JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.99.180.249

3.99.180.249 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 31%: ?

31%

ISP	Amazon Data Services Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-99-180-249.ca-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.99.180.249

Whois 3.99.180.249

IP Abuse Reports for 3.99.180.249:

This IP address has been reported a total of 12 times from 9 distinct sources. 3.99.180.249 was first reported on July 14th 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-17 13:03:52 (4 weeks ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-16 22:04:29 (4 weeks ago)	Auto-ban: >3000 req/min op 2026-07-16	Web App Attack SSH Hacking
Anonymous	2026-07-16 12:03:38 (4 weeks ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 11:25:04 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 3.99.180.249 (ec2-3-99-180-249.ca-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.99.180.249 (ec2-3-99-180-249.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 07:25:00.016791 2026] [security2:error] [pid 16485:tid 16485] [client 3.99.180.249:35630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "omahareact.org"] [uri "/.git/config"] [unique_id "ali_jP4-ib_Y7yG9URONWQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 gadix	2026-07-16 09:16:49 (4 weeks ago)	[16/Jul/2026:11:16:46.781359 +0200] alihfp4Oij9S21dmTHn7NgAAAAQ 3.99.180.249 51882 127.0.0.1 7081 [1 ... show more [16/Jul/2026:11:16:46.781359 +0200] alihfp4Oij9S21dmTHn7NgAAAAQ 3.99.180.249 51882 127.0.0.1 7081 [16/Jul/2026:11:16:47.009549 +0200] alihf1KaY413zUP1s6ITPwAAAAA 3.99.180.249 51894 127.0.0.1 7081 [16/Jul/2026:11:16:47.122179 +0200] alihf3fL3KFDBIdw9FMgiwAAAAs 3.99.180.249 51910 127.0.0.1 7081 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 07:31:09 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 3.99.180.249 (ec2-3-99-180-249.ca-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.99.180.249 (ec2-3-99-180-249.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 03:31:02.884786 2026] [security2:error] [pid 14588:tid 14588] [client 3.99.180.249:57190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ols.e-zschedule.com"] [uri "/.git/config"] [unique_id "aliItsO85sxB2V7Ik45YJAAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 03:43:04 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 3.99.180.249 (ec2-3-99-180-249.ca-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.99.180.249 (ec2-3-99-180-249.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 23:42:57.414067 2026] [security2:error] [pid 12975:tid 12975] [client 3.99.180.249:35410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oliverhardy.com"] [uri "/.git/config"] [unique_id "alhTQZ_8HNG75ZnNhbZgvQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 DocNetzwerk	2026-07-15 09:46:00 (4 weeks ago)	(mod_security) mod_security triggered on hostname [redacted] 3.99.180.249 (CA/Canada/ec2-3-99-180-24 ... show more (mod_security) mod_security triggered on hostname [redacted] 3.99.180.249 (CA/Canada/ec2-3-99-180-249.ca-central-1.compute.amazonaws.com) show less	SQL Injection
🇮🇹 VHosting	2026-07-15 00:45:03 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-07-14 21:32:21 (1 month ago)	Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probi ... show more Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probing. show less	Web App Attack
Anonymous	2026-07-14 21:27:03 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
Anonymous	2026-07-14 18:50:46 (1 month ago)	Multiple web server 400 error codes from same source ip	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.176.29.10

🇦🇴 193.163.125.68

🇬🇧 185.216.145.172

🇺🇸 159.65.166.11

🇩🇪 151.243.11.237

🇺🇸 146.88.240.105

🇺🇸 136.70.65.172

🇨🇳 101.42.46.111

🇺🇸 100.2.103.79

🇮🇷 87.107.4.186

🇬🇧 31.14.254.9

🇺🇸 20.38.3.247

🇫🇷 217.182.253.249

🇧🇪 198.235.24.138

🇵🇱 194.180.48.39

🇸🇪 185.246.130.20

🇺🇸 162.216.149.151

🇨🇳 118.251.97.136

🇲🇾 115.132.19.164

🇻🇳 103.1.210.25