JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.212.128.164

3.212.128.164 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 50%: ?

50%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-3-212-128-164.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.212.128.164

Whois 3.212.128.164

IP Abuse Reports for 3.212.128.164:

This IP address has been reported a total of 34 times from 18 distinct sources. 3.212.128.164 was first reported on March 21st 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 anon333	2026-07-09 20:06:13 (11 hours ago)	Invalid probes to web server T1606	Hacking Exploited Host
🇺🇸 anon333	2026-07-09 16:33:50 (14 hours ago)	Hacker syslog review 1783614829	Hacking
🇨🇿 ddw	2026-07-06 08:46:10 (3 days ago)	Access Violation Attempts - Multiple 403 Forbidden responses.	Hacking Bad Web Bot Web App Attack
🇩🇪 Carsten	2026-07-01 11:56:29 (1 week ago)	Bad web bot [Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) ... show more Bad web bot [Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)] show less	Bad Web Bot
🇮🇩 hermawan	2026-07-01 09:49:05 (1 week ago)	[Wed Jul 01 16:49:02.325759 2026] [security2:error] [pid 241480:tid 139637408802496] [client 3.212.1 ... show more [Wed Jul 01 16:49:02.325759 2026] [security2:error] [pid 241480:tid 139637408802496] [client 3.212.128.164:5396] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "429"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 3.212.128.164 request_line = GET /robots.txt HTTP/1.1 Request URI RAW = /robots.txt Request Basename = robots.txt"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "akTijrDrZZVmorUBXRf3_gAAAME"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[241524] [kLvymYm/qwY] [akTijrDrZZVmorUBXRf3_gAAAME] keep_alive=[0] [2026-07-01 16:49:02.325768] [R:akTijrDrZZVmorUBXRf3_gAAAME] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 ( ... show less	Email Spam Hacking
🇦🇺 MAGIC	2026-07-01 02:02:33 (1 week ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 polido	2026-06-30 18:36:39 (1 week ago)	Unauthorized connection attempt to port 443 from 3.212.128.164	Port Scan
🇺🇸 juguemosalacarioca.com	2026-06-30 14:47:40 (1 week ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack
🇮🇩 hermawan	2026-06-28 16:31:13 (1 week ago)	[Sun Jun 28 23:31:09.097442 2026] [security2:error] [pid 557066:tid 140331765860032] [client 3.212.1 ... show more [Sun Jun 28 23:31:09.097442 2026] [security2:error] [pid 557066:tid 140331765860032] [client 3.212.128.164:55576] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "429"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 3.212.128.164 request_line = GET /robots.txt HTTP/1.1 Request URI RAW = /robots.txt Request Basename = robots.txt"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "akFMTRsjfwD-13L3LtHFUwAAAQQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[557097] [yOB+3pINIbU] [akFMTRsjfwD-13L3LtHFUwAAAQQ] keep_alive=[0] [2026-06-28 23:31:09.097447] [R:akFMTRsjfwD-13L3LtHFUwAAAQQ] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 ... show less	Email Spam Hacking
Anonymous	2026-06-26 12:07:00 (1 week ago)	[PathScanning] Path scanning/probing detected: Reconnaissance (robots/sitemap) (path: /robots.txt)	Port Scan Hacking
Anonymous	2026-06-20 11:16:27 (2 weeks ago)	[PathScanning] Path scanning/probing detected: Reconnaissance (robots/sitemap) (path: /robots.txt)	Port Scan Hacking
🇨🇦 dispensight	2026-06-13 00:00:00 (3 weeks ago)	[SecureLeaf/Dispensight] Gort vulnerability scanner (Mozilla/5.0 Gort UA). Threats: recon_path\|bot. ... show more [SecureLeaf/Dispensight] Gort vulnerability scanner (Mozilla/5.0 Gort UA). Threats: recon_path\|bot. Amazon AWS (US). ngrok 2026-06-12/13. show less	Bad Web Bot Port Scan
🇮🇩 hermawan	2026-06-11 07:25:22 (4 weeks ago)	[Thu Jun 11 14:25:17.937545 2026] [security2:error] [pid 1470512:tid 139768568870592] [client 3.212. ... show more [Thu Jun 11 14:25:17.937545 2026] [security2:error] [pid 1470512:tid 139768568870592] [client 3.212.128.164:2427] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 3.212.128.164 request_line = GET /robots.txt HTTP/1.1 Request URI RAW = /robots.txt Request Basename = robots.txt"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aipi3UiQP3vMP_JZ8cSqiwAAAAA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1470539] [swATQzWyVY4] [aipi3UiQP3vMP_JZ8cSqiwAAAAA] keep_alive=[0] [2026-06-11 14:25:17.937549] [R:aipi3UiQP3vMP_JZ8cSqiwAAAAA] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 ... show less	Email Spam Hacking
🇫🇷 polido	2026-06-08 16:58:05 (1 month ago)	Unauthorized connection attempt to port 443 from 3.212.128.164	Port Scan
🇦🇺 MAGIC	2026-06-07 01:48:52 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.180

🇺🇸 45.3.32.69

🇺🇸 2604:a940:301:225:0:1a::

🇺🇸 216.239.38.223

🇵🇱 176.53.159.197

🇺🇸 66.132.195.25

🇺🇸 66.132.172.236

🇹🇼 59.126.1.179

🇫🇷 51.68.34.131

🇺🇸 20.171.8.181

🇨🇳 218.59.235.170

🇹🇭 203.156.108.68

🇧🇦 195.222.57.190

🇳🇱 185.107.80.93

🇧🇷 168.0.103.194

🇺🇸 165.154.218.153

🇩🇪 141.11.107.4

🇫🇷 91.231.89.135

🇳🇱 77.91.71.10

🇺🇸 66.132.172.115