JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.99.162.239

3.99.162.239 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 51%: ?

51%

ISP	Amazon Data Services Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-99-162-239.ca-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.99.162.239

Whois 3.99.162.239

IP Abuse Reports for 3.99.162.239:

This IP address has been reported a total of 10 times from 7 distinct sources. 3.99.162.239 was first reported on July 16th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-17 09:33:43 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.99.162.239 (ec2-3-99-162-239.ca-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.99.162.239 (ec2-3-99-162-239.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 05:33:37.841614 2026] [security2:error] [pid 30563:tid 30563] [client 3.99.162.239:52234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cottrellfamily.com.cottrel.com"] [uri "/.git/config"] [unique_id "aln28RfmrcaZxrDjUZgx5wAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-17 07:51:08 (11 hours ago)	3.99.162.239 - - [17/Jul/2026:09:51:08 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT ... show more 3.99.162.239 - - [17/Jul/2026:09:51:08 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.99.162.239 - - [17/Jul/2026:09:51:08 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.99.162.239 - - [17/Jul/2026:09:51:08 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.99.162.239 - - [17/Jul/2026:09:51:08 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.99.162.239 - - [17/Jul/2026:09:51:08 +0200] "GET /.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.99.162.239 - - [17/Jul/2026:09:51:0 ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 07:08:00 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.99.162.239 (ec2-3-99-162-239.ca-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.99.162.239 (ec2-3-99-162-239.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 03:07:54.819305 2026] [security2:error] [pid 14293:tid 14293] [client 3.99.162.239:35554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.costaricaencasa.galvez.cc"] [uri "/.git/config"] [unique_id "alnUyovkVY6uZN93VNt2eQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 05:20:18 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.99.162.239 (ec2-3-99-162-239.ca-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.99.162.239 (ec2-3-99-162-239.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:20:13.912690 2026] [security2:error] [pid 306440:tid 306448] [client 3.99.162.239:57070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cosmetichouston.com.aafm.us"] [uri "/.git/config"] [unique_id "alm7jWjPk8ZVNP7fShUnSQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-17 04:06:06 (15 hours ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-17 04:04:42 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.99.162.239 (ec2-3-99-162-239.ca-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.99.162.239 (ec2-3-99-162-239.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 00:04:35.344198 2026] [security2:error] [pid 229573:tid 229573] [client 3.99.162.239:43292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cortona.ws.montepulciano.org"] [uri "/.git/config"] [unique_id "almp01hCuaH_4i4hIV3RIAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-07-17 03:30:04 (16 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-16 22:03:13 (21 hours ago)	Auto-ban: >3000 req/min op 2026-07-16	Web App Attack SSH Hacking
🇨🇭 4server	2026-07-16 18:27:38 (1 day ago)	[ThuJul1620:27:30.4123932026][security2:error][pid830137:tid830366][client3.99.162.239:0]ModSecurity ... show more [ThuJul1620:27:30.4123932026][security2:error][pid830137:tid830366][client3.99.162.239:0]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof\"rx$\(\?:submit\(\?:\\\\\\\\ \\|$\?$request$\?$\?:\\\\\\\\ \\|$\?\> \\|\<\<$\?:\\\\\\\\ \\|$remove\\|$\?:sign\?in\\|log\?\(\?:in\\|out$\\|next\\|modifier\\|envoyer\\|add\\|continue\\|weiter\\|account\\|results\\|select\)$\?:\\\\\\\\ \\|$\?\> \)\$\\|\^\<\?\\\\\\\\\?\?$\?:\\|\\\\\\\\ $\?xml\\|\^\<samlp\\|\^\>\>\?\$\)\"against\"ARGS:0\"required.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1025\"][id\"350147\"][rev\"168\"][msg\"Atomicorp.comWAFRules:PotentiallyUntrustedWebContentDetected\"][severity\"CRITICAL\"][hostname\"www.hosting-ticino-svizzera-com.ticino-hosting.ch\"][uri\"/\"][unique_id\"alkikltKsurGRbnXYNLQiQAAAYo\"] show less	Hacking Web App Attack
🇫🇷 masterguru	2026-07-16 14:29:25 (1 day ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 159.112.138.47

🇪🇬 102.43.71.143

🇺🇸 2a09:bac5:a6c4:2769::3ed:61

🇺🇸 2a02:6ea0:c412:2408::13

🇨🇳 218.92.244.10

🇨🇳 218.56.160.82

🇺🇸 205.210.31.42

🇹🇭 202.29.228.248

🇧🇷 186.237.244.250

🇱🇹 185.169.4.206

🇯🇵 160.251.202.248

🇯🇵 160.251.202.50

🇯🇵 160.251.182.78

🇮🇳 159.65.148.158

🇨🇳 121.225.41.252

🇸🇬 98.159.43.146

🇮🇷 94.184.18.207

🇩🇪 69.5.169.76

🇺🇸 66.132.195.79

🇳🇱 45.148.10.147