JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.26.114.64

3.26.114.64 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 38%: ?

38%

ISP	Amazon Corporate Services Pty Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-26-114-64.ap-southeast-2.compute.amazonaws.com
Domain Name	amazon.com.au
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.26.114.64

Whois 3.26.114.64

IP Abuse Reports for 3.26.114.64:

This IP address has been reported a total of 9 times from 5 distinct sources. 3.26.114.64 was first reported on July 24th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-27 22:01:41 (6 hours ago)	Auto-ban: >3000 req/min op 2026-07-27	Web App Attack SSH Hacking
🇳🇱 Site.eu	2026-07-26 09:59:20 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-26 02:47:07 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.26.114.64 (ec2-3-26-114-64.ap-southeast-2.com ... show more (mod_security) mod_security (id:210492) triggered by 3.26.114.64 (ec2-3-26-114-64.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 22:47:03.518352 2026] [security2:error] [pid 4155023:tid 4155032] [client 3.26.114.64:49804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "killerrockandroll.com"] [uri "/.git/config"] [unique_id "amV1J_-Bh195vLMAEoLadQAAAMM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 01:22:47 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.26.114.64 (ec2-3-26-114-64.ap-southeast-2.com ... show more (mod_security) mod_security (id:210492) triggered by 3.26.114.64 (ec2-3-26-114-64.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 21:22:41.852170 2026] [security2:error] [pid 2451720:tid 2451720] [client 3.26.114.64:44582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kildarafarms.com"] [uri "/.git/config"] [unique_id "amVhYfKpKbGuYup_ae_LkgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-25 22:03:56 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-24. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-25 15:38:01 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.26.114.64 (ec2-3-26-114-64.ap-southeast-2.com ... show more (mod_security) mod_security (id:210492) triggered by 3.26.114.64 (ec2-3-26-114-64.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 11:37:58.153607 2026] [security2:error] [pid 31932:tid 31932] [client 3.26.114.64:58208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zazuza.com"] [uri "/.git/config"] [unique_id "amTYVnpD68WnwagIO3oqQQAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-07-24 15:27:14 (3 days ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 14:08:31 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 3.26.114.64 (ec2-3-26-114-64.ap-southeast-2.com ... show more (mod_security) mod_security (id:210492) triggered by 3.26.114.64 (ec2-3-26-114-64.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 10:08:25.987810 2026] [security2:error] [pid 3750197:tid 3750197] [client 3.26.114.64:43434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zavijava.net"] [uri "/.git/config"] [unique_id "amNx2Sjg_lk3aCEnsEMaEQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-07-24 05:25:03 (3 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 123.158.60.76

🇨🇳 120.52.18.116

🇫🇷 91.196.152.127

🇺🇸 3.142.170.60

🇨🇳 221.0.14.231

🇧🇷 205.210.31.244

🇹🇷 203.202.232.160

🇳🇱 195.178.110.31

🇱🇻 185.113.139.51

🇲🇾 180.75.233.210

🇫🇮 147.185.133.228

🇯🇵 128.1.48.187

🇦🇺 125.209.150.242

🇻🇳 116.110.23.104

🇨🇳 114.67.127.241

🇻🇪 82.86.132.203

🇺🇸 66.132.195.105

🇳🇱 45.148.10.152

🇬🇧 35.203.211.67

🇷🇺 5.19.249.240