JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.25.54.31

3.25.54.31 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 68%: ?

68%

ISP	Amazon Corporate Services Pty Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-25-54-31.ap-southeast-2.compute.amazonaws.com
Domain Name	amazon.com.au
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.25.54.31

Whois 3.25.54.31

IP Abuse Reports for 3.25.54.31:

This IP address has been reported a total of 15 times from 13 distinct sources. 3.25.54.31 was first reported on July 24th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 on-com	2026-07-28 06:48:24 (4 hours ago)	URL scan	Brute-Force Web App Attack
🇵🇱 srebrakowski.com	2026-07-28 05:42:43 (5 hours ago)	crowdsec/crowdsecurity/appsec-vpatch	Brute-Force
🇩🇪 Marc	2026-07-28 05:24:38 (5 hours ago)	3.25.54.31 - - [28/Jul/2026:07:23:48 +0200] "GET /.git/config HTTP/1.1" 404 705 "-" "Mozilla/5.0 (X1 ... show more 3.25.54.31 - - [28/Jul/2026:07:23:48 +0200] "GET /.git/config HTTP/1.1" 404 705 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:07:23:48 +0200] "GET /.git/config HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:07:24:37 +0200] "GET /.git/.env HTTP/1.1" 404 705 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Brute-Force
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-07-28 05:18:42 (5 hours ago)	3.25.54.31 - - [27/Jul/2026:23:18:41 -0600] "GET /.git/config HTTP/1.1" 301 3867 "-" "Mozilla/5.0 (W ... show more 3.25.54.31 - - [27/Jul/2026:23:18:41 -0600] "GET /.git/config HTTP/1.1" 301 3867 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇵🇱 maciejka	2026-07-28 05:07:00 (6 hours ago)	3.25.54.31 - - [28/Jul/2026:07:06:58 +0200] "GET /mailer/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 (Ma ... show more 3.25.54.31 - - [28/Jul/2026:07:06:58 +0200] "GET /mailer/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 3.25.54.31 - - [28/Jul/2026:07:06:59 +0200] "GET /mail/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" ... show less	Bad Web Bot
🇩🇪 yitzhaq	2026-07-28 04:16:39 (6 hours ago)	3.25.54.31 - - [28/Jul/2026:06:16:35 +0200] "GET /uat/.env HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Macin ... show more 3.25.54.31 - - [28/Jul/2026:06:16:35 +0200] "GET /uat/.env HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:06:16:35 +0200] "GET /stage/.env HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:06:16:35 +0200] "GET /development/.env HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:06:16:36 +0200] "GET /production/.env HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:06:16:36 +0200] "GET /config/app/.env HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chr show less	Web App Attack Hacking
🇩🇪 yitzhaq	2026-07-28 03:34:21 (7 hours ago)	3.25.54.31 - - [28/Jul/2026:05:34:16 +0200] "GET /uat/.env HTTP/1.1" 404 519 "-" "Mozilla/5.0 (X11; ... show more 3.25.54.31 - - [28/Jul/2026:05:34:16 +0200] "GET /uat/.env HTTP/1.1" 404 519 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:05:34:17 +0200] "GET /stage/.env HTTP/1.1" 404 519 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:05:34:17 +0200] "GET /development/.env HTTP/1.1" 404 519 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:05:34:17 +0200] "GET /production/.env HTTP/1.1" 404 519 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:05:34:17 +0200] "GET /config/app/.env HTTP/1.1" 404 519 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:05:34:18 +0200] "GET /. show less	Web App Attack Hacking
🇩🇪 yitzhaq	2026-07-28 02:45:11 (8 hours ago)	3.25.54.31 - - [28/Jul/2026:04:45:06 +0200] "GET /uat/.env HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Windo ... show more 3.25.54.31 - - [28/Jul/2026:04:45:06 +0200] "GET /uat/.env HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:04:45:06 +0200] "GET /stage/.env HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:04:45:06 +0200] "GET /development/.env HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:04:45:07 +0200] "GET /production/.env HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:04:45:07 +0200] "GET /config/app/.env HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3 show less	Web App Attack Hacking
🇩🇪 NihiliousMonk	2026-07-28 02:40:41 (8 hours ago)	Fail2Ban report from jail npm-scanners	Bad Web Bot Web App Attack
🇩🇪 dave	2026-07-28 01:24:34 (9 hours ago)	threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity ... show more threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity/appsec-vpatch,crowdsecurity/vpatch-env-access,crowdsecurity/vpatch-git-config targets=grogu hit_count=3 first_seen=2026-07-28T01:24:34Z last_seen=2026-07-28T01:24:34Z show less	Web App Attack
Anonymous	2026-07-28 00:53:10 (10 hours ago)	3.25.54.31 - - [28/Jul/2026:00:53:09 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; In ... show more 3.25.54.31 - - [28/Jul/2026:00:53:09 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 3.25.54.31 - - [28/Jul/2026:00:53:09 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 mravb	2026-07-27 18:13:04 (16 hours ago)	3.25.54.31 - - [27/Jul/2026:21:13:03 +0300] "GET /assets/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Wi ... show more 3.25.54.31 - - [27/Jul/2026:21:13:03 +0300] "GET /assets/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack Hacking
🇩🇪 big-cloud.nl	2026-07-26 02:12:58 (2 days ago)	Try to access /.git/config	Web App Attack
🇫🇷 dynamix	2026-07-24 20:41:57 (3 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 17:39:17 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 3.25.54.31 (ec2-3-25-54-31.ap-southeast-2.compu ... show more (mod_security) mod_security (id:210492) triggered by 3.25.54.31 (ec2-3-25-54-31.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 13:39:11.499541 2026] [security2:error] [pid 441381:tid 441381] [client 3.25.54.31:41826] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.1educare.gemexpressions.com"] [uri "/.git/config"] [unique_id "amOjPwo9He56WnVBal3G5AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.163.52

🇺🇸 195.184.76.124

🇺🇸 43.130.139.177

🇨🇳 223.199.163.218

🇧🇷 191.55.138.83

🇮🇳 157.48.95.39

🇭🇰 119.246.15.94

🇺🇸 50.206.133.234

🇬🇭 41.139.41.76

🇸🇦 2001:16a2:cbb0:8e00:7842:9f14:6434:f5c1

🇨🇳 218.13.50.67

🇩🇪 195.182.16.23

🇺🇸 185.226.198.6

🇻🇳 103.9.204.35

🇩🇪 43.157.54.144

🇩🇪 213.209.159.115

🇺🇸 174.99.50.163

🇹🇼 128.14.229.76

🇹🇭 118.172.48.36

🇧🇩 114.130.157.106