JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.81.42.42

3.81.42.42 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 47%: ?

47%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-3-81-42-42.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.81.42.42

Whois 3.81.42.42

IP Abuse Reports for 3.81.42.42:

This IP address has been reported a total of 9 times from 8 distinct sources. 3.81.42.42 was first reported on July 16th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-07-18 23:15:22 (5 days ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇩🇪 4server	2026-07-18 09:25:36 (6 days ago)	[SatJul1811:25:33.3629202026][security2:error][pid3340047:tid3340086][client3.81.42.42:0]ModSecurity ... show more [SatJul1811:25:33.3629202026][security2:error][pid3340047:tid3340086][client3.81.42.42:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"giuseppeasaro.com\"][uri\"/robots.txt\"][unique_id\"altGjWzIox-trc1F0XuwJAAAAEM\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 backslash	2026-07-18 00:06:18 (6 days ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇺🇸 cyfordtechnologies.com	2026-07-17 19:08:01 (6 days ago)	Non-human high traffic: 8/7 : Reported by Cyford API	DDoS Attack
🇨🇭 4server	2026-07-17 15:04:59 (1 week ago)	[FriJul1717:04:53.8641782026][security2:error][pid667011:tid667435][client3.81.42.42:0]ModSecurity:A ... show more [FriJul1717:04:53.8641782026][security2:error][pid667011:tid667435][client3.81.42.42:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"aidconsultancy.ch\"][uri\"/robots.txt\"][unique_id\"alpEldu3MJyBEz2wARrJ3wAAAMk\"] show less	Hacking Web App Attack
🇬🇷 setupgr	2026-07-17 14:04:14 (1 week ago)	(mod_security) mod_security (id:11000010) triggered by 3.81.42.42 (US/United States/Virginia/Ashburn ... show more (mod_security) mod_security (id:11000010) triggered by 3.81.42.42 (US/United States/Virginia/Ashburn/-/[AS14618 AMAZON-AES]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Jul 17 17:04:14.332027 2026] [security2:error] [pid 499509:tid 499651] [client 3.81.42.42:48076] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "DotBot" at REQUEST_HEADERS:User-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "114"] [id "11000010"] [msg "BLOCKED BOT: DotBot on asteriassantorini.com"] [severity "CRITICAL"] [hostname "asteriassantorini.com"] [uri "/robots.txt"] [unique_id "alo2XiHOlZYeANMCZQdp4gAAAM8"] show less	Port Scan
🇩🇪 ghostwarriors	2026-07-17 08:50:03 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-07-17 00:32:10 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 3.81.42.42 (US/Unite ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 3.81.42.42 (US/United States/Virginia/Ashburn/ec2-3-81-42-42.compute-1.amazonaws.com) show less	Bad Web Bot
🇮🇩 Burayot	2026-07-16 20:07:49 (1 week ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 3.81.42.42 (US/United States/ec2-3-8 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 3.81.42.42 (US/United States/ec2-3-81-42-42.compute-1.amazonaws.com): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.189.201.233

🇭🇰 165.154.245.138

🇳🇵 202.70.78.237

🇲🇰 185.193.240.246

🇺🇸 162.216.149.49

🇰🇷 121.189.226.81

🇮🇳 115.187.45.20

🇺🇸 91.230.168.18

🇫🇷 85.217.140.53

🇸🇪 83.233.149.204

🇳🇱 45.148.10.151

🇬🇧 35.203.210.245

🇺🇸 34.138.252.240

🇳🇱 213.177.179.91

🇮🇹 172.213.144.209

🇺🇸 172.110.223.73

🇮🇳 139.59.18.80

🇰🇷 112.216.129.27

🇩🇪 69.5.169.228

🇺🇸 195.184.76.55