3.88.205.248

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
97 reports
71 reporters ยท latest 4 hours ago
ISP
Amazon Data Services Northern Virginia
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-3-88-205-248.compute-1.amazonaws.com
Domain Name
amazon.com
Country
๐Ÿ‡บ๐Ÿ‡ธ United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
97 from 71 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 21 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 14 ๐Ÿ‡ซ๐Ÿ‡ท France 13
Most common categories Port Scan 83 Hacking 26 Brute-Force 14 Web App Attack 11 SSH 6
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 2 application-level events across 2 target ports and 2 source port(s). Ports: 12443/service, 56001/service. Sensors: Honeytrap.
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช xavier-momain.eu
CrowdSec ban โ€” scenario: xavier/nftables-scan-any-port | report #2
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ VMHeaven.io
Blocked by UFW [9200/tcp] Source port: 25278 TTL: 110 Packet length: 60
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ ByeByte API
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Selckie
fail2ban: NGINX unusual impact
Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท uthul
T-Pot honeypot: 10 hits on ports [8080] (automated)
Port Scan Web App Attack
๐Ÿ‡ท๐Ÿ‡ธ Smel
MH/MP Probe, Scan, Hack -
Port Scan Hacking
๐Ÿ‡ฉ๐Ÿ‡ช Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(2) | Events: 2 | Client: Go | rDNS: ec2-3-88-205-248.compute-1.amazonaws.com | F2B/ssh-honeypot-scan@2026-11-13T07:56:00Z
Port Scan Hacking
๐Ÿ‡น๐Ÿ‡ท mixnet
Port scan: SYN-only probes to 1,022 hosts / 1 port (8080) in 10 minutes. Detected by Mixnet network flow monitoring.
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
๐Ÿ‡ซ๐Ÿ‡ท uthul
T-Pot honeypot: 5 hits on ports [11443] (automated)
Port Scan
๐Ÿ‡ซ๐Ÿ‡ฎ mikkopal88
TCP SYN port scan to SSH 22
Port Scan SSH
๐Ÿ‡ธ๐Ÿ‡ช Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 115 | Len: 60B | Win: 62727(1) | rDNS: ec2-3-88-205-248.compute-1.amazonaws.com | F2B/ufw-honeypot@2026-11-12T18:21:41Z
Port Scan Hacking
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 5 payload-bearing connection/event(s), 1215 payload byte(s) total, maximum payload 243 byte(s). Target port(s): 13443.
Port Scan Hacking
๐Ÿ‡จ๐Ÿ‡ฆ Anymous
GET /favicon.ico HTTP/1.1 410 5207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML
Port Scan Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ซ๐Ÿ‡ท 217.76.48.22
๐Ÿ‡ง๐Ÿ‡ญ 193.188.113.88
๐Ÿ‡ฐ๐Ÿ‡ผ 188.236.96.179
๐Ÿ‡จ๐Ÿ‡ณ 58.247.17.210
๐Ÿ‡บ๐Ÿ‡ธ 52.233.83.45
๐Ÿ‡จ๐Ÿ‡ฆ 50.72.242.66
๐Ÿ‡ฎ๐Ÿ‡ท 213.176.26.44
๐Ÿ‡ฉ๐Ÿ‡ช 193.124.20.234
๐Ÿ‡ง๐Ÿ‡ท 187.58.241.90
๐Ÿ‡จ๐Ÿ‡ณ 183.128.21.246
๐Ÿ‡จ๐Ÿ‡ณ 182.116.134.44
๐Ÿ‡บ๐Ÿ‡ธ 154.193.22.12
๐Ÿ‡จ๐Ÿ‡ณ 114.245.152.162
๐Ÿ‡ซ๐Ÿ‡ท 79.137.26.225
๐Ÿ‡ซ๐Ÿ‡ฎ 178.20.210.152
๐Ÿ‡ป๐Ÿ‡ณ 165.101.47.1
๐Ÿ‡จ๐Ÿ‡ณ 150.158.127.233
๐Ÿ‡ซ๐Ÿ‡ท 141.101.69.55
๐Ÿ‡ฒ๐Ÿ‡ฆ 105.156.96.77
๐Ÿ‡ฟ๐Ÿ‡ผ 41.220.30.134
feedback