JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.249.252.133

3.249.252.133 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 66%: ?

66%

ISP	Amazon Data Services Ireland Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-249-252-133.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.249.252.133

Whois 3.249.252.133

IP Abuse Reports for 3.249.252.133:

This IP address has been reported a total of 15 times from 10 distinct sources. 3.249.252.133 was first reported on June 12th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 COMPLEX	2026-06-12 18:02:57 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from IE. Action taken: MANAGED_CHALLENGE ASN: undefined (u ... show more Triggered Cloudflare WAF (firewallCustom) from IE. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/1.0 (GET method) Endpoint: / UA: Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; [email protected]) show less	Bad Web Bot
Anonymous	2026-06-12 13:14:46 (1 day ago)	Probing for /owa	Web App Attack
🇩🇪 filstal.org	2026-06-12 11:08:55 (1 day ago)	Bad bot activity detected (automated scraping/probing) UA: Mozilla/5.0 (compatible; NetcraftSurveyAg ... show more Bad bot activity detected (automated scraping/probing) UA: Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; [email protected]) show less	Bad Web Bot Web App Attack
Anonymous	2026-06-12 10:32:57 (1 day ago)	Probing for /www	Web App Attack
🇫🇷 masterguru	2026-06-12 10:21:15 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 3.249.252.133 (IE/Ireland/ec2-3-249-2 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 3.249.252.133 (IE/Ireland/ec2-3-249-252-133.eu-west-1.compute.amazonaws.com): 2 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 gumbysoft	2026-06-12 09:34:25 (1 day ago)	Unauthorized web vulnerability scan (/.env, wordpress, etc.)	Web App Attack
Anonymous	2026-06-12 08:58:15 (1 day ago)	Probing for /ssl	Web App Attack
🇬🇧 pinguin	2026-06-12 08:56:39 (1 day ago)	Triggered Cloudflare WAF (firewallManaged) from IE. Action taken: LOG Protocol: HTTP/1.0 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from IE. Action taken: LOG Protocol: HTTP/1.0 (GET method) Endpoint: / UA: Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; [email protected]) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 4server	2026-06-12 08:48:27 (1 day ago)	[FriJun1210:48:25.6701532026][security2:error][pid3418054:tid3418125][client3.249.252.133:0]ModSecur ... show more [FriJun1210:48:25.6701532026][security2:error][pid3418054:tid3418125][client3.249.252.133:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\\|\\\\\\\\bcensysinspect\\\\\\\\b\\|\\\\\\\\bcensys\\\\\\\\b\\|\\\\\\\\bexpanse\\\\\\\\b\\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.mgevents.ch\"][uri\"/\"][unique_id\"aivH2RkT_CX0Nxte3IUTLwAAAIg\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 backslash	2026-06-12 08:21:06 (1 day ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-06-12 08:19:41 (1 day ago)	Bad bot ignoring robot.txt	Bad Web Bot
Anonymous	2026-06-12 08:08:58 (1 day ago)	Probing for /webmail	Web App Attack
🇨🇭 4server	2026-06-12 08:07:37 (1 day ago)	[FriJun1210:07:31.8563332026][security2:error][pid3401223:tid3401925][client3.249.252.133:0]ModSecur ... show more [FriJun1210:07:31.8563332026][security2:error][pid3401223:tid3401925][client3.249.252.133:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\\|\\\\\\\\bcensysinspect\\\\\\\\b\\|\\\\\\\\bcensys\\\\\\\\b\\|\\\\\\\\bexpanse\\\\\\\\b\\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.filarmonicaagno.ch\"][uri\"/\"][unique_id\"aiu-Q24C67zj5bKLC1ZOBgAAARE\"] show less	Hacking Web App Attack
🇷🇺 DZBOT	2026-06-12 08:05:14 (1 day ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇫🇷 masterguru	2026-06-12 07:37:34 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 3.249.252.133 (IE/Ireland/ec2-3-249-2 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 3.249.252.133 (IE/Ireland/ec2-3-249-252-133.eu-west-1.compute.amazonaws.com): 1 in the last 3600 secs (0-195) show less	Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.73.56.10

🇺🇸 172.174.72.225

🇺🇸 162.216.149.49

🇳🇬 102.91.103.129

🇷🇺 213.59.165.109

🇩🇪 172.253.1.215

🇺🇸 162.243.173.34

🇨🇳 118.213.136.182

🇻🇳 118.71.58.199

🇺🇸 66.132.224.15

🇭🇰 36.255.220.145

🇺🇸 20.168.121.93

🇧🇷 205.210.31.241

🇪🇬 197.39.158.125

🇺🇸 186.179.47.12

🇺🇸 186.179.39.116

🇺🇸 186.179.39.51

🇨🇴 179.33.186.150

🇨🇳 106.35.149.158

🇧🇩 103.131.144.53