JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.16.23.254

3.16.23.254 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-16-23-254.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.16.23.254

Whois 3.16.23.254

IP Abuse Reports for 3.16.23.254:

This IP address has been reported a total of 43 times from 24 distinct sources. 3.16.23.254 was first reported on September 21st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Ivo Vynckier	2026-07-18 12:58:00 (1 day ago)	3.16.23.254 - - [18/Jul/2026:01:31:09 +0200] "HEAD /.env.backup HTTP/1.1" 403 0 "https://www.google. ... show more 3.16.23.254 - - [18/Jul/2026:01:31:09 +0200] "HEAD /.env.backup HTTP/1.1" 403 0 "https://www.google.com/search?q=betty-bouckaert.be" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36" 3.16.23.254 - - [18/Jul/2026:01:31:09 +0200] "HEAD /.git/HEAD HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 3.16.23.254 - - [18/Jul/2026:01:31:09 +0200] "HEAD /.env.production HTTP/1.1" 403 0 "https://www.google.com/search?q=betty-bouckaert.be" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 3.16.23.254 - - [18/Jul/2026:01:31:09 +0200] "HEAD /.env.local HTTP/1.1" 403 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 07:29:30 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.16.23.254 (ec2-3-16-23-254.us-east-2.compute. ... show more (mod_security) mod_security (id:210492) triggered by 3.16.23.254 (ec2-3-16-23-254.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 03:29:22.211723 2026] [security2:error] [pid 1925068:tid 1925068] [client 3.16.23.254:37322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "murphylumber.ca"] [uri "/.git/HEAD"] [unique_id "alsrUi9VnmRe_LMGtfoczwAAAAY"], referer: https://www.google.com/search?q=murphylumber.ca show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-07-18 07:23:19 (2 days ago)	Accessed trap at '/.git/HEAD'	Web App Attack
🇺🇸 technojoe99	2026-07-18 06:50:14 (2 days ago)	Exploit scan from 3.16.23.254. HEAD /wp-config.php HTTP/1.1.	Web App Attack
🇳🇱 Mangelot Hosting	2026-07-18 06:24:49 (2 days ago)	(modsecurity) srv102 ModSecurity 3.16.23.254 (US/United States/ec2-3-16-23-254.us-east-2.compute.ama ... show more (modsecurity) srv102 ModSecurity 3.16.23.254 (US/United States/ec2-3-16-23-254.us-east-2.compute.amazonaws.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇦🇹 Starburst SysOp Team	2026-07-18 06:03:46 (2 days ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-vie6-1)	Hacking Web App Attack
🇩🇪 XICTRON	2026-07-18 03:20:05 (2 days ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇩🇪 big-cloud.nl	2026-07-18 03:01:43 (2 days ago)	Try to access /.git/HEAD	Web App Attack
Anonymous	2026-07-18 02:41:16 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 3.16.23.254 (US/United States/ec2-3-16- ... show more (mod_security) mod_security triggered on hostname [redacted] 3.16.23.254 (US/United States/ec2-3-16-23-254.us-east-2.compute.amazonaws.com) show less	SQL Injection
🇸🇪 EmK530	2026-07-18 02:22:04 (2 days ago)	URL flagged by RegEx: /.aws/credentials	Web App Attack
🇧🇪 voormedia	2026-07-17 22:49:06 (2 days ago)	Accessed trap at '/.aws/credentials'	Web App Attack
🇫🇷 masterguru	2026-07-17 22:38:12 (2 days ago)	Restricted File Access Attempt. Matched phrase "secrets.json" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-17 22:01:41 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-16. show less	Web App Attack SSH Hacking
🇫🇷 dynamix	2026-07-17 20:38:07 (2 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 19:51:36 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 3.16.23.254 (ec2-3-16-23-254.us-east-2.compute. ... show more (mod_security) mod_security (id:210492) triggered by 3.16.23.254 (ec2-3-16-23-254.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 15:51:29.496722 2026] [security2:error] [pid 760758:tid 760758] [client 3.16.23.254:60618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weathercarib.net"] [uri "/.env.production"] [unique_id "alqHwcBXQeKIlc8UrXtjYgAAAAA"], referer: https://www.google.com/search?q=weathercarib.net show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 200.90.8.90

🇳🇱 185.93.89.79

🇨🇳 124.78.20.1

🇫🇷 91.231.89.223

🇱🇹 90.134.2.44

🇺🇸 77.111.110.200

🇱🇹 77.90.185.20

🇺🇸 20.80.88.32

🇳🇱 195.178.110.227

🇧🇷 191.9.124.218

🇳🇱 185.242.226.18

🇨🇳 106.75.77.231

🇩🇪 45.135.141.16

🇬🇧 2a06:4880::13

🇨🇱 191.114.119.83

🇸🇬 165.22.49.138

🇮🇩 163.7.6.41

🇵🇰 116.71.136.125

🇷🇴 92.118.39.78

🇱🇻 89.36.161.193