3.236.117.140

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
39 reports
39 reporters · latest 2 minutes ago
ISP
Amazon Data Services Northern Virginia
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-3-236-117-140.compute-1.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
39 from 39 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 12 🇺🇸 United States of America 9 🇨🇿 Czechia 2
Most common categories Web App Attack 32 Brute-Force 10 Hacking 8 Bad Web Bot 7 Port Scan 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 etu brutus
3.236.117.140 has been banned for [WebApp Attack] ...
Hacking Bad Web Bot Web App Attack
Anonymous
Web application attack detected.
Web App Attack
🇨🇭 🇨🇭 Hosting
Automated security scanning detected: Spring Boot Actuator Exposure. Systematic reconnaissance using automated tools.
Port Scan Web App Attack
🇳🇱 ParaBug
3.236.117.140 - - [07/Nov/2026:15:14:03 +0100] "GET /api/actuator HTTP/1.1" 301 5763 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ...
Phishing Brute-Force Web App Attack
🇱🇹 damorfati
ANNA automated report (scanning) | hacking - agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36, body: null, method: GET, url: /actuator
Web App Attack Hacking
🇫🇮 as211431.net
Bad Web Bot
🇩🇪 iNetWorker
trolling for resource vulnerabilities
Web App Attack
🇸🇪 SkyDancer
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
Hacking Brute-Force SSH
Anonymous
Fuzzing/Looking for credentials files.
Brute-Force Web App Attack
🇺🇸 jkhorvath
Request for URL /actuator
Phishing Brute-Force Web App Attack
🇩🇪 Marc
Brute-Force
🇩🇪 BlueWire Hosting
Aggressive scanning resulting into 404
Bad Web Bot
🇩🇪 SCHAPPY
Brute-force attack to non-existent web resources, HTTP code 404.
Brute-Force Web App Attack
🇨🇿 SystemAdmin
Doing bad things...
Web App Attack
🇩🇪 LRob
Vulnerability scanning | method: GET | path: /actuator | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 | src_port: 38382
Port Scan Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇭 203.156.108.110
🇪🇹 196.188.225.191
🇲🇦 196.115.22.182
🇨🇭 172.161.40.129
🇳🇱 109.160.32.41
🇪🇸 91.245.200.246
🇺🇸 52.165.88.167
🇺🇸 38.110.46.237
🇩🇪 194.187.176.93
🇧🇷 187.182.4.154
🇦🇷 181.28.140.75
🇩🇪 157.230.18.166
🇳🇬 105.116.10.202
🇳🇱 83.85.209.80
🇺🇸 57.141.22.33
🇮🇳 52.172.92.182
🇨🇭 209.99.190.186
🇨🇱 201.215.152.156
🇦🇷 181.45.135.30
🇨🇳 36.104.144.114
feedback