JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

3.87.122.241

Neutral Activity

Abuse confidence score ?

0% Low Risk

17 reports

14 reporters · latest 4 months ago

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-3-87-122-241.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

3.87.122.241 has been reported 17 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 3.87.122.241

Export CSV

This IP address has been reported a total of 17 times from 14 distinct sources. 3.87.122.241 was first reported on May 11th 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-02 03:28:02 (4 months ago)	apache-auth	Brute-Force Web App Attack
🇩🇪 zupan	2026-05-30 17:44:17 (4 months ago)	Blocked by UFW on vps [3000/tcp] \| SPT: 38018 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on vps [3000/tcp] \| SPT: 38018 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 David Ferneding	2026-05-30 13:38:24 (4 months ago)	Blocked by UFW (TCP on 8443) Source port: 58446 TTL: 58 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8443) Source port: 58446 TTL: 58 Packet length: 60 TOS: 0x00 This report (for 3.87.122.241) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 mrcrassi	2026-05-30 09:58:02 (4 months ago)	Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET ... show more Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /-/healthy UA: webscan/2.1 (+asset-inventory) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Gabriel Camargo	2026-05-29 19:25:59 (4 months ago)	3.87.122.241 - - [29/May/2026:14:25:58 -0500] "GET / HTTP/1.1" 301 178 "-" "Python/3.8 aiohttp/3.10. ... show more 3.87.122.241 - - [29/May/2026:14:25:58 -0500] "GET / HTTP/1.1" 301 178 "-" "Python/3.8 aiohttp/3.10.11" 3.87.122.241 - - [29/May/2026:14:25:58 -0500] "GET / HTTP/1.1" 301 178 "-" "Python/3.8 aiohttp/3.10.11" 3.87.122.241 - - [29/May/2026:14:25:58 -0500] "GET /api/health HTTP/1.1" 301 178 "-" "Python/3.8 aiohttp/3.10.11" ... show less	Brute-Force SSH
🇩🇪 BlueWire Hosting	2026-05-29 08:47:09 (4 months ago)	Bad bot ignoring robot.txt	Bad Web Bot
Anonymous	2026-05-29 06:34:04 (4 months ago)	Bot / scanning and/or hacking attempts: GET /login.php HTTP/1.1, GET /api/health HTTP/1.1, GET / HTT ... show more Bot / scanning and/or hacking attempts: GET /login.php HTTP/1.1, GET /api/health HTTP/1.1, GET / HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 zupan	2026-05-29 05:54:25 (4 months ago)	Blocked by UFW on vps [3000/tcp] \| SPT: 59088 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on vps [3000/tcp] \| SPT: 59088 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-05-29 05:48:23 (4 months ago)	Port Scan	Port Scan
🇷🇺 genokrad	2026-05-24 16:47:21 (4 months ago)	Website scan TCP 80/443 "/login" "Moz111a/5.0 (1Pad; CPU 0S 17_2 like Mac OS X) AppleWebKit/605.1."	Port Scan Web App Attack
🇷🇺 genokrad	2026-05-24 13:57:36 (4 months ago)	Website scan TCP 80/443 "/" "Python/3.8 aiohttp/3.10.11"	Port Scan Web App Attack
🇫🇮 ngonghillsbikers	2026-05-24 12:00:06 (4 months ago)	Date: 24/May/2026:14:59:22.252915 +0300 \| Reported IP: 3.87.122.241 mod_security \| id: 950130 959100 ... show more Date: 24/May/2026:14:59:22.252915 +0300 \| Reported IP: 3.87.122.241 mod_security \| id: 950130 959100 980170 \| US/group.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; ; ; ; ; ; ; Warning. Pattern match; Warning. Pattern match; Warning. Unconditional match in SecAction. [file; Warning. Unconditional match in SecAction. [file; Access denied with code 403 (phase 4). Operator GE matched 4 at TX:blocking_outbound_anomaly_score. [file; Access denied with code 403 (phase 4). Operator GE matched 4 at TX:blocking_outbound_anomaly_score. [file show less	SQL Injection Brute-Force Bad Web Bot
🇪🇸 Francisco Vallejo	2026-05-24 11:32:16 (4 months ago)	[Sun May 24 13:12:37.101228 2026] [authz_core:error] [pid 1246930:tid 130565973984960] [client 3.87. ... show more [Sun May 24 13:12:37.101228 2026] [authz_core:error] [pid 1246930:tid 130565973984960] [client 3.87.122.241:34156] AH01630: client denied by server configuration: proxy:https://localhost:3000/ [Sun May 24 13:12:37.185563 2026] [authz_core:error] [pid 1246930:tid 130566485677760] [client 3.87.122.241:34156] AH01630: client denied by server configuration: proxy:https://localhost:3000/ [Sun May 24 13:12:37.270059 2026] [authz_core:error] [pid 1246930:tid 130567452485312] [client 3.87.122.241:34156] AH01630: client denied by server configuration: proxy:https://localhost:3000/api/health [Sun May 24 13:32:15.250746 2026] [authz_core:error] [pid 1246930:tid 130565982377664] [client 3.87.122.241:55948] AH01630: client denied by server configuration: proxy:https://localhost:9090/ [Sun May 24 13:32:15.335094 2026] [authz_core:error] [pid 1246930:tid 130567418914496] [client 3.87.122.241:55948] AH01630: client denied by server configuration: proxy:https://localhost:9090/ ... show less	Brute-Force SSH
🇬🇧 citylights13	2026-05-13 08:27:48 (5 months ago)	Web scanning/vulnerability probing on core: systematic 4xx responses probing for .env, credentials, ... show more Web scanning/vulnerability probing on core: systematic 4xx responses probing for .env, credentials, phpinfo etc (automated report via fail2ban) show less	Port Scan Web App Attack
🇹🇭 Sawasdee	2026-05-11 22:56:02 (5 months ago)	Port Scan ...	Port Scan

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.58.130.155

🇺🇸 164.90.142.33

🇩🇪 109.160.32.148

🇩🇪 109.160.32.111

🇷🇺 95.188.91.101

🇮🇳 52.140.76.154

🇲🇾 49.124.153.42

🇸🇬 47.79.206.72

🇬🇧 35.203.211.38

🇺🇸 34.181.179.9

🇯🇵 34.180.109.195

🇩🇪 34.159.153.97

🇯🇵 34.146.185.119

🇳🇱 34.90.62.93

🇧🇷 16.5.0.197

🇺🇸 213.232.121.109

🇹🇼 211.72.115.235

🇮🇹 187.14.102.170

🇵🇱 176.53.159.198

🇨🇱 170.150.156.132