3.217.122.193

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
39 reports
32 reporters · latest 1 day ago
ISP
Amazon Data Services Northern Virginia
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-3-217-122-193.compute-1.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
39 from 32 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 16 🇳🇱 Netherlands 5 🇺🇸 United States of America 5
Most common categories Web App Attack 18 Bad Web Bot 17 Port Scan 11 Hacking 10 Brute-Force 7
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Progetto1
Detected via HAProxyScanner at 2026-11-07 11:07:01 UTC on destination port WEB (80/443). Repeated scan / connection.
Port Scan Hacking Brute-Force
Anonymous
Port Scan Brute-Force SSH
🇭🇷 aktonrs
Blocked by https://aegis.hr — Aegis Single-Hit — Reputation-gated GET / probe - (MITRE T1595.002), 1 attempts, Period: 2026-11-07 10:07:08 to 2026-11-07 10:07:08
Web App Attack Bad Web Bot
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 53 | Len: 60B | Win: 26883(1) | rDNS: ec2-3-217-122-193.compute-1.amazonaws.com | F2B/ufw-honeypot@2026-11-07T10:19:44Z
Port Scan Hacking
🇺🇸 mnsf
Request Overload (115)
Brute-Force Web App Attack
Anonymous
Blocked by firewall on hugin [80/tcp] | Rule: AbuseIPDB | SPT: 42394 | TTL: 64 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (suspicious behaviour)
DDoS Attack
🇩🇪 SA19999
Auto-report: ps:modsec:10008 | sources=["ps-feeder"] | Fox honeypot cluster
Web App Attack
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 46 | Len: 60B | Win: 26883(1) | rDNS: ec2-3-217-122-193.compute-1.amazonaws.com | F2B/ufw-honeypot@2026-11-07T08:34:27Z
Port Scan Hacking
🇩🇪 Vegascosmetics
Kingcopy.org AI-IDS (Vegas Cosmetics shop): Abuse 100 / BAN. IP is on the AbuseIPDB blacklist and was blocked on the first request.
Hacking Exploited Host Web App Attack
🇩🇪 klaus_ph
3.217.122.193 - - [07/Nov/2026:09:18:24 +0100] "GET / HTTP/1.1" 200 5715 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/131.0.6778.85 Safari/537.36" ...
Bad Web Bot
🇹🇷 atakankocak
BotaSecurity FireWall: Automatically detected malicious web scanning/brute-force attack.
Hacking Brute-Force Web App Attack SSH
🇺🇸 gerensat
2026-11-07 04:55:09 | / | [] | Mozilla/5.0 (X11; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0
Web App Attack
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 46 | Len: 60B | Win: 26883(1) | rDNS: ec2-3-217-122-193.compute-1.amazonaws.com | F2B/ufw-honeypot@2026-11-07T07:52:12Z
Port Scan Hacking
Anonymous
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack Brute-Force Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 175.195.223.254
🇬🇧 92.207.4.157
🇧🇪 34.62.254.152
🇧🇷 186.195.238.125
🇺🇸 178.128.149.188
🇺🇸 172.70.135.80
🇺🇸 84.37.195.10
🇺🇸 66.228.56.227
🇺🇸 66.132.195.94
🇩🇪 46.101.234.147
🇻🇳 222.254.171.105
🇸🇬 212.73.148.19
🇧🇷 201.81.1.134
🇺🇸 172.70.135.72
🇳🇱 160.119.76.137
🇯🇵 133.32.27.105
🇧🇩 114.130.85.36
🇺🇸 104.23.209.25
🇺🇸 104.22.101.106
🇨🇳 49.64.85.138
feedback