AbuseIPDB » 3.137.200.242

3.137.200.242 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 85%: ?

85%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-137-200-242.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 3.137.200.242

Whois 3.137.200.242

IP Abuse Reports for 3.137.200.242:

This IP address has been reported a total of 101 times from 77 distinct sources. 3.137.200.242 was first reported on December 11th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
llighthunter	2024-12-16 16:57:59 (1 month ago)	Dec 12 01:01:29 mail postfix/submission/smtpd[3127]: improper command pipelining after CONNECT from ... show moreDec 12 01:01:29 mail postfix/submission/smtpd[3127]: improper command pipelining after CONNECT from ec2-3-137-200-242.us-east-2.compute.amazonaws.com[3.137.200.242]: \026\003\001\000{\001\000\000w\003\003\0021\351\023\351\237f\027\\\205jQ\342\023{Q\032\305\036L\2713\357y3\300\337\252\327\361\247\301\000\000\032\300/\300+\300\021\300\a\300\023\300\t\300\024\300\n\000\005\000/\0005\300\022\000\n\001\000\0004\000\005\000\005\001\000\000\000\000\000\n\000\b\000\006\000\027\000\030\000\031\000\v\000 Dec 12 01:01:29 mail postfix/submission/smtpd[3127]: lost connection after UNKNOWN from ec2-3-137-200-242.us-east-2.compute.amazonaws.com[3.137.200.242] show less	Port Scan Hacking Spoofing
chronos	2024-12-16 06:30:57 (1 month ago)	[AUTORAVALT][[16/12/2024 - 03:30:57 -03:00 UTC] Attack from [Amazon Technologies Inc.] [ ... show more[AUTORAVALT][[16/12/2024 - 03:30:57 -03:00 UTC] Attack from [Amazon Technologies Inc.] [3.137.200.242][ec2-3-137-200-242.us-east-2.compute.amazonaws.com] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Ema] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
llighthunter	2024-12-15 14:11:21 (1 month ago)	Dec 12 01:01:29 mail postfix/submission/smtpd[3127]: improper command pipelining after CONNECT from ... show moreDec 12 01:01:29 mail postfix/submission/smtpd[3127]: improper command pipelining after CONNECT from ec2-3-137-200-242.us-east-2.compute.amazonaws.com[3.137.200.242]: \026\003\001\000{\001\000\000w\003\003\0021\351\023\351\237f\027\\\205jQ\342\023{Q\032\305\036L\2713\357y3\300\337\252\327\361\247\301\000\000\032\300/\300+\300\021\300\a\300\023\300\t\300\024\300\n\000\005\000/\0005\300\022\000\n\001\000\0004\000\005\000\005\001\000\000\000\000\000\n\000\b\000\006\000\027\000\030\000\031\000\v\000 Dec 12 01:01:29 mail postfix/submission/smtpd[3127]: lost connection after UNKNOWN from ec2-3-137-200-242.us-east-2.compute.amazonaws.com[3.137.200.242] show less	Port Scan Hacking Spoofing
AdrianT	2024-12-14 17:07:44 (1 month ago)	SMTP port scanning	Port Scan
llighthunter	2024-12-14 11:16:18 (1 month ago)	Dec 12 01:01:29 mail postfix/submission/smtpd[3127]: improper command pipelining after CONNECT from ... show moreDec 12 01:01:29 mail postfix/submission/smtpd[3127]: improper command pipelining after CONNECT from ec2-3-137-200-242.us-east-2.compute.amazonaws.com[3.137.200.242]: \026\003\001\000{\001\000\000w\003\003\0021\351\023\351\237f\027\\\205jQ\342\023{Q\032\305\036L\2713\357y3\300\337\252\327\361\247\301\000\000\032\300/\300+\300\021\300\a\300\023\300\t\300\024\300\n\000\005\000/\0005\300\022\000\n\001\000\0004\000\005\000\005\001\000\000\000\000\000\n\000\b\000\006\000\027\000\030\000\031\000\v\000 Dec 12 01:01:29 mail postfix/submission/smtpd[3127]: lost connection after UNKNOWN from ec2-3-137-200-242.us-east-2.compute.amazonaws.com[3.137.200.242] show less	Port Scan Hacking Spoofing
