3.137.159.68
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon Technologies Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS16509
- Hostname(s)
- ec2-3-137-159-68.us-east-2.compute.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Columbus, Ohio
Abuse Reports
Total reports
45 from
26 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 RAP |
2026-11-12 02:40:36 UTC Unauthorized activity to TCP port 445. SMB
|
Port Scan | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 244 | Len: 40B | Win: 1024(1) | rDNS: ec2-3-137-159-68.us-east-2.compute.amazonaws.com | F2B/ufw-honeypot@2026-11-12T01:35:50Z
|
Port Scan Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
|
Port Scan | |
| 🇳🇱 StopAbuse |
tcp/445
|
Port Scan | |
| Anonymous |
unsolicited connect TCP dport 1433 (sport 56983)
|
Hacking | |
| 🇩🇪 banankicks |
Unauthorized connection attempt detected from IP address 3.137.159.68 to port 1433 (banankicks-server) [q]
|
Brute-Force Exploited Host | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1433)
Source port: 56983
TTL: 243
Packet length: 40
TOS: 0x00
This report (for 3.137.159.68) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇧🇷 Host One |
T-Pot Honeypot alert: 1 malicious events (exploit_attempt) detected.
|
Hacking | |
| 🇨🇿 Countryman |
repeated unauthorized connection attempts, host sweep, port 445
|
Hacking Brute-Force | |
| 🇩🇪 Mailguard-FRD |
1794314644 - 11/10/2026 13:44:04 Host: 3.137.159.68/3.137.159.68 Port: 1433 TCP Blocked
...
|
Port Scan | |
| 🇺🇸 MPL |
tcp/445 (7 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/445 (3 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/445 (5 or more attempts)
|
Port Scan | |
| 🇫🇷 noi |
honeypot proto=TCP dpt=445 flags=SYN hits=1 window=1h
|
Port Scan | |
| 🇺🇸 MPL |
tcp/445
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown