JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.249.239.95

3.249.239.95

Neutral Activity

25 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Amazon Data Services Ireland Limited

Usage Type

Data Center/Web Hosting/Transit

ASN

AS16509

Hostname(s)

ec2-3-249-239-95.eu-west-1.compute.amazonaws.com

Domain Name

amazon.com

Country

🇮🇪 Ireland

City

Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

3.249.239.95 has been reported 25 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 3.249.239.95:

This IP address has been reported a total of 25 times from 14 distinct sources. 3.249.239.95 was first reported on September 3rd 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-09-04 11:18:08 (1 year ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇫🇷 dynamix	2025-09-04 11:12:12 (1 year ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Hazzard	2025-09-04 10:43:21 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇳🇱 debestelapp	2025-09-04 06:55:03 (1 year ago)		Web App Attack
Anonymous	2025-09-04 06:07:48 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
🇳🇱 Savvii	2025-09-04 05:34:17 (1 year ago)	39 attempts against mh_ha-misbehave-ban on iron	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-03 23:29:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 3.249.239.95 (ec2-3-249-239-95.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.249.239.95 (ec2-3-249-239-95.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 03 19:29:09.319132 2025] [security2:error] [pid 21438:tid 21438] [client 3.249.239.95:59868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ultratecnologiamx.activethinkers.net"] [uri "/.env"] [unique_id "aLjPRQPsSyjXK3bI3fESXQAAAAo"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 updown.io	2025-09-03 23:17:49 (1 year ago)	{"level":"info","ts":1756940611.6388197,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1756940611.6388197,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"3.249.239.95","remote_port":"40660","client_ip":"3.249.239.95","proto":"HTTP/1.1","method":"GET","host":"w.www.159.89.98.98.nip.io","uri":"/","headers":{"Accept-Encoding":["gzip, deflate, br"],"Accept":["/"],"Connection":["keep-alive"],"Referer":["https://www.google.com/"],"Accept-Language":["en-US,en;q=0.9"],"User-Agent":["Mozilla/5.0 (Windows; U; MSIE 6.0; Macintosh; .NET CLR 3.5.15865; Intel Mac OS X 10_0_0)"]}},"bytes_read":0,"user_id":"","duration":0.00004903,"size":0,"status":308,"resp_headers":{"Content-Type":[],"Server":["Caddy"],"Connection":["close"],"Location":["https://w.www.159.89.98.98.nip.io/"]}} {"level":"info","ts":1756940612.810136,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"3.249.239.95","remote_port":"40848","client_ip":"3.249.239.95","proto":"HTTP/1.1","method":"GET","host":"w.www.159.89.98.98.nip.io","uri":"/ ... show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2025-09-03 23:11:43 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 3.249.239.95 (ec2-3-249-239-95.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.249.239.95 (ec2-3-249-239-95.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 03 19:11:36.395017 2025] [security2:error] [pid 27341:tid 27341] [client 3.249.239.95:38540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whatisozonetherapy.mroxygen.org"] [uri "/.env"] [unique_id "aLjLKIdP0cLAJxVOqx8WXgAAAAY"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-03 22:26:58 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 3.249.239.95 (ec2-3-249-239-95.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.249.239.95 (ec2-3-249-239-95.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 03 18:26:52.964291 2025] [security2:error] [pid 17328:tid 17328] [client 3.249.239.95:39356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trade.dodojuice.com"] [uri "/.env"] [unique_id "aLjArH4JlK5_frBSVM-XLQAAAAk"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-03 21:48:27 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 3.249.239.95 (ec2-3-249-239-95.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.249.239.95 (ec2-3-249-239-95.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 03 17:48:22.138318 2025] [security2:error] [pid 6764:tid 6764] [client 3.249.239.95:52312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rgvatvrepair.com.worldchat.global"] [uri "/.env"] [unique_id "aLi3prWlYGPeWrj8QuJe8AAAAAw"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-03 21:32:38 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 3.249.239.95 (ec2-3-249-239-95.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.249.239.95 (ec2-3-249-239-95.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 03 17:32:31.705657 2025] [security2:error] [pid 21523:tid 21523] [client 3.249.239.95:57756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solarfarms.totalstorage.solutions"] [uri "/.env"] [unique_id "aLiz70k7cMM28kvxmk5itwAAAAI"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-03 20:55:38 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 3.249.239.95 (ec2-3-249-239-95.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.249.239.95 (ec2-3-249-239-95.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 03 16:55:31.936784 2025] [security2:error] [pid 19882:tid 19882] [client 3.249.239.95:33864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mscpc.seizetheseason.com"] [uri "/.env"] [unique_id "aLirQ0dI7BRZPyl3DigTMgAAABo"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 zorrigas	2025-09-03 20:37:39 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 3.249.239.95 (IE/Ireland/ec2-3-249-239-95.eu-we ... show more (mod_security) mod_security (id:210492) triggered by 3.249.239.95 (IE/Ireland/ec2-3-249-239-95.eu-west-1.compute.amazonaws.com): 5 in the last 3600 secs show less	Brute-Force
🇺🇸 TPI-Abuse	2025-09-03 20:36:20 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 3.249.239.95 (ec2-3-249-239-95.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.249.239.95 (ec2-3-249-239-95.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 03 16:36:14.081375 2025] [security2:error] [pid 25864:tid 25864] [client 3.249.239.95:43732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "notforhirellc.scottwithers.xyz"] [uri "/.env"] [unique_id "aLimvsLlxtlCw8Jo-N2HKAAAAAY"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 175.9.222.52

🇨🇿 2a00:11b1:100f:685b:39ad:486d:16dc:5864

🇰🇷 211.226.56.56

🇺🇸 162.216.150.191

🇻🇳 118.69.191.195

🇨🇳 111.228.38.106

🇳🇱 93.152.205.108

🇷🇴 92.118.39.171

🇷🇴 86.121.251.43

🇧🇷 45.5.243.53

🇯🇵 34.97.53.121

🇷🇴 2.57.122.238

🇩🇪 217.79.181.38

🇧🇷 205.210.31.206

🇮🇹 193.84.108.240

🇫🇷 185.165.67.53

🇺🇸 104.252.145.221

🇨🇦 96.30.153.26

🇫🇮 77.42.36.33

🇩🇪 77.25.34.33