JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.95.232.1

3.95.232.1 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-3-95-232-1.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.95.232.1

Whois 3.95.232.1

IP Abuse Reports for 3.95.232.1:

This IP address has been reported a total of 34 times from 20 distinct sources. 3.95.232.1 was first reported on July 21st 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-26 05:45:21 (6 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 mondor.ro	2026-07-26 05:17:02 (7 hours ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 3.95.232.1, Reason:[(m ... show more Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 3.95.232.1, Reason:[(mod_security) mod_security (id:210492) triggered by 3.95.232.1 (US/United States/ec2-3-95-232-1.compute-1.amazonaws.com): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇺🇦 URAN Publishing Service	2026-07-25 19:46:56 (16 hours ago)	3.95.232.1 - - [25/Jul/2026:22:46:55 +0300] "GET /mysql.json HTTP/1.1" 404 4697 "-" "Mozilla/5.0 (Wi ... show more 3.95.232.1 - - [25/Jul/2026:22:46:55 +0300] "GET /mysql.json HTTP/1.1" 404 4697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-25 18:46:52 (17 hours ago)	3.95.232.1 - - [25/Jul/2026:21:46:51 +0300] "GET /.env HTTP/1.1" 404 4697 "-" "Mozilla/5.0 (Windows ... show more 3.95.232.1 - - [25/Jul/2026:21:46:51 +0300] "GET /.env HTTP/1.1" 404 4697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 3.95.232.1 - - [25/Jul/2026:21:46:51 +0300] "GET /.env.local HTTP/1.1" 404 4696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇨🇦 Mediashaker	2026-07-25 12:34:27 (1 day ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 3.95.232.1 (US/United St ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 3.95.232.1 (US/United States/ec2-3-95-232-1.compute-1.amazonaws.com) show less	Port Scan
🇳🇿 Antinson	2026-07-25 12:22:48 (1 day ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇩🇪 Gwyneth Llewelyn	2026-07-25 10:03:21 (1 day ago)	3.95.232.1 - - [25/Jul/2026:11:03:20 +0100] "GET /cgi-bin/ HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windo ... show more 3.95.232.1 - - [25/Jul/2026:11:03:20 +0100] "GET /cgi-bin/ HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-25 09:35:57 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.95.232.1 (ec2-3-95-232-1.compute-1.amazonaws. ... show more (mod_security) mod_security (id:210492) triggered by 3.95.232.1 (ec2-3-95-232-1.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 05:35:53.507432 2026] [security2:error] [pid 3567162:tid 3567162] [client 3.95.232.1:36002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jimvassilakos.com"] [uri "/.env"] [unique_id "amSDeXQy3pWyG1KX5wO8wQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-07-25 04:41:15 (1 day ago)	20 attempts against mh-misbehave-ban on onion	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-24 23:33:26 (1 day ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-07-24 18:18:37 (1 day ago)	(PERMBLOCK) 3.95.232.1 (US/United States/ec2-3-95-232-1.compute-1.amazonaws.com) has had more than 4 ... show more (PERMBLOCK) 3.95.232.1 (US/United States/ec2-3-95-232-1.compute-1.amazonaws.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-07-24 17:18:16 (1 day ago)	(caddyscan) Scanner path probe from 3.95.232.1 (US/United States/ec2-3-95-232-1.compute-1.amazonaws. ... show more (caddyscan) Scanner path probe from 3.95.232.1 (US/United States/ec2-3-95-232-1.compute-1.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 3.95.232.1 - - [24/Jul/2026:17:18:13 +0000] "GET /actuator/env HTTP/1.1" [REDACTED] 200 2627 3.95.232.1 - - [24/Jul/2026:17:18:13 +0000] "GET /actuator/configprops HTTP/1.1" [REDACTED] 200 2627 3.95.232.1 - - [24/Jul/2026:17:18:13 +0000] "GET /server-status HTTP/1.1" [REDACTED] 200 2627 3.95.232.1 - - [24/Jul/2026:17:18:13 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 3.95.232.1 - - [24/Jul/2026:17:18:13 +0000] "GET /.env.local HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-07-24 15:03:12 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.95.232.1 (ec2-3-95-232-1.compute-1.amazonaws. ... show more (mod_security) mod_security (id:210492) triggered by 3.95.232.1 (ec2-3-95-232-1.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 11:03:04.866548 2026] [security2:error] [pid 252289:tid 252289] [client 3.95.232.1:51620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kurtkaufman.com"] [uri "/.env"] [unique_id "amN-qIfWoCpG10JQt_OtiQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 findlab	2026-07-24 13:00:01 (1 day ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
Anonymous	2026-07-24 07:57:22 (2 days ago)	(caddyscan) Scanner path probe from 3.95.232.1 (US/United States/ec2-3-95-232-1.compute-1.amazonaws. ... show more (caddyscan) Scanner path probe from 3.95.232.1 (US/United States/ec2-3-95-232-1.compute-1.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 3.95.232.1 - - [24/Jul/2026:07:57:16 +0000] "GET /.env.vault HTTP/1.1" [REDACTED] 200 2627 3.95.232.1 - - [24/Jul/2026:07:57:16 +0000] "GET /phpmyadmin/ HTTP/1.1" [REDACTED] 200 2627 3.95.232.1 - - [24/Jul/2026:07:57:20 +0000] "GET /prisma/.env HTTP/1.1" [REDACTED] 200 2627 3.95.232.1 - - [24/Jul/2026:07:57:20 +0000] "GET /supabase/.env HTTP/1.1" [REDACTED] 200 2627 3.95.232.1 - - [24/Jul/2026:07:57:22 +0000] "GET /.ssh/id_rsa HTTP/1.1" show less	Port Scan

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 107.150.104.176

🇩🇪 57.129.74.123

🇺🇸 20.14.74.80

🇺🇸 13.89.124.215

🇰🇷 222.232.176.7

🇰🇷 211.37.174.180

🇭🇰 156.225.22.6

🇸🇬 136.110.44.66

🇰🇷 125.136.68.66

🇰🇪 102.210.148.92

🇵🇱 51.77.43.72

🇲🇾 47.254.202.17

🇺🇸 45.138.100.250

🇩🇪 31.70.86.142

🇬🇧 2a06:4880:2000::3f

🇵🇱 176.53.159.197

🇮🇹 172.213.17.107

🇺🇸 162.216.150.110

🇰🇷 118.193.69.67

🇺🇸 64.23.229.101