44.202.199.161

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
62 reports
52 reporters · latest 2 months ago
ISP
Amazon Data Services Northern Virginia
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-44-202-199-161.compute-1.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

44.202.199.161 has been reported 62 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
62 from 52 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 masterguru
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 44.202.199.161 (US/United States/ec2-44-202-199-161.compute-1.amazonaws.com): 2 in the last 3600 secs (0-196)
Hacking
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/44.202.199.161 2025-09-03 01:56:39 /.git/config 2025-09-03 01:56:37 / 2025-09-03 01:56:38 /
Web App Attack
🇫🇷 service Informatique
/.git
Web App Attack
🇨🇦 ISPLtd
Hacking, URL manipulation, or malformed requests
Hacking
Anonymous
Port Scan Brute-Force SSH
Anonymous
Hacking SQL Injection Web App Attack
🇸🇰 iplusv
Automatic report from IV firewall log.
Port Scan Hacking Brute-Force
🇳🇱 Study Bitcoin 🤗
Port probe to tcp/80 (http) [srv133]
Port Scan Bad Web Bot Web App Attack
🇨🇿 huginet
44.202.199.161 - - [02/Sep/2025:22:03:47 +0200] "GET / HTTP/1.1" 403 32175 "-" "l9tcpid/v1.1.0" 44.202.199.161 - - [02/Sep/2025:22:03:48 +0200] "GET /.git/config HTTP/1.1" 403 32175 "-" "l9explore/1.2.2" ...
DDoS Attack FTP Brute-Force Ping of Death Phishing Web Spam Blog Spam Spoofing Brute-Force Web App Attack SSH
🇺🇸 ne1for23
Hacking
Anonymous
Generic port scan: GET / HTTP/1.1; Generic port scan: GET / HTTP/1.1; Probing for sensitive files or CMS vulnerabilities (e.g., .env, .git, WordPress): GET /.git/config HTTP/1.1
Port Scan Web App Attack
🇺🇸 bulkvm.com
[bulkvm.com/honeypot] Generic HTTP. Port: 54498, request: 
Hacking
🇺🇸 MPL
tcp/80 (4 or more attempts)
Port Scan
Anonymous
Infostealer / login credentials theft attempt: /.git/config
Hacking
🇩🇪 Blexyel
44.202.199.161 - - [02/Sep/2025:21:37:37 +0200] "GET /.git/config HTTP/1.1" 404 153 "-" "l9explore/1.2.2" ...
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇬 197.163.30.129
🇫🇷 162.159.124.23
🇨🇦 85.217.149.57
🇨🇿 78.80.16.206
🇳🇱 193.176.31.215
🇳🇱 192.253.248.226
🇸🇮 130.12.182.107
🇨🇦 85.217.149.6
🇧🇬 79.124.62.230
🇩🇪 69.5.169.162
🇨🇳 61.145.56.3
🇳🇱 45.148.10.152
🇵🇱 45.138.12.172
🇧🇪 35.210.91.33
🇭🇰 20.24.218.67
🇮🇳 203.145.165.2
🇵🇱 194.180.49.218
🇩🇪 185.73.23.133
🇺🇸 170.106.186.253
🇧🇩 103.138.214.215
feedback