3.85.27.123
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon Data Services Northern Virginia
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14618
- Hostname(s)
- ec2-3-85-27-123.compute-1.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
66 from
57 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇦🇺 LiftUp Hosting |
Honeypot hit: HTTP/1.1 request on 1245
GET /
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 1245 [1] TCP
|
Hacking Bad Web Bot | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=2; port 21 proto 6 detection honeypot_tcp; port 21 proto 6 detection honeypot_tcp
|
Port Scan | |
| 🇹🇷 teklasbt |
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — Elasticsearch (12 events in 10min) at 2026-11-09 21:33
|
Hacking | |
| 🇸🇪 NordhTech |
Multiple malicious connection attempts detected, trying port(s) 8080/tcp, then blocked by firewall.
|
Port Scan Hacking | |
| 🇳🇱 i-turnradio.nl |
2026-11-09 21:21:28 +01:00 - Unsolicited TCP connection to a honeypot port; probing port 22.
|
Port Scan | |
| Anonymous |
unsolicited connect TCP dport 13443 (sport 28838)
|
Hacking | |
| 🇺🇸 Choice Tech LLC |
Blocked by OPNsense firewall; 4 hits, proto=tcp, ports=21
|
Port Scan Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 5 payload-bearing connection/event(s), 1023 payload byte(s) total, maximum payload 205 byte(s). Target port(s): 7547.
|
Port Scan Hacking | |
| 🇫🇷 uthul |
T-Pot honeypot: 15 hits on ports [21, 8443] (automated)
|
Port Scan Hacking Web App Attack | |
| 🇫🇷 uthul |
T-Pot honeypot: 12 hits on ports [21] (automated)
|
Port Scan Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 56001)
Source port: 64560
TTL: 117
Packet length: 60
TOS: 0x00
This report (for 3.85.27.123) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 vtchost.com |
portscan on honeypot system
...
|
Port Scan | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇮🇩 helouism |
Fail2Ban: Blocked by UFW for port scanning.
|
Port Scan DDoS Attack | |
| 🇦🇺 Block Rockin' Beats |
Attempted connection to TCP port 22
|
Port Scan SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown