JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.64.47.135

3.64.47.135 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 67%: ?

67%

ISP	A100 ROW GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-64-47-135.eu-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.64.47.135

Whois 3.64.47.135

IP Abuse Reports for 3.64.47.135:

This IP address has been reported a total of 14 times from 12 distinct sources. 3.64.47.135 was first reported on December 7th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Savvii	2026-10-22 06:32:08 (1 day ago)	20 attempts against mh_ha-misbehave-ban on ethyl	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-22 03:18:41 (1 day ago)	[ssd5.kdns.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log; samples=/.git/config ... show more [ssd5.kdns.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log; samples=/.git/config \| /.env \| /.env.local show less	Hacking Web App Attack
🇩🇪 R.G.	2026-10-22 03:13:11 (1 day ago)	(ScanningForFiles) Scanning for files triggerd 3.64.47.135 (DE/Germany/ec2-3-64-47-135.eu-central-1. ... show more (ScanningForFiles) Scanning for files triggerd 3.64.47.135 (DE/Germany/ec2-3-64-47-135.eu-central-1.compute.amazonaws.com): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-10-22 03:09:24 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇬🇧 consul.to	2026-10-22 03:00:27 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇹 VHosting	2026-10-22 02:25:04 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 LRob	2026-10-22 01:24:44 (1 day ago)	Secret file probe \| method: GET \| path: /.env, /.env.local, /.env.production (+9 more) \| ua: Mozilla ... show more Secret file probe \| method: GET \| path: /.env, /.env.local, /.env.production (+9 more) \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Hacking Web App Attack
Anonymous	2026-10-21 23:09:27 (1 day ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇫🇷 security.rdmc.fr	2026-10-21 21:31:03 (1 day ago)	Web App Attack	Web App Attack
🇫🇮 as211431.net	2026-10-21 18:27:38 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /smtp/phpinfo.php UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 homeshowdomain.nl	2025-12-08 23:00:41 (10 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-12-07. show less	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-08 17:26:18 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 3.64.47.135 (ec2-3-64-47-135.eu-central-1.compu ... show more (mod_security) mod_security (id:210492) triggered by 3.64.47.135 (ec2-3-64-47-135.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 12:26:13.913202 2025] [security2:error] [pid 20861:tid 20861] [client 3.64.47.135:53480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eagleeyesdesign.com.spacerecording.com"] [uri "/.env"] [unique_id "aTcKNW_IEPIh40RBFU1KGAAAABU"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2025-12-07 22:59:12 (10 months ago)	Auto-ban: >3000 req/min op 2025-12-07	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-07 20:10:19 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 3.64.47.135 (ec2-3-64-47-135.eu-central-1.compu ... show more (mod_security) mod_security (id:210492) triggered by 3.64.47.135 (ec2-3-64-47-135.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 15:10:13.733903 2025] [security2:error] [pid 29984:tid 29984] [client 3.64.47.135:47746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elkesmuesli.com"] [uri "/.git/config"] [unique_id "aTXfJc5hOdn2hMnFEK-RnwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 194.165.16.162

🇳🇱 193.176.31.209

🇲🇽 187.190.35.163

🇨🇴 181.51.32.130

🇧🇷 178.171.37.198

🇺🇸 135.119.114.142

🇧🇩 119.148.58.222

🇮🇳 117.247.23.131

🇧🇩 103.127.5.13

🇧🇷 205.210.31.177

🇺🇸 199.165.159.14

🇳🇱 195.178.110.247

🇳🇱 185.93.89.79

🇺🇸 173.255.223.149

🇳🇱 138.226.239.234

🇨🇳 115.190.97.5

🇩🇪 109.160.32.109

🇺🇸 100.49.117.77

🇵🇹 94.63.173.201

🇫🇷 91.231.89.73