JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.239.171.98

3.239.171.98

Neutral Activity

25 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Amazon Data Services Northern Virginia

Usage Type

Data Center/Web Hosting/Transit

ASN

AS14618

Hostname(s)

ec2-3-239-171-98.compute-1.amazonaws.com

Domain Name

amazon.com

Country

🇺🇸 United States of America

City

Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

3.239.171.98 has been reported 25 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 3.239.171.98:

This IP address has been reported a total of 25 times from 16 distinct sources. 3.239.171.98 was first reported on March 13th 2021, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 gotickets.co.za	2023-05-11 17:29:17 (3 years ago)	2023/5/11 17:29:17 attempt to probe for and exploit known vulnerabilities	Port Scan Hacking
🇿🇦 gotickets.co.za	2023-05-11 17:07:48 (3 years ago)	2023/5/11 17:7:48 "/"	Port Scan Hacking
🇦🇺 clapper	2023-05-10 08:27:17 (3 years ago)	(mod_security) mod_security (id:949110) triggered by 3.239.171.98 (US/United States/ec2-3-239-171-98 ... show more (mod_security) mod_security (id:949110) triggered by 3.239.171.98 (US/United States/ec2-3-239-171-98.compute-1.amazonaws.com): 5 in the last 3600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇬🇧 Artelis	2023-05-09 19:36:39 (3 years ago)	3.239.171.98 - - [09/May/2023:19:26:02 +0000] "GET /.wp-config.php.swp HTTP/1.1" 404 193 "-" "Mozill ... show more 3.239.171.98 - - [09/May/2023:19:26:02 +0000] "GET /.wp-config.php.swp HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 3.239.171.98 - - [09/May/2023:19:36:33 +0000] "GET /.envs HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows NT 4.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 3.239.171.98 - - [09/May/2023:19:36:34 +0000] "GET /.env~ HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 3.239.171.98 - - [09/May/2023:19:36:34 +0000] "GET /.gitlab-ci/.env HTTP/1.1" 404 193 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36" 3.239.171.98 - - [09/May/2023:19:36:35 +0000] "GET /.s3cfg HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/53 ... show less	Web App Attack
🇳🇱 Pornomens	2023-05-08 07:42:58 (3 years ago)	3.239.171.98 - - [08/May/2023:09:29:53 +0200] "HEAD / HTTP/1.1" 403 5522 "-" "Mozilla/5.0 (Windows N ... show more 3.239.171.98 - - [08/May/2023:09:29:53 +0200] "HEAD / HTTP/1.1" 403 5522 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36" 3.239.171.98 - - [08/May/2023:09:42:57 +0200] "GET /index.js HTTP/1.1" 403 5880 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 3.239.171.98 - - [08/May/2023:09:42:58 +0200] "GET /.aws/credentials HTTP/1.1" 403 5880 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36" ... show less	Web App Attack
🇺🇸 globalSpector	2023-05-07 17:18:01 (3 years ago)	** To many entries to list. Over a hundred 2023-05-04T06:03:32.569Z \| 3.239.171.98 \| GET \| / ... show more To many entries to list. Over a hundred ** 2023-05-04T06:03:32.569Z \| 3.239.171.98 \| GET \| /credentials.hjson \| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36 2023-05-04T06:03:32.669Z \| 3.239.171.98 \| GET \| /config.cson \| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36 2023-05-04T06:03:32.794Z \| 3.239.171.98 \| GET \| /secrets.cson \| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36 2023-05-04T06:03:32.911Z \| 3.239.171.98 \| GET \| /credentials.cson \| Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36 2023-05-04T06:03:33.030Z \| 3.239.171.98 \| GET \| /.bashrc \| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36 show less	Hacking Brute-Force Web App Attack
🇩🇪 Hazzard	2023-05-06 06:07:29 (3 years ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇨🇳 ThreatBook.io	2023-05-05 04:12:07 (3 years ago)	ThreatBook Intelligence: Info more details on http://threatbook.io/ip/3.239.171.98 2023-05-04 18:00: ... show more ThreatBook Intelligence: Info more details on http://threatbook.io/ip/3.239.171.98 2023-05-04 18:00:55 /api/phpinfo.php 2023-05-04 18:00:53 /.aws/credentials 2023-05-04 18:00:52 /index.js 2023-05-04 18:00:54 /_phpinfo.php 2023-05-04 18:00:54 /admin/dashboard/info.php 2023-05-04 18:00:53 /.wp-config.php.swp 2023-05-04 17:53:21 / show less	Web App Attack
🇬🇧 blik2108	2023-05-04 13:14:36 (3 years ago)	beta.sleepylizard.com:443 3.239.171.98 - - [04/May/2023:14:14:34 +0100] "GET /wp-config.php HTTP/1.1 ... show more beta.sleepylizard.com:443 3.239.171.98 - - [04/May/2023:14:14:34 +0100] "GET /wp-config.php HTTP/1.1" 200 5409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36" beta.sleepylizard.com:443 3.239.171.98 - - [04/May/2023:14:14:34 +0100] "GET /wp-config.php. HTTP/1.1" 200 5409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" beta.sleepylizard.com:443 3.239.171.98 - - [04/May/2023:14:14:35 +0100] "GET /wp-config.php.bak HTTP/1.1" 200 5409 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36" beta.sleepylizard.com:443 3.239.171.98 - - [04/May/2023:14:14:35 +0100] "GET /wp-config.php.bk HTTP/1.1" 200 5409 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" beta.sleepylizard.com:443 3.239.171.98 - - [04/May/2023:14:14:35 +0100] "GET /wp-config. ... show less	Brute-Force Web App Attack
🇳🇱 Pornomens	2023-05-04 05:25:30 (3 years ago)	3.239.171.98 - - [04/May/2023:07:11:10 +0200] "HEAD / HTTP/1.1" 403 5522 "-" "Mozilla/5.0 (Windows N ... show more 3.239.171.98 - - [04/May/2023:07:11:10 +0200] "HEAD / HTTP/1.1" 403 5522 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36" 3.239.171.98 - - [04/May/2023:07:25:29 +0200] "GET /index.js HTTP/1.1" 403 5880 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36" 3.239.171.98 - - [04/May/2023:07:25:30 +0200] "GET /.aws/credentials HTTP/1.1" 403 5880 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36" ... show less	Web App Attack
🇿🇦 gotickets.co.za	2023-05-03 20:41:11 (3 years ago)	2023/5/3 20:41:11 attempt to probe for and exploit known vulnerabilities	Port Scan Hacking
🇿🇦 gotickets.co.za	2023-05-03 20:17:48 (3 years ago)	2023/5/3 20:17:48 attempt to probe for and exploit known vulnerabilities	Port Scan Hacking
🇸🇬 tommygod.ddns.net	2023-05-02 23:17:23 (3 years ago)	[02/May/2023:23:06:37 +0000] ZFGXffbNy_Ug7cEY74D-bwAAAAc 3.239.171.98 48570 172.104.34.116 443 [02/M ... show more [02/May/2023:23:06:37 +0000] ZFGXffbNy_Ug7cEY74D-bwAAAAc 3.239.171.98 48570 172.104.34.116 443 [02/May/2023:23:17:17 +0000] ZFGZ_fyZRfsIIM-b1UQR-AAAAAE 3.239.171.98 58796 172.104.34.116 443 [02/May/2023:23:17:18 +0000] ZFGZ_huOi7-e8eyqQx2yfQAAAAI 3.239.171.98 58804 172.104.34.116 443 [02/May/2023:23:17:19 +0000] ZFGZ_yASvP-erEXXxd3tEAAAAAU 3.239.171.98 58810 172.104.34.116 443 [02/May/2023:23:17:19 +0000] ZFGZ_60skyFHo7TaSWVSowAAAAY 3.239.171.98 58816 172.104.34.116 443 [02/May/2023:23:17:20 +0000] ZFGaAEK80eHhHd5ECsoCcgAAAAM 3.239.171.98 58818 172.104.34.116 443 [02/May/2023:23:17:21 +0000] ZFGaAZXb16Jj67PWBMCyUgAAAAA 3.239.171.98 58834 172.104.34.116 443 [02/May/2023:23:17:21 +0000] ZFGaAfbNy_Ug7cEY74D-cAAAAAc 3.239.171.98 58836 172.104.34.116 443 [02/May/2023:23:17:22 +0000] ZFGaAmBVt9A5lLQnGxX_GQAAAB4 3.239.171.98 58838 172.104.34.116 443 [02/May/2023:23:17:23 +0000] ZFGaA5D9xEMdOH1TlPbugwAAAAk 3.239.171.98 58852 172.104.34.116 443 show less	SQL Injection Brute-Force
🇺🇸 stvnrdg.me	2023-05-02 21:22:26 (3 years ago)	3.239.171.98 - - [02/May/2023:21:22:25 +0000] "GET /_phpinfo.php HTTP/1.1" 404 6080 "-" "Mozilla/5.0 ... show more 3.239.171.98 - - [02/May/2023:21:22:25 +0000] "GET /_phpinfo.php HTTP/1.1" 404 6080 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36" ... show less	Hacking
🇳🇱 tmiland	2023-04-30 03:36:26 (3 years ago)	(nginx_404) Dot directory Honeypot Trap 3.239.171.98 (US/United States/ec2-3-239-171-98.compute-1.am ... show more (nginx_404) Dot directory Honeypot Trap 3.239.171.98 (US/United States/ec2-3-239-171-98.compute-1.amazonaws.com): 2 in the last 3600 secs show less	Brute-Force Bad Web Bot

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 148.223.251.51

🇳🇱 138.226.239.233

🇨🇴 138.84.41.28

🇰🇷 121.181.123.134

🇮🇳 98.70.48.241

🇯🇵 34.97.157.100

🇩🇪 34.32.92.188

🇺🇸 4.249.17.190

🇪🇸 213.60.255.181

🇺🇸 192.227.178.228

🇳🇱 178.16.55.184

🇨🇭 107.189.1.175

🇲🇲 103.59.163.132

🇨🇦 96.44.159.202

🇷🇴 80.94.92.55

🇺🇸 66.132.195.20

🇫🇷 51.210.142.53

🇺🇸 43.159.143.139

🇪🇬 41.235.46.54

🇰🇷 34.47.118.126