JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.68.113.228

3.68.113.228 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 48%: ?

48%

ISP	A100 ROW GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-68-113-228.eu-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.68.113.228

Whois 3.68.113.228

IP Abuse Reports for 3.68.113.228:

This IP address has been reported a total of 7 times from 7 distinct sources. 3.68.113.228 was first reported on July 24th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 solution.it	2026-07-24 07:38:20 (1 hour ago)	[Fri Jul 24 09:38:19.213031 2026] [php7:error] [pid 934618:tid 934618] [client 3.68.113.228:47280] s ... show more [Fri Jul 24 09:38:19.213031 2026] [php7:error] [pid 934618:tid 934618] [client 3.68.113.228:47280] script '/var/www/html/blog.solution.it/phpinfo.php' not found or unable to stat show less	Web App Attack
Anonymous	2026-07-24 07:11:38 (1 hour ago)	Banned by Fail2Ban on server	Web App Attack
🇫🇷 Octopuce	2026-07-24 05:21:53 (3 hours ago)	Aggressive web search of vulnerable pages: / /.env /.env.local /app/.env /apps/.env ...	Web App Attack
🇺🇸 masterguru	2026-07-24 05:21:50 (3 hours ago)	Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\$(?:\\\\(.\\\\ ... show more Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.\\\$\|.)\\\\)\|\\\\{.\\\\})\| (932130-205) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-24 04:48:29 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.68.113.228 (ec2-3-68-113-228.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.68.113.228 (ec2-3-68-113-228.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 00:48:24.235379 2026] [security2:error] [pid 854414:tid 854414] [client 3.68.113.228:43528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soleillavie.com"] [uri "/.git/config"] [unique_id "amLumG5pQvz1BI6E0P_A_wAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-07-24 04:25:02 (4 hours ago)	crowdsecurity/http-crawl-non_statics	Brute-Force Web App Attack
Anonymous	2026-07-24 03:19:41 (5 hours ago)	[ns3.backorder.gr] httpd-config-scan: sites=www.example.com,debug-gosolar.gr,www.gosolar.gr; logs=/v ... show more [ns3.backorder.gr] httpd-config-scan: sites=www.example.com,debug-gosolar.gr,www.gosolar.gr; logs=/var/log/httpd/access_log,/var/log/httpd/domains/debug-gosolar.gr.log,/var/log/httpd/domains/gosolar.gr.log; samples=/.git/config \| /.env \| /.env.local show less	Hacking Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.80.223.144

🇧🇷 187.0.18.168

🇺🇸 165.154.206.30

🇭🇰 123.58.210.86

🇭🇰 116.49.147.47

🇺🇸 107.199.14.7

🇳🇱 91.92.42.80

🇩🇪 69.5.169.85

🇺🇸 23.29.118.224

🇹🇭 159.192.133.140

🇨🇳 139.210.168.57

🇮🇩 114.7.160.114

🇮🇳 103.59.202.221

🇬🇪 92.241.77.214

🇳🇱 45.148.10.147

🇮🇶 45.143.29.202

🇧🇬 5.188.206.66

🇧🇷 191.252.181.8

🇵🇪 190.237.1.31

🇳🇱 185.93.89.147