tgctw	2024-12-14 00:35:00 (1 month ago)	Unauthorized connection attempt detected from IP address 3.137.200.242	Port Scan Hacking Brute-Force SSH
marioselgreco	2024-12-14 00:01:26 (1 month ago)	Automated report from mail server logs	Email Spam Hacking Spoofing
llighthunter	2024-12-13 11:15:52 (1 month ago)	Dec 12 01:01:29 mail postfix/submission/smtpd[3127]: improper command pipelining after CONNECT from ... show moreDec 12 01:01:29 mail postfix/submission/smtpd[3127]: improper command pipelining after CONNECT from ec2-3-137-200-242.us-east-2.compute.amazonaws.com[3.137.200.242]: \026\003\001\000{\001\000\000w\003\003\0021\351\023\351\237f\027\\\205jQ\342\023{Q\032\305\036L\2713\357y3\300\337\252\327\361\247\301\000\000\032\300/\300+\300\021\300\a\300\023\300\t\300\024\300\n\000\005\000/\0005\300\022\000\n\001\000\0004\000\005\000\005\001\000\000\000\000\000\n\000\b\000\006\000\027\000\030\000\031\000\v\000 Dec 12 01:01:29 mail postfix/submission/smtpd[3127]: lost connection after UNKNOWN from ec2-3-137-200-242.us-east-2.compute.amazonaws.com[3.137.200.242] show less	Port Scan Hacking Spoofing
marioselgreco	2024-12-13 00:01:22 (1 month ago)	Automated report from mail server logs	Email Spam Hacking Spoofing
NXTwoThou	2024-12-12 12:26:00 (1 month ago)	FTP	Port Scan
Ragnarocek	2024-12-12 10:12:00 (1 month ago)	2024-12-12T08:09:31.840Z DI [FTP Session 59 3.137.200.242] Session 0x2858aa7e0c0 with ID 59 created. ... show more2024-12-12T08:09:31.840Z DI [FTP Session 59 3.137.200.242] Session 0x2858aa7e0c0 with ID 59 created. 2024-12-12T08:09:31.840Z << [FTP Session 59 3.137.200.242] 220-FileZilla Server 1.8.2 2024-12-12T08:09:31.840Z << [FTP Session 59 3.137.200.242] 220-Please visit https://filezilla-project.org/ 2024-12-12T08:09:31.840Z << [FTP Session 59 3.137.200.242] 220 Anonymous connections disabled. FUCK YOU ! 2024-12-12T08:09:32.924Z == [FTP Server] Session 59 ended gracefully. 2024-12-12T08:09:32.924Z DI [FTP Session 59 3.137.200.242] Session 0x2858aa7e0c0 with ID 59 destroyed. show less	FTP Brute-Force Port Scan Hacking Exploited Host
drewf.ink	2024-12-12 08:44:12 (1 month ago)	[08:44] Port scanning. Port(s) scanned: TCP/21	Port Scan
GoodOldTOS	2024-12-12 08:43:38 (1 month ago)	Connection to FTP honeypot	Hacking
nyuuzyou	2024-12-12 08:43:16 (1 month ago)	{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "21", "server": "ftp_server", "src_ip": ... show more{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "21", "server": "ftp_server", "src_ip": "3.137.200.242", "src_port": "36666", "timestamp": "2024-12-12T08:42:51.830648"} show less	FTP Brute-Force Port Scan
nfsec.pl	2024-12-12 08:41:27 (1 month ago)	Detected: TCP scan on port: 21 with flags: SYN	Port Scan