3.101.143.168

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
100% Critical
50 reports
46 reporters · latest 1 week ago
ISP
Amazon.com, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-3-101-143-168.us-west-1.compute.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
San Jose, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
50 from 46 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 13 🇺🇸 United States of America 8 🇫🇷 France 4
Most common categories SSH 42 Brute-Force 40 Port Scan 8 Hacking 1 Web App Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 jbettigole
MikroTik RouterOS: repeated connection attempts against non-public admin/service ports (SSH/Telnet/FTP/Winbox/API/WWW) triggering escalating 5m/15m/1h/1d blacklist
Brute-Force Hacking
🇩🇪 shr4pnel
SSH login attempts (endlessh): 2026-10-31T14:53:03.040Z ACCEPT host=::ffff:3.101.143.168 port=42096 fd=5 n=2/4096
Brute-Force SSH
🇩🇪 Riko
Fail2ban SSH Bruteforce
Brute-Force SSH
🇳🇱 COMPLEX
Banned by Multi Agent · node …6iis · reason=SSH preauth probe / DDoS · attempts=3 · SSH preauth probe / DDoS
Brute-Force SSH
🇬🇧 VA567
SSH brute force (fail2ban)
Brute-Force SSH
🇮🇳 92kmees
2026-10-31T15:06:35.004519+00:00 ktj-nc sshd[1042154]: Connection closed by 3.101.143.168 port 33092 [preauth] 2026-10-31T15:06:36.533907+00:00 ktj-nc sshd[1042156]: Connection closed by 3.101.143.168 port 33096 [preauth] ...
Brute-Force SSH
🇩🇪 mailox
SSH Unauthorized connection attempt ...
Brute-Force SSH
🇨🇳 Dominicwu
SSH authentication failures over threshold (4/600s). Attempts: user=unknown src_port=52698; user=unknown src_port=52708; user=unknown src_port=52718; user=unknown src_port=46984. Password plaintext is not available in dropbear logs.
Brute-Force SSH
🇫🇮 Epic29
Brute-Force SSH
🇩🇪 1000grad.com
Brute-Force SSH
🇺🇸 NetGuard
Brute-Force SSH
🇩🇪 Mr-Money
scenario: crowdsecurity/ssh-bf - events: 6
SSH Brute-Force
🇨🇭 chilibi.ch
2026-10-31 14:23:48 bul SSH
Brute-Force SSH
🇯🇵 CowGL
Brute-Force SSH
Anonymous
ET SCAN Potential SSH Scan
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 124.223.194.139
🇺🇸 18.97.26.111
🇺🇸 216.254.254.253
🇨🇦 216.232.226.203
🇲🇾 202.165.14.135
🇹🇼 198.235.24.50
🇵🇪 179.6.26.105
🇨🇭 176.65.144.34
🇺🇸 143.198.175.18
🇯🇵 107.155.15.218
🇿🇦 102.207.184.54
🇮🇷 84.47.253.20
🇺🇸 66.132.172.224
🇳🇱 64.205.72.192
🇳🇱 64.205.72.185
🇫🇷 62.171.168.90
🇳🇱 45.74.31.168
🇵🇰 39.40.220.90
🇧🇪 35.210.250.71
🇧🇪 34.62.122.185
feedback