3.87.96.181

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
201 reports
147 reporters · latest 2 minutes ago
ISP
Amazon Data Services Northern Virginia
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-3-87-96-181.compute-1.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
201 from 147 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 68 🇩🇪 Germany 32 🇫🇷 France 24
Most common categories Web App Attack 160 Bad Web Bot 61 Hacking 49 Brute-Force 48 Port Scan 25
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇺 FEWA
Fail2Ban Ban Triggered
Hacking Bad Web Bot Web App Attack
🇺🇸 xmission.com
Blocked by UFW (TCP on 443) Source port: 47806 TTL: 58 Packet length: 60 TOS: 0x00 This report (for 3.87.96.181) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Web App Attack
🇫🇷 Security_Whaller
Malicious activity detected on Honeypot.
Brute-Force Hacking Web App Attack
🇨🇦 1gz
Bad Web Bot
🇦🇺 2000cn.com.au
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack Hacking
Anonymous
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack Brute-Force Bad Web Bot
🇫🇷 ecodehost.com
Domain : ermedmedical.com Rule : WEB IP in black list
Port Scan
🇯🇵 ki3
Fail2Ban: Web App Attacks and Forum Spam 3.87.96.181 1794547532.0(JST)
Web Spam Bad Web Bot Web App Attack
🇩🇪 Coinetic AI Security
Web server attack (attack pattern /.git/): 1 attempts, 2026-11-13 05:11 - 05:11 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).
Web App Attack
🇮🇩 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/vpatch-git-config.
Hacking
🇱🇹 im
HTTP
Port Scan
Anonymous
Trying to access config files
Web App Attack
🇫🇷 service Informatique
/.git
Web App Attack
🇺🇸 creechy
3.87.96.181 - - [12/Nov/2026:19:51:54 -0800] "GET /.git/config HTTP/1.1" 403 689 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.1 Safari/605.1.15" ...
Hacking Bad Web Bot
🇧🇷 Peregrine
Fail2Ban Jail:IU tomcat-honeypot | Evidence: - 3.87.96.181 - - [11/Nov/2026:22:57:52 -0300] "GET /.git/config HTTP/1.1" 404 -
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 159.89.4.123
🇮🇳 117.232.20.107
🇬🇧 81.158.192.248
🇳🇱 77.239.124.112
🇨🇳 203.107.60.203
🇦🇿 131.117.137.54
🇰🇷 106.244.120.37
🇩🇪 91.40.147.4
🇺🇸 65.33.176.137
🇺🇸 51.8.102.37
🇳🇱 45.148.10.157
🇯🇵 8.216.4.82
🇨🇳 106.13.234.209
🇰🇷 43.166.14.88
🇦🇲 5.77.141.69
🇲🇾 202.165.26.170
🇺🇸 199.165.159.146
🇧🇪 198.235.24.240
🇳🇱 193.47.62.69
🇨🇳 120.193.9.169
feedback