3.89.71.18
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon Data Services Northern Virginia
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14618
- Hostname(s)
- ec2-3-89-71-18.compute-1.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
39 from
34 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 2 application-level events across 2 target ports and 2 source port(s). Ports: 3232/service, 31337/service. Sensors: Honeytrap.
|
Port Scan | |
| 🇳🇱 oblivion394 |
Suspicious HTTP activity detected
|
Bad Web Bot Web App Attack | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 5 payload-bearing connection/event(s), 1215 payload byte(s) total, maximum payload 243 byte(s). Target port(s): 7443.
|
Port Scan Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 3232)
Source port: 45506
TTL: 116
Packet length: 60
TOS: 0x00
This report (for 3.89.71.18) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
|
Hacking | |
| 🇰🇷 winter |
Connection attemp from 3.89.71.18 to port 22
|
Brute-Force SSH | |
| 🇩🇪 iNetWorker |
trying to access non-authorized port
|
Port Scan | |
| 🇳🇱 376yqrz3a |
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=8080
|
Port Scan Hacking | |
| 🇵🇱 sefinek.net |
|
Hacking Bad Web Bot | |
| 🇺🇸 Choice Tech LLC |
Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=3389
|
Port Scan Hacking | |
| 🇸🇬 khairilgunawan |
ZonaKuota Sentinel: Port honeypot probe detected on port 22 (SSH). Unauthorized scanner blocked.
|
Port Scan SSH | |
| 🇹🇷 Threat.live |
Threat.live: Web Scan
|
Web App Attack | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 110 | Len: 60B | Win: 62727(1) | rDNS: ec2-3-89-71-18.compute-1.amazonaws.com | F2B/ufw-honeypot@2026-11-07T14:49:48Z
|
Port Scan Hacking | |
| 🇺🇸 ne1for23 |
|
Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 9443)
Source port: 31606
TTL: 117
Packet length: 60
TOS: 0x00
This report (for 3.89.71.18) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown