JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.238.50.120

3.238.50.120 was found in our database!

This IP was reported 75 times. Confidence of Abuse is 0%: ?

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-3-238-50-120.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.238.50.120

Whois 3.238.50.120

IP Abuse Reports for 3.238.50.120:

This IP address has been reported a total of 75 times from 59 distinct sources. 3.238.50.120 was first reported on February 17th 2024, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Linuxmalwarehuntingnl	2024-07-03 07:03:27 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇸🇪 mr_whitehat	2024-02-19 00:35:09 (2 years ago)	Probed for vulnerable web application: request line: /.git/config (Possible exploit:Scan for open gi ... show more Probed for vulnerable web application: request line: /.git/config (Possible exploit:Scan for open git repositories) show less	Web App Attack
🇫🇮 tjs	2024-02-18 22:51:00 (2 years ago)	web attack	Hacking Web App Attack
🇩🇪 ut-addicted.com	2024-02-18 15:19:23 (2 years ago)	\[Sun Feb 18 16:19:21.833271 2024\] \[:error\] \[pid 3016:tid 140503259457280\] \[client 3.238.50.12 ... show more \[Sun Feb 18 16:19:21.833271 2024\] \[:error\] \[pid 3016:tid 140503259457280\] \[client 3.238.50.120:46268\] \[client 3.238.50.120\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "crx.it"\] \[uri "/.git/config"\] \[unique_id "ZdIf@e2EccDUPkTBnxtD6QAAANg"\] show less	Brute-Force Web App Attack
🇩🇪 HERA - Operations	2024-02-18 13:39:57 (2 years ago)	argeforum - searching for vulnerable scripts: config 2024/02/18 14:39:56	Web App Attack
🇺🇸 TPI-Abuse	2024-02-18 13:19:37 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 3.238.50.120 (ec2-3-238-50-120.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 3.238.50.120 (ec2-3-238-50-120.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 18 08:19:30.248976 2024] [security2:error] [pid 11056] [client 3.238.50.120:41258] [client 3.238.50.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arriagarealestate.com"] [uri "/.git/config"] [unique_id "ZdID4j7-zAIiHPCsmhUhAQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-18 12:54:30 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 3.238.50.120 (ec2-3-238-50-120.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 3.238.50.120 (ec2-3-238-50-120.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 18 07:54:26.622900 2024] [security2:error] [pid 26497] [client 3.238.50.120:33922] [client 3.238.50.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "495metro.com"] [uri "/.git/config"] [unique_id "ZdH-AkuHJWnPX2to65aKgQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-02-18 11:36:50 (2 years ago)	[17/Feb/2024:16:04:40 -0500] \"GET /.git/config HTTP/1.1\" \"Mozilla/5.0 (Linux; Android 8.0.0; F512 ... show more [17/Feb/2024:16:04:40 -0500] \"GET /.git/config HTTP/1.1\" \"Mozilla/5.0 (Linux; Android 8.0.0; F5121) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.101 Mobile Safari/537.36\" show less	Hacking
🇬🇷 JCB	2024-02-18 08:55:00 (2 years ago)	3.238.50.120 - - [18/Feb/2024:02:27:12 +0200] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 ( ... show more 3.238.50.120 - - [18/Feb/2024:02:27:12 +0200] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.88 Safari/537.36 Vivaldi/2.4.1488.36" show less	Web App Attack
🇬🇧 openstrike.co.uk	2024-02-18 06:12:18 (2 years ago)	79 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
Anonymous	2024-02-18 04:00:37 (2 years ago)	/.git	Web App Attack
🇫🇷 urmarcht	2024-02-18 00:45:55 (2 years ago)	Bot attack detected : webscan vurnerability	Web App Attack
🇬🇧 dwmosaics	2024-02-18 00:34:29 (2 years ago)	"GET /.git/config HTTP/1.1" 301 551 "-" "Mozilla/5.0 (X11; Linux i686; rv:2...	Brute-Force Web App Attack
🇬🇧 myintarweb	2024-02-18 00:26:26 (2 years ago)	3.238.50.120 - - [18/Feb/2024:00:26:23 +0000] 443 "GET /.git/config HTTP/1.1" 404 31061 "-" "Mozilla ... show more 3.238.50.120 - - [18/Feb/2024:00:26:23 +0000] 443 "GET /.git/config HTTP/1.1" 404 31061 "-" "Mozilla/5.0 (Linux; Android 8.1.0; GM 6 d) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" ... show less	Hacking Bad Web Bot Web App Attack
🇩🇪 ⓔⓜⓙⓔⓔ	2024-02-18 00:24:48 (2 years ago)	WEB 🕸 Honeypot: scanning-probing /.git/config	Bad Web Bot Web App Attack

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.227.21.75

🇻🇳 103.216.119.131

🇳🇱 91.92.40.31

🇷🇺 77.236.68.71

🇳🇱 45.148.10.151

🇰🇷 221.147.160.73

🇨🇳 115.54.216.108

🇺🇸 91.230.168.120

🇦🇲 37.157.212.188

🇯🇵 8.216.5.202

🇺🇸 216.180.246.187

🇰🇷 211.114.81.212

🇺🇸 198.98.56.227

🇬🇭 197.251.249.72

🇺🇸 195.184.76.92

🇳🇱 193.176.31.152

🇭🇰 183.179.243.140

🇦🇷 181.116.220.251

🇵🇱 176.53.159.197

🇨🇳 115.211.198.166