44.201.239.247
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon Data Services Northern Virginia
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14618
- Hostname(s)
- ec2-44-201-239-247.compute-1.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
59 from
51 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇩 helouism |
Fail2Ban: Blocked by UFW for port scanning.
|
Port Scan DDoS Attack | |
| 🇺🇸 conrad10781 |
nginx-direct-ip
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 8 hits on ports [3232, 11443] (automated)
|
Port Scan | |
| 🇱🇹 NotACaptcha |
2026-11-09T22:08:30.611165+02:00 3d3l kernel: banned.IN=venet0 OUT= MAC= SRC=44.201.239.247 LEN=60 TTL=115 ID=44672 DF TCP DPT=21 WINDOW=62727 SYN
|
Port Scan | |
| 🇩🇪 genokrad |
Unauthorized connection attempt on TCP/9200 (Elasticsearch)
|
Port Scan | |
| 🇳🇱 36max |
Blocked by firewall: 6 unsolicited inbound connection attempts within 24 hours to ports 3000, 3232. Automated report from a home network.
|
Port Scan | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 3389/RDP | Proto: TCP(1) | Flags: all SYN | TTL: 112 | Len: 60B | Win: 62727(1) | rDNS: ec2-44-201-239-247.compute-1.amazonaws.com | F2B/ufw-honeypot@2026-11-09T14:49:38Z
|
Port Scan Hacking | |
| 🇩🇪 iNetWorker |
firewall-block, port(s): 8443/tcp
|
Port Scan | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇩🇪 Fahreddin Ergin |
Detected by CrowdSec / Wazuh on Echoserver Hetzner cluster (automated brute-force ban)
|
Brute-Force SSH Port Scan | |
| 🇮🇩 securejdprop |
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Threat Intelligence Poor Reputation IP group 64).
|
Hacking Web App Attack | |
| 🇺🇸 donarev419 |
Connection to port 10443 with data transfer.
Data preview:
|
Port Scan Hacking | |
| 🇫🇷 JohnAtlas |
Honeypot: connection attempt to unused port(s) 9200/tcp on a server where these services do not exist. Automated firewall trap.
|
Port Scan Hacking | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact
|
Hacking | |
| 🇬🇧 tpguy825 |
SSH bruteforce from 44.201.239.247 port 46356, stuck in tarpit for 70.002 secs
|
Hacking Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown