JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.250.15.230

3.250.15.230 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 45%: ?

45%

ISP	Amazon Data Services Ireland Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-250-15-230.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.250.15.230

Whois 3.250.15.230

IP Abuse Reports for 3.250.15.230:

This IP address has been reported a total of 11 times from 7 distinct sources. 3.250.15.230 was first reported on May 19th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-13 22:01:00 (12 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-12. show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-07-12 22:00:11 (1 day ago)	Auto-ban: >3000 req/min op 2026-07-12	Web App Attack SSH Hacking
🇩🇪 big-cloud.nl	2026-07-12 11:56:30 (1 day ago)	Try to access /.git/config	Web App Attack
🇫🇷 Octopuce	2026-07-12 11:39:47 (1 day ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇦🇺 2000cn.com.au	2026-07-12 10:48:12 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-12 10:25:37 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.250.15.230 (ec2-3-250-15-230.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.250.15.230 (ec2-3-250-15-230.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 06:25:32.787988 2026] [security2:error] [pid 16592:tid 16592] [client 3.250.15.230:40886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindtekt.com.aquasafedemo.com"] [uri "/.git/config"] [unique_id "alNrnHnGNn2GgRrMzB3cNgAAAEk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-12 09:25:34 (2 days ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-05-19 02:16:04 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 3.250.15.230 (ec2-3-250-15-230.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.250.15.230 (ec2-3-250-15-230.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 22:15:57.940305 2026] [security2:error] [pid 4418:tid 4418] [client 3.250.15.230:36278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "springmeadowventures.com"] [uri "/.git/config"] [unique_id "agvH3eSIsejbo_oAuae8UAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-19 01:49:59 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 3.250.15.230 (ec2-3-250-15-230.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.250.15.230 (ec2-3-250-15-230.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 21:49:55.422979 2026] [security2:error] [pid 16337:tid 16337] [client 3.250.15.230:42778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "springfieldtileexpert.com"] [uri "/.git/config"] [unique_id "agvBw7u0T-SZbkoUrIE5uQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-05-19 00:50:55 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-05-19 00:22:18 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 3.250.15.230 (ec2-3-250-15-230.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.250.15.230 (ec2-3-250-15-230.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 20:22:13.643340 2026] [security2:error] [pid 3354:tid 3354] [client 3.250.15.230:52872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sprek.net"] [uri "/.git/config"] [unique_id "agutNe-KRe8xwnAQftD8VQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.96

🇺🇸 165.154.135.109

🇭🇰 156.225.1.87

🇺🇸 52.160.34.85

🇺🇸 2607:f8b0:4001:c0a::125

🇰🇷 211.46.177.174

🇩🇪 149.224.47.52

🇺🇸 148.153.56.170

🇺🇸 147.185.132.217

🇮🇳 103.174.28.86

🇫🇷 92.205.23.230

🇺🇸 81.30.98.91

🇨🇳 62.234.60.196

🇸🇬 47.84.142.62

🇺🇸 24.234.202.117

🇨🇳 218.75.165.74

🇪🇹 196.189.119.84

🇨🇴 181.53.96.64

🇺🇸 147.185.132.187

🇱🇹 81.30.98.47