AbuseIPDB » 3.252.85.20
3.252.85.20 was found in our database!
This IP was reported 20 times. Confidence of Abuse is 93%: ?
| ISP | Amazon Data Services Ireland Limited |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS16509 |
| Hostname(s) |
ec2-3-252-85-20.eu-west-1.compute.amazonaws.com |
| Domain Name | amazon.com |
| Country | 🇮🇪 Ireland |
| City | Dublin, Leinster |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 3.252.85.20:
This IP address has been reported a total of 20 times from 17 distinct sources. 3.252.85.20 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇱🇻 garmtech.com |
|
Web App Attack | ||
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | ||
| 🇬🇧 Celtic |
Blocked by Fail2Ban with Jail (plesk-modsecurity)
|
Brute-Force SSH | ||
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | ||
| Anonymous |
Aggressive web scan
|
Web App Attack | ||
| 🇬🇧 seniorlinuxadmin |
|
Port Scan Web App Attack | ||
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | ||
| 🇺🇸 Mundo Bueno |
|
Hacking Web App Attack | ||
| 🇳🇴 Bots.go.to.hell |
This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing
|
Web App Attack Hacking | ||
| 🇳🇱 homeshowdomain.nl |
Auto-ban: >3000 req/min op 2026-07-15
|
Web App Attack SSH Hacking | ||
| 🇧🇪 cmbplf |
3.300 requests with url.path *.env
532 requests with url.path *phpinfo.php
|
Brute-Force Bad Web Bot | ||
| 🇳🇱 e.fierstra |
ModSecurity hits exceeded
|
Bad Web Bot Web App Attack | ||
| 🇫🇷 tecnoacquisti.com |
PrestaShop Security Module: suspicious probe path detected (/phpinfo.php)
|
Web App Attack | ||
| 🇭🇳 soporte |
Probe for vulnerabilities. Path attempted: /.git/config
|
Web App Attack | ||
| 🇳🇱 MM-bot |
URL-probe: HTTP/1.1 GET request on /.git/config (2026-07-15 00:02:47 UTC+2)
|
Web App Attack Hacking |
Showing 1 to 15 of 20 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