JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.253.36.24

3.253.36.24 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 47%: ?

47%

ISP	Amazon Data Services Ireland Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-253-36-24.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.253.36.24

Whois 3.253.36.24

IP Abuse Reports for 3.253.36.24:

This IP address has been reported a total of 12 times from 9 distinct sources. 3.253.36.24 was first reported on November 18th 2022, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-27 05:16:19 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.253.36.24 (ec2-3-253-36-24.eu-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 3.253.36.24 (ec2-3-253-36-24.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 01:16:11.177698 2026] [security2:error] [pid 3840844:tid 3840844] [client 3.253.36.24:35692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mfleetservice.com"] [uri "/.git/config"] [unique_id "ambpm92AHCdWdYZ-E0scGwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 webadmin	2026-07-26 06:46:10 (1 day ago)	2026-07-26T08:46:02.677371+02:00 tytan mobile-sai-api[4129]: [error] client: 3.253.36.24 server: mob ... show more 2026-07-26T08:46:02.677371+02:00 tytan mobile-sai-api[4129]: [error] client: 3.253.36.24 server: mobile.sai.pl, request: "POST", url: http://mobile.sai.pl/ [405]: Method Not Allowed 2026-07-26T08:46:03.688704+02:00 tytan mobile-sai-api[4129]: [error] client: 3.253.36.24 server: mobile.sai.pl, request: "POST", url: http://mobile.sai.pl/ [405]: Method Not Allowed 2026-07-26T08:46:06.214239+02:00 tytan mobile-sai-api[4129]: [error] client: 3.253.36.24 server: mobile.sai.pl, request: "POST", url: http://mobile.sai.pl/ [405]: Method Not Allowed 2026-07-26T08:46:09.389995+02:00 tytan mobile-sai-api[4129]: [error] client: 3.253.36.24 server: mobile.sai.pl, request: "GET", url: http://mobile.sai.pl/.git/config [404]: Not Found show less	Web App Attack
🇺🇸 Starburst SysOp Team	2026-07-26 03:22:29 (1 day ago)	Malware host detected by rbl.malware.expert. RBL lookup of 24.36.253.3.rbl.malware.expert succeeded ... show more Malware host detected by rbl.malware.expert. RBL lookup of 24.36.253.3.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-mnz6-7) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-24 10:45:40 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.253.36.24 (ec2-3-253-36-24.eu-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 3.253.36.24 (ec2-3-253-36-24.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:45:32.625305 2026] [security2:error] [pid 766479:tid 766485] [client 3.253.36.24:35278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "poeticdialogues.com"] [uri "/.git/config"] [unique_id "amNCTIGnyT19lJjew16eWAAAAIQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 08:49:10 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 3.253.36.24 (ec2-3-253-36-24.eu-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 3.253.36.24 (ec2-3-253-36-24.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 04:49:02.363609 2026] [security2:error] [pid 3737209:tid 3737209] [client 3.253.36.24:38602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pocosfarm.com"] [uri "/.git/config"] [unique_id "amMm_mPdP6exttpW72DXGAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-24 07:10:54 (3 days ago)	Multiple WAF Violations	Web App Attack
🇩🇪 netclix.gr	2026-07-24 06:23:29 (3 days ago)	(mod_security) mod_security triggered on hostname [redacted] 3.253.36.24 (IE/Ireland/ec2-3-253-36-24 ... show more (mod_security) mod_security triggered on hostname [redacted] 3.253.36.24 (IE/Ireland/ec2-3-253-36-24.eu-west-1.compute.amazonaws.com): (CF_ENABLE) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-07-24 06:07:26 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 3.253.36.24 (ec2-3-253-36-24.eu-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 3.253.36.24 (ec2-3-253-36-24.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 02:07:19.837848 2026] [security2:error] [pid 3113004:tid 3113004] [client 3.253.36.24:37452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pnp42.com"] [uri "/.git/config"] [unique_id "amMBF7nB-0GAHKS-sdAw0gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-07-24 04:20:03 (3 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇳🇿 Antinson	2026-07-24 03:27:27 (3 days ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇨🇭 backslash	2026-04-14 09:51:01 (3 months ago)	block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0	SQL Injection
🇬🇧 mangomad	2022-11-18 17:28:41 (3 years ago)	Repeated Apache mod_security rule triggers	Brute-Force Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.175.201.167

🇺🇸 195.184.76.21

🇺🇸 195.184.76.20

🇩🇪 185.183.157.214

🇻🇳 183.81.115.38

🇳🇱 172.94.9.107

🇺🇸 170.106.147.63

🇺🇸 146.88.241.69

🇺🇸 143.42.164.97

🇮🇳 117.253.195.36

🇰🇷 49.247.37.22

🇬🇧 213.166.84.57

🇧🇷 200.106.215.36

🇺🇸 195.184.76.67

🇦🇷 186.148.224.183

🇨🇳 180.165.46.214

🇮🇳 139.59.93.237

🇨🇳 119.97.189.120

🇨🇳 118.145.221.98

🇨🇳 118.81.206.143