JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.101.240.126

3.101.240.126

Neutral Activity

12 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Amazon.com, Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS16509

Hostname(s)

ec2-3-101-240-126.us-west-1.compute.amazonaws.com

Domain Name

amazon.com

Country

🇺🇸 United States of America

City

San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

3.101.240.126 has been reported 12 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 3.101.240.126:

This IP address has been reported a total of 12 times from 9 distinct sources. 3.101.240.126 was first reported on June 4th 2024, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 VXG-NET	2026-05-10 20:24:40 (3 months ago)	port=80, indicator_type=hacktool	Hacking
🇬🇧 Andrew	2025-12-07 02:54:36 (8 months ago)	Blocked by UFW (TCP on port 443). Source port: 60166 TTL: 109 Packet length: 52 TOS: 0x00 This repo ... show more Blocked by UFW (TCP on port 443). Source port: 60166 TTL: 109 Packet length: 52 TOS: 0x00 This report (for 3.101.240.126) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 Josef Matula	2025-11-23 18:23:15 (9 months ago)	ports, 161/24H:1/7D:1	Port Scan
Anonymous	2025-09-26 00:06:06 (11 months ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
Anonymous	2025-09-10 00:06:58 (11 months ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
Anonymous	2025-06-28 00:04:44 (1 year ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
🇳🇱 Study Bitcoin 🤗	2024-11-07 19:22:47 (1 year ago)	169 port probes: 2x tcp/5050 (yahoo messenger), 2x tcp/626 (asia), 2x tcp/5632 (pcanywherestat), 2x ... show more 169 port probes: 2x tcp/5050 (yahoo messenger), 2x tcp/626 (asia), 2x tcp/5632 (pcanywherestat), 2x tcp/8333, 2x tcp/993 (imap4over tls), 2x tcp/1023 (reserved), tcp/2404 (iec870-5-104), 2x tcp/119 (network news transfer), 2x tcp/2323 (3d-nfsd), 2x tcp/37 (time), 2x tcp/8098, 2x tcp/24 (any private mail system), tcp/9999 (distinct), tcp/137 (netbios), tcp/443 (https), tcp/1234 (w32.beagle.y trojan), tcp/10243, tcp/4949, tcp/83 (mit ml device), tcp/1723 (pptp), tcp/32764, tcp/20000 (dnp), tcp/1962 (biap-mp), tcp/8834, tcp/1433 (microsoft-sql-server), tcp/5006 (wsm), tcp/32754, tcp/21 (ftp control), tcp/4500 (sae-urn), tcp/1434 (microsoft-sql-monitor), tcp/9000 (cslistener), tcp/10000 (webmin), tcp/1471 (csdmbase), tcp/4369, tcp/445 (smb), tcp/19 (character generator), tcp/27017, tcp/4911, tcp/2628 (dict), tcp/9151, tcp/631 (ipp (internet printing)), tcp/8129 (snapstream pvs), tcp/830, tcp/5900 (vnc virtua [srv133] show less	DNS Compromise DDoS Attack FTP Brute-Force Email Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Web App Attack SSH IoT Targeted
🇳🇱 Study Bitcoin 🤗	2024-11-07 09:02:33 (1 year ago)	123 port probes: tcp/9200 (wap connectionless session service), tcp/4911, 2x tcp/13 (daytime (rfc 86 ... show more 123 port probes: tcp/9200 (wap connectionless session service), tcp/4911, 2x tcp/13 (daytime (rfc 867)), tcp/2628 (dict), tcp/631 (ipp (internet printing)), tcp/1900 (ssdp), 2x tcp/4592, tcp/3000 (remoteware client), tcp/2152 (gtp-user plane (3gpp)), tcp/3780, tcp/17 (quote of the day), tcp/10000 (webmin), tcp/5000 (upnp), tcp/9051, tcp/8080 (http), tcp/2455 (wago-io-system), tcp/830, tcp/27017, tcp/5432 (postgres database), tcp/139 (netbios), 2x tcp/25 (smtp), tcp/8069, tcp/8081 (http), 2x tcp/9999 (distinct), tcp/25565, tcp/37 (time), tcp/18246, tcp/5560, tcp/53 (domain name), tcp/2252, tcp/4443 (pharos), tcp/8000 (http), tcp/523 (ibm-db2), tcp/502 (asa-appl-proto), tcp/1471 (csdmbase), tcp/32754, tcp/5001 (filmaker.com), tcp/175 (vmnet), tcp/88 (kerberos), tcp/990 (ftpcontrol over tls), tcp/8888 (newsedge), tcp/161 (snmp), tcp/8087, tcp/5353, tcp/2082, tcp/2375, tcp/18245, tcp/1434 (microsoft-sql-moni [srv131] show less	DNS Compromise DDoS Attack Email Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-26 22:36:28 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 3.101.240.126 (ec2-3-101-240-126.us-west-1.comp ... show more (mod_security) mod_security (id:210730) triggered by 3.101.240.126 (ec2-3-101-240-126.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 26 18:36:21.034112 2024] [security2:error] [pid 14876:tid 14876] [client 3.101.240.126:53054] [client 3.101.240.126] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|\|F\|2"] [data ".txt.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "colinfalconer.com"] [uri "/nice ports,/Trinity.txt.bak"] [unique_id "ZvXh5fl6DOrW-slwMBxnyAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Block_Steady_Crew	2024-07-21 15:25:42 (2 years ago)	Honeypot snared from 3.101.240.126	Port Scan Web App Attack
🇳🇿 Kiwi Bloke	2024-06-13 04:38:25 (2 years ago)	Unauthorized connection attempt(s) from IP address 3.101.240.126	Brute-Force Web App Attack
🇶🇦 CB Infosec	2024-06-04 05:05:00 (2 years ago)	Scanning 167 ports towards 1 destination ip with a total hits of 330	Port Scan

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 123.31.212.68

🇧🇩 103.121.63.39

🇧🇬 91.148.190.150

🇺🇸 74.125.80.16

🇱🇹 62.60.130.242

🇧🇷 45.160.245.118

🇻🇳 42.115.112.29

🇧🇪 34.53.154.189

🇻🇳 14.191.225.50

🇻🇳 14.191.202.199

🇺🇸 9.129.57.97

🇬🇧 213.166.84.36

🇺🇸 162.216.149.173

🇯🇵 124.45.31.57

🇮🇳 112.196.111.77

🇨🇦 85.217.149.31

🇸🇬 54.169.160.148

🇱🇹 213.176.26.191

🇹🇼 198.235.24.119

🇨🇳 182.54.23.113