.lk, request: "GET /admin/login HTTP/2.0", host: "www.binixo.lk" ... show less	Web App Attack
Anonymous	2026-08-28 19:56:24 (10 hours ago)	PSCSERV WPSCAN 3.149.240.66	Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-08-28 17:56:40 (12 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /wp-json (Match: /wp-json) show less	Hacking Exploited Host Web App Attack
🇩🇪 TheDjRider	2026-08-28 17:42:51 (12 hours ago)	CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ba ... show more CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ban triggered. Detection time (UTC): 2026-08-28T17:42:43.327687634Z. Context: http_status=404 show less	Web App Attack
🇪🇸 librebit	2026-08-28 16:16:06 (14 hours ago)	Brute force	Brute-Force
🇧🇪 Ivo Vynckier	2026-08-28 15:19:00 (15 hours ago)	3.149.240.66 - - [27/Aug/2026:22:29:37 +0200] "GET /.hermes/config.yaml HTTP/2.0" 404 2310 "-" "Mozi ... show more 3.149.240.66 - - [27/Aug/2026:22:29:37 +0200] "GET /.hermes/config.yaml HTTP/2.0" 404 2310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 3.149.240.66 - - [27/Aug/2026:22:29:37 +0200] "GET /.continue/config.json HTTP/2.0" 404 2310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 3.149.240.66 - - [27/Aug/2026:22:29:37 +0200] "GET /.codex/config.toml HTTP/2.0" 404 2310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" show less	Web App Attack
🇷🇴 clauss	2026-08-28 13:27:29 (17 hours ago)	3.149.240.66 - - [28/Aug/2026:16:27:28 +0300] "GET /.env.example HTTP/2.0" 404 36 "-" "Mozilla/5.0 ( ... show more 3.149.240.66 - - [28/Aug/2026:16:27:28 +0300] "GET /.env.example HTTP/2.0" 404 36 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot)" 3.149.240.66 - - [28/Aug/2026:16:27:29 +0300] "GET /.env.production HTTP/2.0" 404 36 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot)" ... show less	Web App Attack
Anonymous	2026-08-28 12:21:35 (18 hours ago)	Portscan: TCP/8080 (7x), TCP/8443 (7x), TCP/80, TCP/443	Port Scan
🇩🇪 BlueWire Hosting	2026-08-28 12:01:36 (18 hours ago)	High-confidence malicious configuration/VCS probe	Web App Attack

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 181.78.13.127

🇮🇳 150.107.232.194

🇫🇮 147.185.133.218

🇻🇳 103.82.192.26

🇺🇸 77.91.118.50

🇮🇩 36.64.1.29

🇬🇧 193.163.125.144

🇨🇴 190.84.88.255

🇺🇸 172.59.27.130

🇸🇪 171.25.193.46

🇻🇳 103.162.21.113

🇸🇪 46.59.91.172

🇳🇱 192.253.248.226

🇫🇮 147.185.133.108

🇺🇸 147.185.132.127

🇺🇸 147.185.132.49

🇮🇳 103.182.45.75

🇺🇸 66.132.195.98

🇨🇦 64.66.195.116

🇹🇼 60.249.252.94