3.128.172.68
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon Technologies Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS16509
- Hostname(s)
- ec2-3-128-172-68.us-east-2.compute.amazonaws.com
- Domain Name
- amazon.com
- Country
- ๐บ๐ธ United States of America
- City
- Columbus, Ohio
Abuse Reports
Total reports
26 from
22 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐บ๐ฆ URAN Publishing Service |
[28/Oct/2026:18:45:01 +0200] -- 3.128.172.68 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1
|
Bad Web Bot Web App Attack | |
| ๐บ๐ธ entangled_mongoose |
Probed /wp-content/plugins/hellopress/wp_filemanager.php.
|
Web App Attack | |
| ๐ณ๐ฑ ConsulHosting |
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
|
Web App Attack | |
| ๐จ๐ญ Origon |
|
Web App Attack | |
| ๐ธ๐ช vaia.cloud |
crowdsecurity/http-probing
|
Brute-Force Web App Attack | |
| ๐ณ๐ฑ middelkoopcc |
2026-10-28 19:06:22 AH01071: Got error 'Primary script unknown' && 2026-10-28 19:06:23 AH01071: Got error 'Primary script unknown' && 2026-10-28 19:06:24 AH01071: Got error 'Primary script unknown' && 143 more within 20 minutes
|
Web App Attack | |
| ๐ณ๐ฑ Alt255 |
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 3.128.172.68 - - \[28/Oct/2026:19:01:58 +0100\] "GET /adminer.php HTTP/1.1" 301 543 "-" "-"
...
|
Bad Web Bot Web App Attack | |
| ๐ซ๐ฎ paissangroup |
Multiple WAF Violations
|
Web App Attack | |
| ๐บ๐ธ mnsf |
Too many Status 40X (11)
|
Brute-Force Web App Attack | |
| ๐ง๐ช cmbplf |
112 requests with url.path */wp-content/plugins/hellopress/wp_filemanager.php
103 requests with url.path */wp.php
|
Brute-Force Bad Web Bot | |
| Anonymous |
IP matched detection query more than 2 hosts and only bad rq long ban.
|
Brute-Force Web App Attack Hacking | |
| Anonymous |
IP matched detection query 20 more in short time bad rqs.
|
Brute-Force Web App Attack Hacking | |
| ๐ฌ๐ง gigatech |
Webserver Probing
|
Web App Attack | |
| ๐ณ๐ฑ Site.eu |
Excessive 404/403 errors
|
Brute-Force | |
| Anonymous |
|
DDoS Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown