IP address

Passive DNS

Tags: IP in hostname

IP blacklists: AbuseIPDB
3.111.253.42 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc. Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-06-17 04:00:00.709000
Was present on blacklist at: 2025-06-17 04:00
blocklist.de web-login
3.111.253.42 is listed on the blocklist.de web-login blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)

Last checked at: 2025-06-18 22:05:00.447000
Was present on blacklist at: 2025-06-17 04:05, 2025-06-17 10:05, 2025-06-17 16:05, 2025-06-17 22:05, 2025-06-18 04:05, 2025-06-18 10:05, 2025-06-18 16:05, 2025-06-18 22:05
blocklist.de Apache
3.111.253.42 is listed on the blocklist.de Apache blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing attacks on the service Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)

Last checked at: 2025-06-18 22:05:05.256000
Was present on blacklist at: 2025-06-17 04:05, 2025-06-17 10:05, 2025-06-17 16:05, 2025-06-17 22:05, 2025-06-18 04:05, 2025-06-18 10:05, 2025-06-18 16:05, 2025-06-18 22:05

Origin AS: AS16509 - AMAZON-02
BGP Prefix: 3.108.0.0/14
geo: India, Mumbai; 🕑 Asia/Kolkata
hostname: ec2-3-111-253-42.ap-south-1.compute.amazonaws.com
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 3.0.0.0 - 3.127.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 443, 2087, 3306; Tags: database, cloud; CPEs: cpe:/a:apache:http_server, cpe:/a:oracle:mysql
ts_added: 2025-06-17 04:00:28.567000
ts_last_update: 2025-06-21 04:00:35.348000

Warden event timeline

DShield event timeline

Presence on blacklists