3.239.202.201
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Amazon Data Services Northern Virginia
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14618
- Hostname(s)
- ec2-3-239-202-201.compute-1.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
No reports in the last 60 days
3.239.202.201 has been reported 73 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
73 from
45 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇮 as211431.net |
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.env
UA: Mozilla/5.0 (X11; Linux x86_64)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
|
Bad Web Bot | |
| 🇩🇪 big-cloud.nl |
Try to access /.env
|
Web App Attack | |
| 🇭🇳 unph |
Intento de acceso sospechoso en el login de WordPress
|
Brute-Force | |
| 🇨🇦 polycoda |
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)
|
Hacking Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇦🇺 2000cn.com.au |
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Hacking Web App Attack | |
| 🇬🇧 Swiptly |
Bot scanning for environment files .env .env/\*
...
|
Web App Attack | |
| 🇩🇪 Admins@FBN |
Threat Host blocked...
|
Web Spam Email Spam Port Scan Hacking | |
| 🇧🇪 boxed-it |
GET /.env (Tarpitted for 4m22s, wasted 15.47kB)
|
Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
|
Exploited Host Web App Attack | |
| 🇺🇸 LotPhantom |
2025/12/08 01:00:22 [error] 1093313#1093313: *418580 access forbidden by rule, client: 3.239.202.201, server: api.bridginggaps.tech, request: "GET /.env HTTP/1.1", host: "api.bridginggaps.tech"
...
|
Web App Attack | |
| Anonymous |
3.239.202.201 - - [08/Dec/2025:00:41:29 +0000] "GET /.env HTTP/1.1" 403 2747 "-" "Mozilla/5.0 (X11; Linux x86_64)"
...
|
Bad Web Bot Web App Attack | |
| Anonymous |
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1
|
Hacking Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-12-06.
|
Hacking Web App Attack SSH | |
| 🇩🇪 webanyone |
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown