AbuseIPDB » 3.39.226.163
3.39.226.163
This IP was reported 8 times. Confidence of
Abuse
is 0% : ?
ISP
AWS Asia Pacific (Seoul) Region
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-3-39-226-163.ap-northeast-2.compute.amazonaws.com
Domain Name
amazon.com
Country
🇰🇷
Korea (the Republic of)
City
Incheon, Incheon
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 3.39.226.163 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
3.39.226.163 was first reported on
November 27th 2025 , and the most recent report was
4 months ago
Old Reports:
The most recent abuse report for this IP address is from
4 months ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
agenciahypelab.com.br
2026-04-03 14:37:53
(4 months ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
2026-04-03 14:30:31
(4 months ago)
3.39.226.163 - - [03/Apr/2026:16:28:55 +0200] "GET /.env HTTP/1.1" 403 554 "-" "Mozilla/5.0 (Macinto ...
show more
3.39.226.163 - - [03/Apr/2026:16:28:55 +0200] "GET /.env HTTP/1.1" 403 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
3.39.226.163 - - [03/Apr/2026:16:28:56 +0200] "GET /.env.local HTTP/1.1" 403 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
3.39.226.163 - - [03/Apr/2026:16:28:56 +0200] "GET /.env.production HTTP/1.1" 403 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
3.39.226.163 - - [03/Apr/2026:16:28:56 +0200] "GET /.env.staging HTTP/1.1" 403 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
3.39.226.163 - - [03/Apr/2026:16:28:56 +0200] "GET /.env.development HTTP/1.1" 403 554 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
DDoS Attack
🇳🇱
Site.eu
2026-04-03 14:13:57
(4 months ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
Savvii
2026-04-03 14:12:49
(4 months ago)
20 attempts against mh-misbehave-ban on bean
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 13:42:16
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 3.39.226.163 (ec2-3-39-226-163.ap-northeast-2.c ...
show more
(mod_security) mod_security (id:210492) triggered by 3.39.226.163 (ec2-3-39-226-163.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 09:42:10.642187 2026] [security2:error] [pid 5542:tid 5542] [client 3.39.226.163:47060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darkstarsystems.net"] [uri "/.env"] [unique_id "ac_DsgxxE95BF3MSPvdOfQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 13:25:09
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 3.39.226.163 (ec2-3-39-226-163.ap-northeast-2.c ...
show more
(mod_security) mod_security (id:210492) triggered by 3.39.226.163 (ec2-3-39-226-163.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 09:25:01.545611 2026] [security2:error] [pid 7310:tid 7330] [client 3.39.226.163:51300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darkestmoonart.com"] [uri "/.env"] [unique_id "ac-_rXnTw4Lxdsgro-iT3AAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
everkey
2025-11-27 11:53:00
(8 months ago)
Blocked 14 requests in less than one minute. The IP attempted to access multiple LiteSpeed cache Jav ...
show more
Blocked 14 requests in less than one minute. The IP attempted to access multiple LiteSpeed cache JavaScript files directly (/wp-content/litespeed/js/) without visiting any HTML pages and without a valid referrer. This behavior indicates an automated vulnerability scanner or a scraper probing for specific plugin assets/versions.
Origin: AWS.
Hostname: ec2-3-39-226-163.ap-northeast-2.compute.amazonaws.com
show less
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-11-27 07:45:12
(8 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: