JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

3.79.115.133

Recent Activity

Abuse Confidence Score

100% Critical

53 reports

45 reporters · latest 3 days ago

ISP: A100 ROW GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16509
Hostname(s): ec2-3-79-115-133.eu-central-1.compute.amazonaws.com
Domain Name: amazon.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

53 from 45 distinct reporters

First reported

November 9th 2026

Most recent report

3 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 13 🇺🇸 United States of America 13 🇳🇱 Netherlands 4

Most common categories Web App Attack 46 Bad Web Bot 19 Hacking 16 Brute-Force 15 Web Spam 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 radardatelecom	2026-11-10 16:55:04 UTC · (3 days ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
Anonymous	2026-11-10 15:25:43 UTC · (3 days ago)	"GET /.git/config HTTP/1.1"	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2026-11-10 06:14:45 UTC · (4 days ago)	3 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇭🇷 bubausluge	2026-11-10 06:10:42 UTC · (4 days ago)	Blocked by https://aegis.hr — Web Scanner - (MITRE T1595.001), 10 attempts, Period: 2026-11-10 05:19:54 to 2026-11-10 05:19:54	Web App Attack Bad Web Bot
🇩🇪 sdos.es	2026-11-10 05:08:27 UTC · (4 days ago)	"Restricted File Access Attempt - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"	Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 05:07:45 UTC · (4 days ago)	(mod_security) mod_security (id:210492) triggered by 3.79.115.133 (ec2-3-79-115-133.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:07:40.888368 2026] [security2:error] [pi ... show more (mod_security) mod_security (id:210492) triggered by 3.79.115.133 (ec2-3-79-115-133.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:07:40.888368 2026] [security2:error] [pid 2114:tid 2148] [client 3.79.115.133:45192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "watchback.net"] [uri "/.git/config"] [unique_id "avKmnElnwd7Z6AfZ_5ewRAAAAQE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 SX Communications	2026-11-10 05:04:24 UTC · (4 days ago)	Web vulnerability scanning / probing from 3.79.115.133: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 1 hits; paths: /.git/config.	Port Scan Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 04:33:30 UTC · (4 days ago)	(mod_security) mod_security (id:210492) triggered by 3.79.115.133 (ec2-3-79-115-133.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:33:23.092980 2026] [security2:error] [pi ... show more (mod_security) mod_security (id:210492) triggered by 3.79.115.133 (ec2-3-79-115-133.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:33:23.092980 2026] [security2:error] [pid 27766:tid 27766] [client 3.79.115.133:59170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cathybermanmft.com"] [uri "/.git/config"] [unique_id "avKek_Ae8ynq9tkeZ7s7sAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-10 04:30:49 UTC · (4 days ago)	3.79.115.133 - - [10/Nov/2026:12:30:48 +0800] "GET /.git/config HTTP/1.1" 301 243 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" ...	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 04:09:36 UTC · (4 days ago)	(mod_security) mod_security (id:210492) triggered by 3.79.115.133 (ec2-3-79-115-133.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:09:33.158369 2026] [security2:error] [pi ... show more (mod_security) mod_security (id:210492) triggered by 3.79.115.133 (ec2-3-79-115-133.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:09:33.158369 2026] [security2:error] [pid 4443:tid 4443] [client 3.79.115.133:40118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.whodatnation.com"] [uri "/.git/config"] [unique_id "avKY_bRLGpiLYJ68-ZiSKgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-10 03:34:19 UTC · (4 days ago)	(mod_security) mod_security (id:210492) triggered by 3.79.115.133 (ec2-3-79-115-133.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:34:11.576265 2026] [security2:error] [pi ... show more (mod_security) mod_security (id:210492) triggered by 3.79.115.133 (ec2-3-79-115-133.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:34:11.576265 2026] [security2:error] [pid 30272:tid 30272] [client 3.79.115.133:50508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chrisbilder.com"] [uri "/.git/config"] [unique_id "avKQsyp_N0d9f9uhtf_8NQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇹 NotACaptcha	2026-11-10 03:32:33 UTC · (4 days ago)	webserver:80 [10/Nov/2026] "GET /.git/config HTTP/1.1" 403 403 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36"	Web App Attack
Anonymous	2026-11-10 03:22:24 UTC · (4 days ago)	Probing for exposed sensitive files.	Hacking
🇺🇸 TPI-Abuse	2026-11-10 03:11:57 UTC · (4 days ago)	(mod_security) mod_security (id:210492) triggered by 3.79.115.133 (ec2-3-79-115-133.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:11:53.435119 2026] [security2:error] [pi ... show more (mod_security) mod_security (id:210492) triggered by 3.79.115.133 (ec2-3-79-115-133.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:11:53.435119 2026] [security2:error] [pid 26160:tid 26160] [client 3.79.115.133:49148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accu-tuner.com"] [uri "/.git/config"] [unique_id "avKLeaSM-1z_RkTWt68FygAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇭 thaizone.com	2026-11-10 03:06:00 UTC · (4 days ago)	Brute Force Attack on a Web Resources (probe) #1	DDoS Attack Web Spam Brute-Force Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.210.31.77

🇧🇪 198.235.24.240

🇧🇪 198.235.24.211

🇳🇱 195.178.110.227

🇸🇪 185.246.128.133

🇺🇸 162.216.150.35

🇸🇬 139.99.86.150

🇨🇳 111.192.30.181

🇨🇿 104.28.114.10

🇵🇱 93.159.3.45

🇷🇴 80.94.92.179

🇸🇪 77.53.106.9

🇺🇸 76.34.11.11

🇩🇪 69.5.169.149

🇻🇳 45.251.115.132

🇳🇱 45.148.10.152

🇧🇪 198.235.24.168

🇹🇼 198.235.24.117

🇸🇬 165.154.200.214

🇺🇸 165.154.163.10