AbuseIPDB » 3.129.92.250

3.129.92.250 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 86%: ?

86%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	ec2-3-129-92-250.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	United States of America
City	Columbus, Ohio

Report 3.129.92.250

Whois 3.129.92.250

IP Abuse Reports for 3.129.92.250:

This IP address has been reported a total of 24 times from 20 distinct sources. 3.129.92.250 was first reported on November 13th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
bulkvm.com	2024-12-07 00:31:19 (1 hour ago)	[bulkvm.com/honeypot] SSH-Multi login Attempt	Brute-Force SSH
kot	2024-12-05 17:01:59 (1 day ago)	scan port 22, 3.129.92.250 block	Port Scan
drewf.ink	2024-12-05 05:42:47 (1 day ago)	[05:42] Tried to connect to SSH on port 2222 but didn't have a valid header (port scanner?)	Brute-Force SSH
EinfxchFinn	2024-12-03 02:57:14 (3 days ago)	Unauthorized connection attempt to port 11443 from 3.129.92.250	Port Scan
TechnoSolutions CL	2024-12-02 18:51:53 (4 days ago)	2024-12-02T18:51:52.873437+00:00 lb01 kernel: - [48925412.832107] PORTSCAN_DROP: IN=eth0 OUT= MAC=3a ... show more2024-12-02T18:51:52.873437+00:00 lb01 kernel: - [48925412.832107] PORTSCAN_DROP: IN=eth0 OUT= MAC=3a:07:4f:e8:59:e5:fe:00:00:00:01:01:08:00 SRC=3.129.92.250 DST=159.203.62.209 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=41075 DF PROTO=TCP SPT=42950 DPT=113 WINDOW=62727 RES=0x00 SYN URGP=0 2024-12-02T18:51:53.062442+00:00 lb01 kernel: - [48925413.021128] PORTSCAN_DROP: IN=eth0 OUT= MAC=3a:07:4f:e8:59:e5:fe:00:00:00:01:01:08:00 SRC=3.129.92.250 DST=159.203.62.209 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=14323 DF PROTO=TCP SPT=33242 DPT=139 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force Bad Web Bot
GOVCERT	2024-12-01 23:12:48 (5 days ago)	Excessive Firewall Denies	DDoS Attack Web Spam
marioselgreco	2024-11-30 01:03:17 (1 week ago)	Automated report from mail server logs	Email Spam Hacking Spoofing
JPPO	2024-11-29 23:56:01 (1 week ago)	Multiport scan 145 ports : 20 21 22 23 35 53 79 80 81 82 95 102 106 110 111 113 115 135 137 138 139 ... show moreMultiport scan 145 ports : 20 21 22 23 35 53 79 80 81 82 95 102 106 110 111 113 115 135 137 138 139 143 161 443(x2) 445 465(x2) 502 503 587(x2) 635 902 993(x2) 995(x2) 1090 1098 1270 1433 1521 1583 1723 1812 1813 1883 1900 2049 2181 2222 2375 2376 2379 2888 3050 3299 3306 3351 3389 3479 3888 4190 4369 4443 4444 4445 4505 4506 4786 4848 5000 5432 5555 5556 5672 5900 5901 5902 5903 5984 5985 5986 6379 6443 6556 7001 7002 7003 7004 7070 7071 7443 7547 7777 7990 8000 8001 8002 8003 8009 8032 8040 8080 8081 8111 8278 8291 8443 8649 8686 8883 9000 9001 9002 9003 9012 9090 9091 9092 9094 9100 9200 9201 9300 9301 9443 9503 10250 10255 10443 10999 11099 11111 11211 11443 11994 12443 13389 13443 20000 20443 22222 25002 27017 27018 27019 30443 32400 show less	Port Scan
Anonymous	2024-11-29 10:37:29 (1 week ago)	Kept connecting and disconnecting without issuing any commands	DDoS Attack
Anonymous	2024-11-29 06:29:18 (1 week ago)	Nov 29 07:29:17 rendez-vous dovecot: imap-login: Disconnected: Connection closed (no auth attempts i ... show moreNov 29 07:29:17 rendez-vous dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=3.129.92.250, lip=*, TLS handshaking: Connection closed, session=<bXaFUQcoFIADgVz6> show less	Brute-Force
JPPO	2024-11-26 00:08:27 (1 week ago)	Multiport scan 145 ports : 20 21 22 23 35 53 79 80 81 82 95 102 106 110 111 113 115 135 137 138 139 ... show moreMultiport scan 145 ports : 20 21 22 23 35 53 79 80 81 82 95 102 106 110 111 113 115 135 137 138 139 143 161 443(x2) 445 465(x2) 502 503 587(x2) 635 902 993(x2) 995(x2) 1090 1098 1270 1433 1521 1583 1723 1812 1813 1883 1900 2049 2181 2222 2375 2376 2379 2888 3050 3299 3306 3351 3389 3479 3888 4190 4369 4443 4444 4445 4505 4506 4786 4848 5000 5432 5555 5556 5672 5900 5901 5902 5903 5984 5985 5986 6379 6443 6556 7001 7002 7003 7004 7070 7071 7443 7547 7777 7990 8000 8001 8002 8003 8009 8032 8040 8080 8081 8111 8278 8291 8443 8649 8686 8883 9000 9001 9002 9003 9012 9090 9091 9092 9094 9100 9200 9201 9300 9301 9443 9503 10250 10255 10443 10999 11099 11111 11211 11443 11994 12443 13389 13443 20000 20443 22222 25002 27017 27018 27019 30443 32400 show less	Port Scan
Study Bitcoin 🤗	2024-11-25 20:18:43 (1 week ago)	33 port probes: tcp/139 (netbios), tcp/23 (telnet), tcp/503 (intrinsa), tcp/143 (internet message ac ... show more33 port probes: tcp/139 (netbios), tcp/23 (telnet), tcp/503 (intrinsa), tcp/143 (internet message access), tcp/465 (smtps), tcp/137 (netbios), tcp/81 (hosts2 name), tcp/106 (3com-tsmux), tcp/82 (xfer utility), tcp/113 (authentication service), tcp/110 (post office- version 3), tcp/79 (finger), tcp/445 (smb), tcp/102 (msexchangemta x.400), tcp/115 (simple file transfer), tcp/902 (vmware authentication daemon), tcp/138 (netbios), tcp/635 (rlz dbase), tcp/20 (ftp data), tcp/587 (message submission (sendmail)), 4x tcp/111 (sun remote procedure call), tcp/993 (imap4over tls), tcp/95 (supdup), tcp/53 (domain name), tcp/502 (asa-appl-proto), tcp/161 (snmp), tcp/35 (any private printer), tcp/135 (dce endpoint resolution), tcp/995 (pop3over tls), tcp/21 (ftp control) [gda] show less	DNS Compromise FTP Brute-Force Port Scan Hacking SQL Injection Brute-Force
Study Bitcoin 🤗	2024-11-25 20:16:39 (1 week ago)	SSH Fail2Ban [gda]	Brute-Force
JPPO	2024-11-25 06:35:09 (1 week ago)	Multiport scan 7 ports : 80 443(x2) 465(x2) 587(x2) 993(x2) 995(x2) 7071	Port Scan
Anonymous	2024-11-23 08:09:25 (1 week ago)		Port Scan