JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

44.203.251.80

Recent Activity

Abuse Confidence Score

41% Elevated

15 reports

11 reporters · latest 2 hours ago

ISP: Amazon Data Services Northern Virginia
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14618
Hostname(s): ec2-44-203-251-80.compute-1.amazonaws.com
Domain Name: amazon.com
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

15 from 11 distinct reporters

First reported

July 12th 2022

Most recent report

2 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 6 🇨🇿 Czechia 1 🇮🇹 Italy 1

Most common categories Bad Web Bot 5 Web App Attack 3 Brute-Force 1 Port Scan 1 DDoS Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MarkGGN	2026-11-08 20:10:55 UTC · (2 hours ago)	Web Scraping/Brute Force 08/Nov/2026:21:10:49 +0100 \| 44.203.251.80 \| 404 \| "GET /wp-content/uploads/2016/07/[HOST] HTTP/1.1" \| Referer: "https://[HOST]/tag/riga/" \| Ursprung: "-" 08/Nov/2026:21:10:54 +0100 \| 44.203.251.80 \| 404 \| "GET /wp-content/up ... show more Web Scraping/Brute Force 08/Nov/2026:21:10:49 +0100 \| 44.203.251.80 \| 404 \| "GET /wp-content/uploads/2016/07/[HOST] HTTP/1.1" \| Referer: "https://[HOST]/tag/riga/" \| Ursprung: "-" 08/Nov/2026:21:10:54 +0100 \| 44.203.251.80 \| 404 \| "GET /wp-content/uploads/2016/07/[HOST] HTTP/1.1" \| Referer: "https://[HOST]/tag/riga/" \| Ursprung: "-" 08/Nov/2026:21:10:54 +0100 \| 44.203.251.80 \| 404 \| "GET /wp-content/uploads/2016/07/[HOST].gYE_BA4_N7.jpg HTTP/1.1" \| Referer: "https://[HOST]/tag/riga/" \| Ursprung: "-" show less	Bad Web Bot DDoS Attack
Anonymous	2026-11-07 23:00:09 UTC · (1 day ago)	Network service scanning detected by FortiGate; source quarantined.	Port Scan
🇩🇪 paissangroup	2026-11-07 07:13:16 UTC · (1 day ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-11-06 13:01:02 UTC · (2 days ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇩🇪 LRob	2026-11-03 02:59:24 UTC · (5 days ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/uploads/2013/09/Pourquoi-r%C3%A9aliser-une-infographie.jpg \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/ ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/uploads/2013/09/Pourquoi-r%C3%A9aliser-une-infographie.jpg \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| 2026-11-03 02:59 UTC show less	Bad Web Bot
🇩🇪 LRob	2026-10-31 10:32:40 UTC · (1 week ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/uploads/2010/11/push-facebook.png, /wp-content/uploads/2010/11/push-twitter.png, /wp-content/uploads/2011/01/emarketing2011.jpg (+1 more) \| ua: Mozilla/5.0 (Windows NT 10 ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/uploads/2010/11/push-facebook.png, /wp-content/uploads/2010/11/push-twitter.png, /wp-content/uploads/2011/01/emarketing2011.jpg (+1 more) \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| 2026-10-31 10:32 UTC show less	Bad Web Bot
🇩🇪 LRob	2026-10-31 05:43:54 UTC · (1 week ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/themes/ggv/images/people02.jpg \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36	Bad Web Bot
Anonymous	2026-10-28 23:01:03 UTC · (1 week ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇨🇴 adalbertoreyes.org	2024-11-09 17:46:31 UTC · (1 year ago)	CategoryPortScan	Port Scan
🇺🇸 TPI-Abuse	2024-11-09 04:53:03 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 44.203.251.80 (ec2-44-203-251-80.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 08 23:52:58.988693 2024] [security2:error] [pid 9618:ti ... show more (mod_security) mod_security (id:210492) triggered by 44.203.251.80 (ec2-44-203-251-80.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 08 23:52:58.988693 2024] [security2:error] [pid 9618:tid 9618] [client 44.203.251.80:50652] [client 44.203.251.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "neuromancer.xyz"] [uri "/.env"] [unique_id "Zy7qqpUQ38_JkpU6D718EAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-09 04:37:32 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 44.203.251.80 (ec2-44-203-251-80.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 08 23:37:25.631229 2024] [security2:error] [pid 11448:t ... show more (mod_security) mod_security (id:210492) triggered by 44.203.251.80 (ec2-44-203-251-80.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 08 23:37:25.631229 2024] [security2:error] [pid 11448:tid 11448] [client 44.203.251.80:48482] [client 44.203.251.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "networkmediasoftware.com"] [uri "/.env"] [unique_id "Zy7nBf2-BJH6vdlJuhoIXgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-09 04:34:19 UTC · (1 year ago)	Nov 9 06:34:18 mail haproxy[59857]: 44.203.251.80:51642 [09/Nov/2024:06:34:18.681] http-in netvision.ee/netvision.ee 0/0/0/0/0 403 273 - - ---- 1/1/0/0/0 0/0 "GET /.env HTTP/1.1" ...	Brute-Force Web App Attack
🇫🇷 ✨	2024-11-09 04:31:02 UTC · (1 year ago)	Domain : gestioncgt.es Rule : env 2024-11-09 04:09:44 152.53.103.155 GET /.env - 443 - 44.203.251.80 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) https://gestioncgt.es/.env www.gestioncgt.es 404 0 0 700 169 885 - -	Hacking SQL Injection
🇫🇷 ✨	2024-11-09 04:11:02 UTC · (1 year ago)	Domain : gestioncgt.es Rule : env 2024-11-09 04:09:43 152.53.103.155 GET /.env - 443 - 44.203.251.80 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) - gestioncgt.es 301 0 0 589 128 817 - -	Hacking SQL Injection
Anonymous	2022-07-12 06:38:00 UTC · (4 years ago)	"Abuse of Functionality"	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 2400:cb00:923:1000:83d6:5307:c803:3403

🇺🇸 45.33.28.190

🇨🇳 14.103.213.90

🇳🇱 2400:cb00:1179:1000:eb2b:5bae:7a4a:544d

🇵🇱 2400:cb00:1056:1000:66e1:c9d9:5ecb:3581

🇦🇹 2400:cb00:992:1000:5c97:e463:fbf8:7dd5

🇵🇱 2400:cb00:923:1000:cb12:443b:dcaa:79c2

🇨🇳 220.178.39.106

🇺🇸 216.25.90.92

🇨🇳 152.136.15.12

🇺🇸 66.132.195.97

🇫🇮 65.108.227.100

🇳🇱 45.148.10.9

🇦🇷 38.210.59.1

🇬🇧 34.142.73.63

🇺🇸 20.102.110.158

🇺🇸 3.140.193.95

🇦🇹 2400:cb00:992:1000:10f1:5fe7:913b:be0c

🇵🇱 2400:cb00:923:1000:b06c:8163:8f04:e74d

🇵🇱 2400:cb00:73:1000:f43c:4ac2:4762:6b74