JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.82.141.143

3.82.141.143 was found in our database!

This IP was reported 318 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-3-82-141-143.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.82.141.143

Whois 3.82.141.143

IP Abuse Reports for 3.82.141.143:

This IP address has been reported a total of 318 times from 210 distinct sources. 3.82.141.143 was first reported on September 10th 2026, and the most recent report was 34 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 AGEPCom	2026-09-18 19:35:57 (34 minutes ago)	Smart-Ban: IP bannie via score AbuseIPDB	Brute-Force Web App Attack
🇺🇸 TAY	2026-09-18 19:33:52 (36 minutes ago)	3.82.141.143 - - [19/Sep/2026:03:33:39 +0800] "GET /wp-config.php HTTP/1.1" 404 2049 "-" "Mozilla/5. ... show more 3.82.141.143 - - [19/Sep/2026:03:33:39 +0800] "GET /wp-config.php HTTP/1.1" 404 2049 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 3.82.141.143 - - [19/Sep/2026:03:33:42 +0800] "GET /wp-config.php-backup HTTP/1.1" 404 7852 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 3.82.141.143 - - [19/Sep/2026:03:33:43 +0800] "GET /wp-config.php.save HTTP/1.1" 404 2049 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 3.82.141.143 - - [19/Sep/2026:03:33:43 +0800] "GET /wp-config.php~ HTTP/1.1" 404 7852 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 3.82.141.143 - - [19/Sep/2026:03:33:47 +0800] "GET /wp-config.php.old HTTP/1.1" 404 2049 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 ... show less	Brute-Force
🇫🇷 regishoussin	2026-09-18 19:32:44 (38 minutes ago)	Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of ... show more Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-09-18 19:32 UTC. show less	Bad Web Bot Web App Attack
🇺🇸 dot.mg	2026-09-18 18:58:07 (1 hour ago)	Bad behaviour	Web Spam
🇮🇹 VHosting	2026-09-18 18:50:04 (1 hour ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 konseptit	2026-09-18 18:41:12 (1 hour ago)	(mod_security) mod_security triggered on hostname [redacted] 3.82.141.143 (US/United States/ec2-3-82 ... show more (mod_security) mod_security triggered on hostname [redacted] 3.82.141.143 (US/United States/ec2-3-82-141-143.compute-1.amazonaws.com) show less	SQL Injection
🇦🇺 Klaverstyn	2026-09-18 18:39:54 (1 hour ago)	Excessive HTTP request rate	Web App Attack
🇫🇷 ELYAZ	2026-09-18 18:30:41 (1 hour ago)	(y3) Failed access -byebye- from 3.82.141.143 (US/United States/ec2-3-82-141-143.compute-1.amazonaws ... show more (y3) Failed access -byebye- from 3.82.141.143 (US/United States/ec2-3-82-141-143.compute-1.amazonaws.com): (CF_ENABLE) show less	Hacking
🇫🇷 venar	2026-09-18 18:21:10 (1 hour ago)	PrestaShop Security Module: suspicious probe path detected (/.env)	Web App Attack
Anonymous	2026-09-18 18:13:37 (1 hour ago)	3.82.141.143 - - [18/Sep/2026:13:13:27 -0500] "GET /.env.backup HTTP/1.1" 301 269 "-" "Mozilla/5.0 ( ... show more 3.82.141.143 - - [18/Sep/2026:13:13:27 -0500] "GET /.env.backup HTTP/1.1" 301 269 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 104.23.190.126 3.82.141.143 - - [18/Sep/2026:13:13:27 -0500] "GET /.env.bak HTTP/1.1" 301 266 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 104.23.190.126 3.82.141.143 - - [18/Sep/2026:13:13:30 -0500] "GET /.env.development HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 162.158.154.5 3.82.141.143 - - [18/Sep/2026:13:13:32 -0500] "GET /.env.dist HTTP/1.1" 301 267 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 162.158.155.166 3.82.141.143 - - [18/Sep/2026:13:13:32 -0500] "GET /.env.example HTTP/1.1" 301 270 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/ ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ger-stg-sifi1	2026-09-18 18:12:55 (1 hour ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-09-18 18:09:43 (2 hours ago)	[Fri Sep 18 20:09:36.350473 2026] [authz_core:error] [pid 9080] [client 3.82.141.143:1252] AH01630: ... show more [Fri Sep 18 20:09:36.350473 2026] [authz_core:error] [pid 9080] [client 3.82.141.143:1252] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Sep 18 20:09:36.446825 2026] [authz_core:error] [pid 9080] [client 3.82.141.143:1252] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Sep 18 20:09:41.385059 2026] [authz_core:error] [pid 9080] [client 3.82.141.143:1252] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇺🇸 snappic	2026-09-18 18:06:53 (2 hours ago)	Malicious Behaviour/Probing for vulnerabilities/Brute force attempts [GET /.lesshst] [Mozilla/5.0 (M ... show more Malicious Behaviour/Probing for vulnerabilities/Brute force attempts [GET /.lesshst] [Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36] show less	Bad Web Bot Web App Attack
Anonymous	2026-09-18 17:55:04 (2 hours ago)	3.82.141.143 - - [18/Sep/2026:19:54:59 +0200] "GET /.config/gcloud/configurations/config_default HTT ... show more 3.82.141.143 - - [18/Sep/2026:19:54:59 +0200] "GET /.config/gcloud/configurations/config_default HTTP/1.1" 404 2254 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 3.82.141.143 - - [18/Sep/2026:19:54:59 +0200] "GET /.config/sftp.json HTTP/1.1" 404 2255 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 3.82.141.143 - - [18/Sep/2026:19:54:59 +0200] "GET /.docker/config.json HTTP/1.1" 404 2254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 3.82.141.143 - - [18/Sep/2026:19:54:59 +0200] "GET /.config/gcloud/credentials.db HTTP/1.1" 404 2254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 3.82.141.143 - - [18/Sep/2026:19:54:59 +0200] "GET /.credentials HTTP/1.1" 404 2254 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, lik ... show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-09-18 17:43:11 (2 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.goblinpot.tech \| URI: /.auth.json \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack

Showing 1 to 15 of 318 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.17.1.118

🇨🇳 221.199.194.80

🇨🇦 165.227.40.127

🇮🇳 106.205.127.224

🇮🇳 103.149.197.34

🇩🇪 87.106.29.151

🇸🇪 83.226.56.106

🇩🇪 77.91.66.181

🇺🇸 71.218.110.143

🇱🇹 62.60.130.235

🇺🇸 50.28.86.69

🇺🇸 47.251.104.186

🇺🇦 46.33.50.236

🇺🇸 12.150.243.22

🇯🇵 8.216.8.28

🇲🇾 210.186.231.126

🇲🇾 202.165.22.102

🇬🇧 198.244.168.35

🇧🇷 131.196.87.72

🇯🇵 40.74.68.248