3.95.168.235

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
59 reports
43 reporters · latest 24 minutes ago
ISP
Amazon Data Services Northern Virginia
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-3-95-168-235.compute-1.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
59 from 43 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 17 🇩🇪 Germany 10 🇫🇷 France 7
Most common categories Port Scan 51 Hacking 15 Brute-Force 7 SSH 6 Email Spam 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 7547) Source port: 29778 TTL: 121 Packet length: 60 TOS: 0x00 This report (for 3.95.168.235) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇷🇺 dnsbd.tech
nftables: Port scan (TCP:8443) [srv1]
Port Scan Hacking
🇳🇱 StopAbuse
tcp/3232 tcp/8000
Port Scan
🇨🇳 yiyan
Web probe targeting 'GET /robots.txt'. Log: 3.95.168.235 - - [09/Nov/2026:20:02:01 +0800] "GET /robots.txt HTTP/1.1" 200 733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.
Hacking Bad Web Bot
🇨🇳 さいとうあすか
Nov 9 19:24:06 pbs sshd[3454636]: Connection closed by 3.95.168.235 port 15072 [preauth] ...
Brute-Force SSH
🇺🇸 RAP
2026-11-09 09:42:40 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇺🇸 donarev419
Connection to port 13443 with data transfer. Data preview: 
Port Scan Hacking
🇩🇪 iNetWorker
firewall-block, port(s): 9443/tcp
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 3232) Source port: 47410 TTL: 121 Packet length: 60 TOS: 0x00 This report (for 3.95.168.235) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 1244) Source port: 24734 TTL: 116 Packet length: 60 TOS: 0x00 This report (for 3.95.168.235) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 bescared
F2B - Malicious activity detected. Excessive port scans. -151302cd-
Port Scan
🇩🇪 Ilop
[hp-100] 3 unsolicited packets to honeypot ports 7443 (OCI DShield sensor)
Port Scan
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,known_proto_on_non_std_port
Hacking
🇨🇿 kronos
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:1600 | alerts5m:1600
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 154.16.44.32
🇫🇮 147.185.133.26
🇩🇪 77.243.89.140
🇺🇸 20.118.235.40
🇬🇧 5.252.83.16
🇬🇧 2.57.17.240
🇺🇸 208.85.10.241
🇺🇸 199.165.159.129
🇸🇬 188.166.247.152
🇳🇱 109.160.32.173
🇭🇰 119.28.84.193
🇰🇷 115.160.76.23
🇧🇩 103.41.244.48
🇳🇱 86.38.187.179
🇳🇱 85.11.167.7
🇺🇸 70.167.235.62
feedback