3.82.152.46
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon Data Services Northern Virginia
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14618
- Hostname(s)
- ec2-3-82-152-46.compute-1.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
65 from
53 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 iNetWorker |
firewall-block, port(s): 9443/tcp
|
Port Scan | |
| 🇺🇸 LotPhantom |
|
Port Scan Hacking | |
| 🇩🇪 Ilop |
[hp-100] 3 unsolicited packets to honeypot ports 9200 (OCI DShield sensor)
|
Port Scan | |
| 🇩🇪 hotzmatic |
Dionaea SMB/Malware Trap: Attack (114 events observed on private honeypot sensor)
|
Hacking | |
| 🇩🇪 acadeova |
Blocked by UFW on vps3 [13443/tcp]
Source port: 64192
TTL: 116
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇹🇷 mixnet |
Port scan: SYN-only probes to 1,022 hosts / 1 port (8000) in 10 minutes. Detected by Mixnet network flow monitoring.
|
Port Scan | |
| 🇫🇮 iamxorum |
|
Port Scan | |
| 🇺🇸 Phil Schuyler |
Repeated probing against public honeypot services: 2 observed events targeting FTPD/21, HONEYAML/3000.
|
Port Scan | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| Anonymous |
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=9443
|
Port Scan Hacking | |
| 🇹🇷 Threat.live |
Threat.live: Web Scan
|
Web App Attack | |
| Anonymous |
Blocked by firewall on hugin [9443/tcp] | Rule: AbuseIPDB | SPT: 26290 | TTL: 119 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 TheSun |
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=12443
|
Port Scan Hacking | |
| 🇯🇵 jsys |
Automated report (nfacl NetFlow analysis, 300s window): host sweep (1024 distinct dst hosts); repeated attempts on admin/database ports 22 (1024 flows to sensitive ports)
|
Port Scan Brute-Force SSH | |
| Anonymous |
PROTO=TCP DPT=8080
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown