JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.16.161.224

3.16.161.224 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 56%: ?

56%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-16-161-224.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.16.161.224

Whois 3.16.161.224

IP Abuse Reports for 3.16.161.224:

This IP address has been reported a total of 10 times from 9 distinct sources. 3.16.161.224 was first reported on July 9th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 anycast_ac	2026-07-09 22:57:12 (1 hour ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/5060 (generic). Commands captur ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/5060 (generic). Commands captured: $ show less	DDoS Attack IoT Targeted Brute-Force
🇺🇸 ShadowWhisperer	2026-07-09 22:56:25 (1 hour ago)	SIP port scan / probe. unparseable	Port Scan Fraud VoIP
🇸🇬 WMK965	2026-07-09 22:45:13 (1 hour ago)	3.16.161.224 - - [10/Jul/2026:06:44:20 +0800] "\x03\x00\x00+&\xE0\x00\x00\x00\x00\x00Cookie: mstshas ... show more 3.16.161.224 - - [10/Jul/2026:06:44:20 +0800] "\x03\x00\x00+&\xE0\x00\x00\x00\x00\x00Cookie: mstshash=zgrab" 400 154 "-" "-" "-" 3.16.161.224 - - [10/Jul/2026:06:44:49 +0800] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03`L\xEE?\x00=8\xB98\xB1\xD9\x9C\x82\xACb\x97\xCC'\xFA&\xBE\x92\x7F\xD1n\xFA\xBF\x80\x80c\xD61 z\xC0\xEF?s<f\xE3\xF5U\xCB\x08\xADG\xEC\xACF\xABJ\xAF\xE2d2\xC6\x08\xB6\xB2\x9F\x09\xD2\x8E+\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 154 "-" "-" "-" 3.16.161.224 - - [10/Jul/2026:06:45:13 +0800] "\x16\x03\x01\x01\x00\x01\x00\x00\xFC\x03\x03\xAC\xD5\x8A\xF42\xEA\x80\xB3\xAF\xDB\x8Ex\x00?\xB0\x0Edesl\xFD:aHM\x1DM\|\xB6\xCBJb V\x9F$\x17\x9C]`\xF0\xB0\xF1S\x1D$Sd?\xAD\x84\x84t\xA5\xFB\xD9H\xCE\xF3\x18<\xD7\x9Eu\x8E\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 154 "-" "-" "-" show less	Port Scan Web App Attack
🇺🇸 jfz-abuse	2026-07-09 22:45:04 (1 hour ago)	fail2ban: apache-proxy ...	Web App Attack
Anonymous	2026-07-09 22:44:40 (1 hour ago)	3.16.161.224 - - [09/Jul/2026:22:44:05 +0000] "\x03\x00\x00+&\xE0\x00\x00\x00\x00\x00Cookie: mstshas ... show more 3.16.161.224 - - [09/Jul/2026:22:44:05 +0000] "\x03\x00\x00+&\xE0\x00\x00\x00\x00\x00Cookie: mstshash=zgrab" 400 166 "-" "-" 3.16.161.224 - - [09/Jul/2026:22:44:21 +0000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xCD\xA2\xE0Yea\xE4\xAA\xB9j\xD4\xDF/\xCBj\x11\x11\xC1L\xFB\x04a\xF1" 400 166 "-" "-" 3.16.161.224 - - [09/Jul/2026:22:44:39 +0000] "\x16\x03\x01\x01\x00\x01\x00\x00\xFC\x03\x03\xC0\xA1$\xF06??+0\x92\xDF\xB8>\xC2al\x02\xF9p\xDB\x8B\xF5\x94\x95\x98\x8DQ\xAB\x93\xEC1\x16 \xCA\xB9\xDD\xA4;A\x92\xD4\xB8\xD3\xE1\x1F3\xEEV\x84\xC3\xB1\xCD\xBD\xE4\xE6}FGz\x95\xC2m\xEC\x81@\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 166 "-" "-" ... show less	Brute-Force
🇵🇱 tkhaldi	2026-07-09 22:44:31 (1 hour ago)	::ffff:3.16.161.224 - - [09/Jul/2026:22:43:58 +0000] "\x03\x00\x00+&\xE0\x00\x00\x00\x00\x00Cookie: ... show more ::ffff:3.16.161.224 - - [09/Jul/2026:22:43:58 +0000] "\x03\x00\x00+&\xE0\x00\x00\x00\x00\x00Cookie: mstshash=zgrab" 400 150 "-" "-" ::ffff:3.16.161.224 - - [09/Jul/2026:22:44:10 +0000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x08\xE6j\xA6(=B*\x86\xE5k\xCE\|\x06\xE5\xA1\xC7\x9E\xB0T\x8B\xD1\xCB\xE0\xC9\xE8\x13h\x8B\xFBd, e\x10\x9A]\xB8\x198rrCplV<\xADh\xE0\xCBR \xB9\xF6j\xC6\xA5K\xF8\xFE\xAF\x9D\xAE\x13\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" ::ffff:3.16.161.224 - - [09/Jul/2026:22:44:30 +0000] "\x16\x03\x01\x01\x00\x01\x00\x00\xFC\x03\x03\xDBX\xC4UN\xDE\x12\xC4{Y\xF1\xF5U\x09\x02\xD7\x91+;5\xED\xC1C\xC6\x80yH\x19Q\x80\xF7\xA3 \xEF\xCAc$G\xDB\xDC\x8D\|\xA1\x88\xE2\xE6\x1CeQ-\x9C\xB3Nls\xA3t\x85_\xD1\xE8\x5C\xC4\xBF\x99\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" ... show less	Web App Attack
🇩🇪 nyt	2026-07-09 22:44:10 (1 hour ago)	Empty UA + error, Unusual user agent for a scan request	Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-07-09 22:43:50 (1 hour ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-1)	Hacking Bad Web Bot
🇩🇪 anycast_ac	2026-07-09 22:41:33 (1 hour ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/5060 (generic). Commands captur ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/5060 (generic). Commands captured: $ GET / HTTP/1.1 show less	DDoS Attack IoT Targeted Brute-Force
🇩🇪 fds.io	2026-07-09 22:28:33 (2 hours ago)	detected and blocked multiple http 400 bad-request attempts	Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a04:4e40:e000:0:572:2551:1060:25d8

🇺🇸 147.185.132.14

🇮🇳 103.199.123.10

🇮🇳 103.146.222.47

🇭🇰 103.146.159.173

🇺🇸 91.230.168.61

🇺🇸 66.132.186.222

🇺🇸 64.62.197.125

🇱🇹 62.60.130.219

🇬🇧 35.203.210.20

🇺🇸 24.199.126.56

🇷🇴 2.57.122.209

🇬🇧 165.22.112.236

🇺🇸 162.216.150.109

🇺🇸 162.216.149.253

🇺🇸 147.185.132.49

🇫🇷 91.196.152.176

🇩🇪 74.63.24.205

🇺🇸 72.253.251.7

🇧🇷 45.171.20.127