JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.249.149.72

3.249.149.72 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 36%: ?

36%

ISP	Amazon Data Services Ireland Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-249-149-72.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.249.149.72

Whois 3.249.149.72

IP Abuse Reports for 3.249.149.72:

This IP address has been reported a total of 17 times from 12 distinct sources. 3.249.149.72 was first reported on July 24th 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 07:00:00 (4 weeks ago)	Apache probe; attempts=1266; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.e ... show more Apache probe; attempts=1266; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.env.bak \| /.env.ci \| /.env.dev \| /.env.development \| /.env.dist \| /.env.docker \| /.env.example \| /.env.fly \| /.env.json \| /.env.live \| /.env.local \| /.env.neon \| /.env.old \| /.env.preprod \| /.env.prod \| /.env.production \| /.env.railway \| /.env.remote \| /.env.render \| /.env.sample \| /.env.save \| /.env.stage \| /.env.staging \| /.env.supabase \| /.env.swp \| /.env.test \| /.env.txt \| /.env.uat \| /.env.vault \| /.env.vercel \| /.env.yaml \| /.env.yml \| /.env~ \| /.git/.env \| /.git/config \| /actions/.env \| /admin-panel/.env \| /admin/.env \| /administrator/.env \| /angular/.env \| /ansible/.env \| /api/.env \| /api/dev/.env \| /api/staging/.env \| /api/v1/.env \| /api/v2/.env \| /api/v3/.env \| /app/.env \| /application/.env \| /apps/.env \| /assets/.env \| /aws/.env \| /azure/.env \| /backend/.env \| /backup/.env \| /backups/.env \| /beta/.env \| ... [211 exact paths total] show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-28 02:18:20 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 3.249.149.72 (ec2-3-249-149-72.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.249.149.72 (ec2-3-249-149-72.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 22:18:16.298032 2026] [security2:error] [pid 2994649:tid 2994711] [client 3.249.149.72:49920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oplconnect.com"] [uri "/.git/config"] [unique_id "amgRaMusps2QioDQDCW6bAAAAcQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 10:27:03 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 3.249.149.72 (ec2-3-249-149-72.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.249.149.72 (ec2-3-249-149-72.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 06:26:57.435100 2026] [security2:error] [pid 27842:tid 27842] [client 3.249.149.72:48850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ozarkmountainwinetrail.org"] [uri "/.git/config"] [unique_id "amcycT2FwU2jaxQu7iYnAQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-27 01:16:15 (1 month ago)	Try to access /.git/config	Web App Attack
🇳🇱 Site.eu	2026-07-26 12:43:01 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 dynamix	2026-07-25 22:18:50 (1 month ago)	Multiple WAF Violations	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-25 22:03:49 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-24. show less	Web App Attack SSH Hacking
🇧🇪 taivas.nl	2026-07-25 04:33:28 (1 month ago)	Many_bad_calls	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-24 22:01:46 (1 month ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
🇪🇸 pipeline.es	2026-07-24 15:30:16 (1 month ago)	Web scanning / probing for vulnerable paths \| URL: /jenkins/.env \| Evidence: maseuropa.es 3.249.149. ... show more Web scanning / probing for vulnerable paths \| URL: /jenkins/.env \| Evidence: maseuropa.es 3.249.149.72 - - [24/Jul/2026:17:29:14 +0200] \"GET /jenkins/.env HTTP/1.1\" 404 22058 \"-\" \"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=IE \| ASN: AMAZON-02 \| Country: IE show less	Port Scan Web App Attack
Anonymous	2026-07-24 11:14:04 (1 month ago)	Bot / scanning and/or hacking attempts: GET /.env.sample HTTP/1.1, GET /.env.stage HTTP/1.1, GET /.e ... show more Bot / scanning and/or hacking attempts: GET /.env.sample HTTP/1.1, GET /.env.stage HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.dev HTTP/1.1 show less	Hacking Web App Attack
🇫🇷 masterguru	2026-07-24 09:33:44 (1 month ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇧🇪 taivas.nl	2026-07-24 08:32:14 (1 month ago)	Bad_requests	Bad Web Bot
🇫🇷 masterguru	2026-07-24 08:27:04 (1 month ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇮🇹 VHosting	2026-07-24 07:15:05 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 193.104.179.151

🇺🇸 168.100.149.39

🇺🇸 162.216.149.90

🇲🇦 105.77.209.132

🇺🇸 104.23.248.211

🇿🇦 102.182.130.124

🇫🇷 91.231.89.158

🇺🇦 31.131.31.210

🇺🇸 23.94.183.169

🇱🇹 213.176.26.182

🇱🇹 213.176.26.175

🇺🇸 204.93.50.121

🇺🇸 185.183.84.140

🇲🇽 158.23.147.79

🇧🇬 152.89.28.212

🇹🇷 149.0.150.141

🇺🇿 84.54.115.46

🇧🇬 79.124.56.142

🇨🇦 67.231.28.206

🇺🇸 20.84.163.78