JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

44.202.231.158

Neutral Activity

Abuse confidence score ?

0% Low Risk

1,010 reports

227 reporters · latest 7 months ago

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-44-202-231-158.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

44.202.231.158 has been reported 1,010 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 44.202.231.158

Export CSV

This IP address has been reported a total of 1,010 times from 227 distinct sources. 44.202.231.158 was first reported on November 5th 2025, and the most recent report was 7 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 mkey	2026-03-12 06:24:58 (7 months ago)	[2026-03-11 19:59:27] Unauthorized connection probe. Source on blacklist ((spp_reputation) packets b ... show more [2026-03-11 19:59:27] Unauthorized connection probe. Source on blacklist ((spp_reputation) packets blacklisted) show less	Hacking Port Scan
🇫🇷 ISPLtd	2026-03-11 20:12:13 (7 months ago)	Mar 11 17:12:09 44.202.231.158 TCP SPT=38602 DPT=56001 SYN Mar 11 17:12:10 44.202.231.158 TCP SPT=38 ... show more Mar 11 17:12:09 44.202.231.158 TCP SPT=38602 DPT=56001 SYN Mar 11 17:12:10 44.202.231.158 TCP SPT=38602 DPT=56001 SYN Mar 11 17:12:13 44.202.231.158 TCP SPT=38602 DPT=56001 WIND ... show less	Port Scan
Anonymous	2026-03-11 16:01:45 (7 months ago)	2026-03-11T17:01:44.502186+01:00 vps kernel: [34985147.091572] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-03-11T17:01:44.502186+01:00 vps kernel: [34985147.091572] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=44.202.231.158 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=112 ID=44641 DF PROTO=TCP SPT=64244 DPT=12443 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 Cyber Crusader	2026-03-11 06:45:01 (7 months ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 ISPLtd	2026-03-11 03:39:30 (7 months ago)	Mar 11 00:39:27 44.202.231.158 TCP SPT=26494 DPT=8443 SYN Mar 11 00:39:28 44.202.231.158 TCP SPT=264 ... show more Mar 11 00:39:27 44.202.231.158 TCP SPT=26494 DPT=8443 SYN Mar 11 00:39:28 44.202.231.158 TCP SPT=26494 DPT=8443 SYN Mar 11 00:39:30 44.202.231.158 TCP SPT=26494 DPT=8443 ... show less	Port Scan
🇺🇸 donarev419	2026-03-11 02:50:22 (7 months ago)	Connection to port 9200 with data transfer. Data preview:	Port Scan Hacking
🇫🇷 oonux.net	2026-03-11 02:39:29 (7 months ago)	RouterOS: Scanning detected TCP 44.202.231.158:58014 > x.x.x.x:443	Port Scan
🇫🇷 centurion	2026-03-11 02:26:51 (7 months ago)	Unauthorized attempt on uptime [50050/tcp] Source port: 16266 TTL: 117 Packet length: 60 TOS: 0x00 h ... show more Unauthorized attempt on uptime [50050/tcp] Source port: 16266 TTL: 117 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 chronos	2026-03-11 02:08:08 (7 months ago)	Possible malicious scan or exploit attempt on database services. \| Proto: TCP \| Port: 9200 \| Locatio ... show more Possible malicious scan or exploit attempt on database services. \| Proto: TCP \| Port: 9200 \| Location: United States, Ashburn show less	Port Scan Exploited Host Hacking SQL Injection
🇫🇷 centurion	2026-03-11 01:48:57 (7 months ago)	Blocked by UFW on dc00 [10443/tcp] Source port: 32956 TTL: 117 Packet length: 60 TOS: 0x00 This rep ... show more Blocked by UFW on dc00 [10443/tcp] Source port: 32956 TTL: 117 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 COMPLEX	2026-03-11 01:42:33 (7 months ago)	Unsolicited TCP traffic \| Action: DROP \| Port 1224	Brute-Force
🇫🇷 ISPLtd	2026-03-10 20:15:29 (7 months ago)	Mar 10 17:15:26 44.202.231.158 TCP SPT=27940 DPT=1245 SYN Mar 10 17:15:27 44.202.231.158 TCP SPT=279 ... show more Mar 10 17:15:26 44.202.231.158 TCP SPT=27940 DPT=1245 SYN Mar 10 17:15:27 44.202.231.158 TCP SPT=27940 DPT=1245 SYN Mar 10 17:15:29 44.202.231.158 TCP SPT=27940 DPT=1245 ... show less	Port Scan
🇫🇮 6kilowatti	2026-03-10 12:21:52 (7 months ago)	2026-03-10T14:21:51.390868+02:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74 ... show more 2026-03-10T14:21:51.390868+02:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:08:00 SRC=44.202.231.158 DST=5.61.88.83 LEN=60 TOS=0x00 PREC=0x00 TTL=111 ID=28011 DF PROTO=TCP SPT=57580 DPT=8443 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 OptimusGO	2026-03-10 01:53:22 (7 months ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-03-10 01:53:22 UTC Log evidence: 03/10/2026-01:53:19.760640 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 44.202.231.158:65100 -> 185.127.18.66:8443 show less	Port Scan Brute-Force
🇫🇷 ISPLtd	2026-03-10 01:46:44 (7 months ago)	Mar 9 22:46:40 44.202.231.158 TCP SPT=55270 DPT=3232 SYN Mar 9 22:46:41 44.202.231.158 TCP SPT=552 ... show more Mar 9 22:46:40 44.202.231.158 TCP SPT=55270 DPT=3232 SYN Mar 9 22:46:41 44.202.231.158 TCP SPT=55270 DPT=3232 SYN Mar 9 22:46:43 44.202.231.158 TCP SPT=55270 DPT=3232 WIND ... show less	Port Scan

Showing 1 to 15 of 1010 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇷 217.60.255.130

🇲🇲 203.96.240.158

🇬🇧 200.138.46.99

🇨🇳 183.224.97.83

🇩🇪 167.94.145.25

🇺🇸 162.216.150.19

🇺🇸 129.121.142.45

🇨🇳 117.21.200.143

🇮🇩 103.155.46.254

🇧🇫 102.179.50.155

🇳🇱 77.239.124.144

🇺🇸 54.204.76.69

🇧🇩 37.111.221.137

🇺🇸 20.115.91.172

🇬🇧 5.252.83.218

🇬🇧 2.57.17.121

🇬🇧 2.57.17.40

🇳🇱 204.76.203.4

🇬🇧 200.138.46.165

🇹🇼 198.235.24.68