AbuseIPDB » 3.25.199.128
3.25.199.128
This IP was reported 6 times. Confidence of
Abuse
is 29% : ?
ISP
Amazon Corporate Services Pty Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-3-25-199-128.ap-southeast-2.compute.amazonaws.com
Domain Name
amazon.com.au
Country
🇦🇺
Australia
City
Sydney, New South Wales
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 3.25.199.128 :
This IP address has been reported a total of
6
times from
4 distinct
sources.
3.25.199.128 was first reported on
July 24th 2026 , and the most recent report was
25 minutes ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-24 11:20:32
(25 minutes ago)
(caddyscan) Scanner path probe from 3.25.199.128 (AU/Australia/ec2-3-25-199-128.ap-southeast-2.compu ...
show more
(caddyscan) Scanner path probe from 3.25.199.128 (AU/Australia/ec2-3-25-199-128.ap-southeast-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:11:20:26 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:11:20:27 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:11:20:27 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:11:20:27 +0000] "GET /.env.production HTTP/1.1"
[REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:11:20:27 +0000] "GET /.env.staging HTTP/1.1"
show less
Port Scan
🇹🇭
thaizone.com
2026-07-24 10:41:47
(1 hour ago)
Hacking attempts against websites (D1) #1
Web App Attack
Hacking
2026-07-24 09:51:55
(1 hour ago)
(caddyscan) Scanner path probe from 3.25.199.128 (AU/Australia/ec2-3-25-199-128.ap-southeast-2.compu ...
show more
(caddyscan) Scanner path probe from 3.25.199.128 (AU/Australia/ec2-3-25-199-128.ap-southeast-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:09:51:52 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:09:51:52 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:09:51:52 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:09:51:53 +0000] "GET /.env.production HTTP/1.1"
[REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:09:51:53 +0000] "GET /.env.staging HTTP/1.1"
show less
Port Scan
2026-07-24 08:22:39
(3 hours ago)
(caddyscan) Scanner path probe from 3.25.199.128 (AU/Australia/ec2-3-25-199-128.ap-southeast-2.compu ...
show more
(caddyscan) Scanner path probe from 3.25.199.128 (AU/Australia/ec2-3-25-199-128.ap-southeast-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:08:22:37 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:08:22:37 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:08:22:38 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:08:22:38 +0000] "GET /.env.production HTTP/1.1"
[REDACTED] 200 2627 3.25.199.128 - - [24/Jul/2026:08:22:38 +0000] "GET /.env.staging HTTP/1.1"
show less
Port Scan
🇩🇪
R.G.
2026-07-24 08:04:07
(3 hours ago)
(ScanningForFiles) Scanning for files triggerd 3.25.199.128 (AU/Australia/ec2-3-25-199-128.ap-southe ...
show more
(ScanningForFiles) Scanning for files triggerd 3.25.199.128 (AU/Australia/ec2-3-25-199-128.ap-southeast-2.compute.amazonaws.com): 10 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-07-24 03:05:41
(8 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: