44.202.44.248

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
22 reports
22 reporters Β· latest 17 minutes ago
ISP
Amazon Data Services Northern Virginia
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-44-202-44-248.compute-1.amazonaws.com
Domain Name
amazon.com
Country
πŸ‡ΊπŸ‡Έ United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations πŸ‡«πŸ‡· France 4 πŸ‡©πŸ‡ͺ Germany 3 πŸ‡―πŸ‡΅ Japan 3
Most common categories Port Scan 16 Hacking 5 Brute-Force 4 SSH 3 Web App Attack 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡ΉπŸ‡· teklasbt
Seczar SecureOps β€” SSH Brute Force (16 events) β€” quarantined 43200m
SSH Brute-Force
πŸ‡ΈπŸ‡ͺ NordhTech
Multiple malicious connection attempts detected, trying port(s) 8000/tcp, then blocked by firewall.
Port Scan Hacking
Anonymous
Port Scan Brute-Force
πŸ‡«πŸ‡· Kejult
Honeypot Finding: repeated TCP service probing on TCP/1224 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
πŸ‡«πŸ‡· uthul
T-Pot honeypot: 8 hits on ports [8443] (automated)
Port Scan Web App Attack
πŸ‡ΊπŸ‡Έ ISPLtd
Nov 6 08:29:07 44.202.44.248 TCP SPT=62988 DPT=8443 SYN Nov 6 08:29:08 44.202.44.248 TCP SPT=62988 DPT=8443 SYN Nov 6 08:29:10 44.202.44.248 TCP SPT=62988 DPT=8443 ...
Port Scan
πŸ‡©πŸ‡ͺ Jochen Pretli
connection to honeypot
Email Spam Port Scan
πŸ‡―πŸ‡΅ VXG-NET
port=10443, indicator_type=scan
Port Scan
πŸ‡§πŸ‡· diego
[probe-smbits-188-16] 2026-11-06 07:09:19, Client: 44.202.44.248, Protocol: 6, Unauthorized activity to HTTP: GET /
Web App Attack
πŸ‡¨πŸ‡Ώ Countryman
repeated unauthorized connection attempts, host sweep, port scan
Port Scan
πŸ‡¦πŸ‡Ί FireGuard Server
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=9200
Port Scan Hacking
πŸ‡―πŸ‡΅ jsys
Automated report (nfacl NetFlow analysis, 300s window): host sweep (1024 distinct dst hosts); SYN-flood-like small-packet flows (1024 small-packet flows)
DDoS Attack Port Scan
πŸ‡©πŸ‡ͺ acadeova
Blocked by UFW on vps3 [50050/tcp] Source port: 22530 TTL: 116 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
πŸ‡«πŸ‡· LRob
SSH brute force
Brute-Force SSH
πŸ‡ΉπŸ‡Ό kk_it_man
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

πŸ‡©πŸ‡ͺ 193.39.10.156
πŸ‡©πŸ‡° 158.173.74.107
πŸ‡¨πŸ‡³ 123.59.7.18
πŸ‡¨πŸ‡³ 118.113.40.21
πŸ‡§πŸ‡© 103.122.249.210
πŸ‡³πŸ‡± 34.178.39.243
πŸ‡·πŸ‡΄ 2.57.122.238
πŸ‡³πŸ‡± 185.218.86.17
πŸ‡°πŸ‡· 175.202.142.154
πŸ‡¨πŸ‡³ 120.48.176.103
πŸ‡§πŸ‡© 103.122.143.111
πŸ‡«πŸ‡· 91.231.89.224
πŸ‡ΊπŸ‡Έ 54.245.40.216
πŸ‡ΉπŸ‡­ 27.254.144.183
πŸ‡»πŸ‡³ 210.245.30.140
πŸ‡ΈπŸ‡³ 196.207.218.8
πŸ‡ΈπŸ‡¬ 194.5.82.124
πŸ‡©πŸ‡ͺ 193.124.20.238
πŸ‡°πŸ‡ͺ 102.209.76.136
πŸ‡ΊπŸ‡¦ 91.234.1.30
feedback