JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 32.199.173.55

32.199.173.55 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-32-199-173-55.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 32.199.173.55

Whois 32.199.173.55

IP Abuse Reports for 32.199.173.55:

This IP address has been reported a total of 72 times from 54 distinct sources. 32.199.173.55 was first reported on July 1st 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 femboy.cat	2026-07-11 01:24:32 (11 hours ago)	Port scan to tcp/11443 from 32.199.173.55	Brute-Force
🇩🇪 _ArminS_	2026-07-10 21:42:31 (14 hours ago)	SP-Scan 29500:8443 detected 2026.07.10 23:42:31 blocked until 2026.08.29 16:45:18	Port Scan
🇫🇷 Soncraft	2026-07-10 21:06:26 (15 hours ago)	Blocked by UFW on Jellyfin [1244/tcp] Source port: 23230 TTL: 117 Packet length: 60 TOS: 0x08 This ... show more Blocked by UFW on Jellyfin [1244/tcp] Source port: 23230 TTL: 117 Packet length: 60 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇪 NordhTech	2026-07-10 20:45:36 (15 hours ago)	More than 3 malicious connection attempts, trying port(s) 8080/tcp, then blocked from services ...	Port Scan Hacking
🇺🇸 ISPLtd	2026-07-10 09:40:19 (1 day ago)	Jul 10 03:40:15 32.199.173.55 TCP SPT=13048 DPT=8080 SYN Jul 10 03:40:16 32.199.173.55 TCP SPT=13048 ... show more Jul 10 03:40:15 32.199.173.55 TCP SPT=13048 DPT=8080 SYN Jul 10 03:40:16 32.199.173.55 TCP SPT=13048 DPT=8080 SYN Jul 10 03:40:18 32.199.173.55 TCP SPT=13048 DPT=8080 WIND ... show less	Port Scan
🇺🇸 itsnixk	2026-07-10 08:33:30 (1 day ago)	(mod_security) mod_security (id:920350) triggered by 32.199.173.55 (US/United States/ec2-32-199-173- ... show more (mod_security) mod_security (id:920350) triggered by 32.199.173.55 (US/United States/ec2-32-199-173-55.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jul 10 04:33:25.800133 2026] [security2:error] [pid 1583042:tid 1583387] [client 32.199.173.55:21034] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+\|\\\\[[\\\\da-f:]+\\\\]\|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "alCuVROLy_SWpILYT2qClAAAAR0"] show less	Port Scan
🇩🇪 cloudmax	2026-07-10 08:08:51 (1 day ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇫🇷 ISPLtd	2026-07-10 06:03:17 (1 day ago)	Jul 10 03:03:14 32.199.173.55 TCP SPT=12706 DPT=9200 SYN Jul 10 03:03:15 32.199.173.55 TCP SPT=12706 ... show more Jul 10 03:03:14 32.199.173.55 TCP SPT=12706 DPT=9200 SYN Jul 10 03:03:15 32.199.173.55 TCP SPT=12706 DPT=9200 SYN Jul 10 03:03:17 32.199.173.55 TCP SPT=12706 DPT=9200 ... show less	Port Scan
🇩🇪 SMi-Web	2026-07-10 04:16:14 (1 day ago)	Blocked by firewall on hugin [8443/tcp] \| Rule: UFW \| SPT: 13418 \| TTL: 122 \| LEN: 60 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [8443/tcp] \| Rule: UFW \| SPT: 13418 \| TTL: 122 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ISPLtd	2026-07-10 04:01:38 (1 day ago)	Jul 10 01:01:34 32.199.173.55 TCP SPT=34068 DPT=31337 SYN Jul 10 01:01:35 32.199.173.55 TCP SPT=3406 ... show more Jul 10 01:01:34 32.199.173.55 TCP SPT=34068 DPT=31337 SYN Jul 10 01:01:35 32.199.173.55 TCP SPT=34068 DPT=31337 SYN Jul 10 01:01:37 32.199.173.55 TCP SPT=34068 DPT=31337 ... show less	Port Scan
Anonymous	2026-07-10 03:50:18 (1 day ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇺🇸 ISPLtd	2026-07-10 02:46:29 (1 day ago)	Jul 9 20:46:25 32.199.173.55 TCP SPT=43200 DPT=9200 SYN Jul 9 20:46:26 32.199.173.55 TCP SPT=43200 ... show more Jul 9 20:46:25 32.199.173.55 TCP SPT=43200 DPT=9200 SYN Jul 9 20:46:26 32.199.173.55 TCP SPT=43200 DPT=9200 SYN Jul 9 20:46:28 32.199.173.55 TCP SPT=43200 DPT=9200 ... show less	Port Scan
🇳🇱 DonAtari	2026-07-09 22:01:43 (1 day ago)	DShield firewall scan - TCP to port 3232	Brute-Force SSH
🇫🇷 Hiigara	2026-07-09 22:00:38 (1 day ago)	connection attempt : 32.199.173.55 on port : tcp/22 (SSH)	Port Scan
🇩🇪 polido	2026-07-09 21:17:55 (1 day ago)	[debian-4gb-nbg1-1] Unauthorized connection attempt to port 3000 from 32.199.173.55	Port Scan

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 205.237.105.154

🇲🇽 187.174.238.116

🇨🇳 183.25.118.29

🇺🇸 66.132.172.250

🇭🇰 45.120.216.232

🇺🇸 38.212.67.79

🇨🇳 117.72.212.5

🇵🇭 112.202.49.67

🇺🇸 107.167.34.125

🇱🇺 64.89.160.73

🇮🇳 49.207.9.213

🇭🇰 47.82.119.219

🇳🇱 45.148.10.152

🇳🇱 5.61.209.43

🇺🇸 2607:f8b0:4001:c61::129

🇹🇭 223.204.216.102

🇹🇭 159.192.137.133

🇨🇳 103.213.95.198

🇸🇪 185.246.128.133

🇨🇳 183.184.52.192