JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.139.102.152

3.139.102.152 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-139-102-152.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.139.102.152

Whois 3.139.102.152

IP Abuse Reports for 3.139.102.152:

This IP address has been reported a total of 54 times from 49 distinct sources. 3.139.102.152 was first reported on September 1st 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 service Informatique	2026-09-02 04:00:37 (2 hours ago)	GET /robots.txt	Web App Attack
🇪🇸 raiolanetworks.com	2026-09-01 10:40:27 (19 hours ago)	Honeypot detection: malware/exploit attempt; port scan / service probe. 9 events observed. 3 distinc ... show more Honeypot detection: malware/exploit attempt; port scan / service probe. 9 events observed. 3 distinct ports targeted. Reported automatically from a honeypot sensor. show less	Port Scan Hacking
🇹🇷 Threat.live	2026-09-01 09:25:02 (21 hours ago)	Suspicious Connection Attempts	Brute-Force
🇩🇪 VentryShield	2026-09-01 09:21:39 (21 hours ago)	p0t honeypot: unknown connection on port 5001/tcp, 194 bytes received from client	Port Scan
🇦🇹 vikal	2026-09-01 09:11:51 (21 hours ago)	3.139.102.152 - - [01/Sep/2026:11:03:49 +0200] "" 400 0 "-" "-" 3.139.102.152 - - [01/Sep/2026:11:04 ... show more 3.139.102.152 - - [01/Sep/2026:11:03:49 +0200] "" 400 0 "-" "-" 3.139.102.152 - - [01/Sep/2026:11:04:58 +0200] "\x16\x03\x01\x01\x00\x01\x00\x00\xFC\x03\x03\x961\xFEh_`\x8C\xFBKum\x15}Ly\xA2\x86\x90\x98fn\xF8\xD9~\x00\x9C\xB3`Ug\x00\x92 \xDDP\xF4\x8D\x94\xB7" 400 150 "-" "-" 3.139.102.152 - - [01/Sep/2026:11:05:03 +0200] "\x16\x03\x01\x01\x00\x01\x00\x00\xFC\x03\x03C=.\xDC\xA7t\x9Ah\x0E.\xA1\xBE\x9B,\xBF\x08M\xED\xC4\xB2\x9A\xD8\xE9\x1A\xCD\x0FYW\x8AO\xD3H qj\x8A\xFD\x08\xA1\xDB\xD4\x1B\x86\xED\xE3S\xB9\xC9\x97d>\xB0\xA2\xA7\xA2MC\xE2\x02\xAE\x1Aw\x9E\xD6\xF2\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" 3.139.102.152 - - [01/Sep/2026:11:08:52 +0200] "\x03\x00\x00+&\xE0\x00\x00\x00\x00\x00Cookie: mstshash=zgrab" 400 150 "-" "-" 3.139.102.152 - - [01/Sep/2026:11:11:50 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03.u\x89'\xAA" 400 150 "-" "-" ... show less	Brute-Force SSH
🇺🇸 azminawwar	2026-09-01 09:04:42 (21 hours ago)	[3.139.102.152] triggered by honeypot on port [80], Timestamp [2026-09-01T09:04:42Z]METHOD=GET PATH= ... show more [3.139.102.152] triggered by honeypot on port [80], Timestamp [2026-09-01T09:04:42Z]METHOD=GET PATH=/ HTTP=HTTP/1.1 UA="visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126 show less	Port Scan Hacking
🇫🇷 pm33	2026-09-01 09:04:38 (21 hours ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇫🇷 Security_Whaller	2026-09-01 09:04:37 (21 hours ago)	Malicious activity detected on Honeypot.	Brute-Force Hacking Web App Attack
Anonymous	2026-09-01 09:04:04 (21 hours ago)	3.139.102.152 - - [01/Sep/2026:11:02:23 +0200] "" 400 0 "-" "-" "-" 3.139.102.152 - - [01/Sep/2026:1 ... show more 3.139.102.152 - - [01/Sep/2026:11:02:23 +0200] "" 400 0 "-" "-" "-" 3.139.102.152 - - [01/Sep/2026:11:04:03 +0200] "\x16\x03\x01\x01\x00\x01\x00\x00\xFC\x03\x03\xE86\xDB\x80\xD7\x12\x10=\x9B\x8Cg\xA5\xE7$:\xEE\xA8\x87~%o\x9Bv\x8D5\xA3A+\xBF$\xD0M C1a\xCB\xD9\xB7\xAB\x92A\xC4\xD3G\xCC\x88\x9F\xAFl\x9A\xAE\xA0+C\xAE\x96T\xF8\xEC*s+:\xE3\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" 3.139.102.152 - - [01/Sep/2026:11:04:04 +0200] "\x16\x03\x01\x01\x00\x01\x00\x00\xFC\x03\x03\xBD\xCA\xF6\x1F\xA5\x91\x8A\x9B\xD5\x97\x151\x99U\x1B\xC7\xA7\xDA\x02\x98U\xCA1\x99\xC3\x22\xFF\x15L\x01\xE2] \x8A\xEEW\xE6\xE3\xF9\x19\xE8\x9F\x1EI}\xC7\xCC\x1F\x06\x0FJA\x96\x9A3\xB8\x12'\xD7\xBBy{KEn\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" ... show less	Hacking Web App Attack
Anonymous	2026-09-01 09:03:02 (21 hours ago)	Unauthorized SSH login attempts	Brute-Force SSH
Anonymous	2026-09-01 08:57:12 (21 hours ago)	SIEM ALERT AUTO REPORT	Email Spam
🇺🇦 TawnyBalfour	2026-09-01 08:54:43 (21 hours ago)	MSSQL honeypot. Target port: 1433. Window: 2026-09-01 08:49 to 2026-09-01 08:54 UTC.	Port Scan
🇦🇺 LiftUp Hosting	2026-09-01 08:53:00 (21 hours ago)	Honeypot hit: HTTP/1.1 request on 37810 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macint ... show more Honeypot hit: HTTP/1.1 request on 37810 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 37810 [2] TCP show less	Hacking Bad Web Bot
🇺🇸 sandra361	2026-09-01 08:50:50 (21 hours ago)	Port scan detected: 6 attempts across 1 port (37810). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=3.139.10 ... show more Port scan detected: 6 attempts across 1 port (37810). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=3.139.102.152 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=38701 DF PROTO=TCP SPT=56484 DPT=37810 WINDOW=62727 RES=0x00 SYN URGP=0 show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-09-01 08:50:50 (21 hours ago)	Honeypot hit: HTTP/1.1 request on 37810 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macint ... show more Honeypot hit: HTTP/1.1 request on 37810 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 37810 [3] TCP show less	Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 193.32.204.199

🇦🇷 186.13.112.24

🇫🇮 147.185.133.121

🇫🇮 147.185.133.85

🇪🇸 87.217.148.193

🇱🇻 62.60.130.242

🇫🇷 37.65.166.222

🇺🇸 20.118.240.154

🇺🇸 20.15.228.44

🇭🇰 8.218.84.155

🇺🇸 162.216.149.215

🇺🇸 152.163.2.147

🇮🇳 152.52.229.94

🇺🇸 64.62.156.96

🇮🇳 45.10.194.189

🇮🇩 36.92.144.143

🇺🇸 20.172.67.146

🇺🇸 3.147.122.184

🇨🇳 218.95.73.31

🇺🇸 216.219.89.86