JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

3.235.124.55

Activity Trending Down

Abuse confidence score ?

82% Critical

113 reports

85 reporters · latest 1 month ago

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-3-235-124-55.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 3.235.124.55

Export CSV

This IP address has been reported a total of 113 times from 85 distinct sources. 3.235.124.55 was first reported on August 27th 2026, and the most recent report was 1 month ago. In the last 60 days, the top reporter locations were: Germany with 24 reports; France with 14 reports; Netherlands with 14 reports. The most common categories in these recent reports were: Web App Attack 79 times; Hacking 32 times; Bad Web Bot 30 times; Brute-Force 19 times; Exploited Host 6 times; Other 15 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 macrob	2026-08-31 08:43:43 (1 month ago)	2026/08/31 08:43:35 [error] 1452303#1452303: 539549783 access forbidden by rule, client: 3.235.124. ... show more 2026/08/31 08:43:35 [error] 1452303#1452303: 539549783 access forbidden by rule, client: 3.235.124.55, server: binixo.pl, request: "GET /.vite/manifest.json HTTP/2.0", host: "binixo.pl" 2026/08/31 08:43:35 [error] 1452303#1452303: 539549279 access forbidden by rule, client: 3.235.124.55, server: binixo.pl, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "binixo.pl" 2026/08/31 08:43:42 [error] 1452304#1452304: 539550511 access forbidden by rule, client: 3.235.124.55, server: binixo.pl, request: "GET /admin/login HTTP/2.0", host: "binixo.pl" ... show less	Web App Attack
🇳🇱 e.fierstra	2026-08-31 06:23:05 (1 month ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 hostmach	2026-08-31 06:22:28 (1 month ago)	(cpanel) Failed cPanel login from 3.235.124.55 (US/United States/ec2-3-235-124-55.compute-1.amazonaw ... show more (cpanel) Failed cPanel login from 3.235.124.55 (US/United States/ec2-3-235-124-55.compute-1.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-08-31 06:22:17 +0000] info [cphttpd] 3.235.124.55 - - "GET /rclone.conf HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-08-31 06:22:18 +0000] info [cphttpd] 3.235.124.55 - - "GET /asset-manifest.json HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-08-31 06:22:18 +0000] info [cphttpd] 3.235.124.55 - - "GET /privatekey.key HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-08-31 06:22:22 +0000] info [cphttpd] 3.235.124.55 - - "GET /ssl/server.key HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-08-31 06:22:24 +0000] info [cphttpd] 3.235.124.55 - - "GET /@fs/app/.env?raw?? HTTP/1.1" FAILED LOGIN webmaild: login attempt without username show less	Brute-Force SSH
🇩🇪 BlueWire Hosting	2026-08-31 02:30:05 (1 month ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇩🇪 EGP Abuse Dept	2026-08-31 01:45:38 (1 month ago)	Scanning for web/db/file exploits on www.izilookbook.com	SQL Injection Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-08-31 00:05:53 (1 month ago)	Attempted access to sensitive endpoint (/login) detected. Automated scan or unauthorized probing.	Web App Attack
🇺🇸 H24	2026-08-30 23:06:45 (1 month ago)	/.env.bak /.git/HEAD /.git-credentials /.aws/credentials /wp-json /.env /.git/config	Web App Attack
🇮🇩 securejdprop	2026-08-30 20:29:15 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/vpatch-CVE-2025-29927.	Hacking
🇬🇧 Swiptly	2026-08-30 18:38:29 (1 month ago)	Excessive 403/404/405 PHP/CMS errors from scanning or broken bots ...	Web App Attack
🇫🇷 masterguru	2026-08-30 15:34:09 (1 month ago)	URL file extension is restricted by policy. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ ... show more URL file extension is restricted by policy. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. (920440-135) show less	Hacking
🇪🇸 el-brujo	2026-08-30 15:16:54 (1 month ago)	3.235.124.55 - - [30/Aug/2026:17:16:54 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 15911 "-" ... show more 3.235.124.55 - - [30/Aug/2026:17:16:54 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 15911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0" 3.235.124.55 - - [30/Aug/2026:17:16:54 +0200] "GET /build/manifest.json HTTP/2.0" 404 15911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0" 3.235.124.55 - - [30/Aug/2026:17:16:54 +0200] "GET /dist/manifest.json HTTP/2.0" 404 15911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0" ... show less	DDoS Attack Hacking
🇸🇪 vaia.cloud	2026-08-30 14:20:02 (1 month ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇳🇱 ismailk	2026-08-30 13:58:03 (1 month ago)	WordPress attack on tuncayozkan.com (auto-detected): tur=imza ulke=US puan=100 nginx=0 wf=0 cf=7 hiz ... show more WordPress attack on tuncayozkan.com (auto-detected): tur=imza ulke=US puan=100 nginx=0 wf=0 cf=7 hiz=10 404cesit=4. Blocked by adaptive firewall. show less	Web App Attack Bad Web Bot
🇸🇪 KIDOS	2026-08-30 13:08:29 (1 month ago)	CrowdSec detected malicious activity	DDoS Attack
🇸🇪 KIDOS	2026-08-30 12:53:26 (1 month ago)	IIS malicious activity: high_400_error_rate (80% of requests are 400 errors)	Web App Attack

Showing 16 to 30 of 113 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.152.186.24

🇧🇪 207.175.179.15

🇳🇱 188.166.66.204

🇺🇸 170.106.11.141

🇸🇬 101.47.134.74

🇹🇼 59.126.47.187

🇵🇱 54.38.56.124

🇺🇸 45.156.129.170

🇰🇷 211.46.87.99

🇳🇱 204.76.203.231

🇺🇸 195.184.76.51

🇩🇪 193.124.20.231

🇺🇸 192.252.215.125

🇨🇿 188.130.208.104

🇯🇵 139.162.116.22

🇵🇰 116.71.136.125

🇵🇱 87.251.64.132

🇳🇱 77.239.124.148

🇺🇸 64.62.197.103

🇱🇹 62.60.130.201