JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

44.204.29.236

Neutral Activity

Abuse confidence score ?

0% Low Risk

49 reports

37 reporters · latest 6 months ago

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-44-204-29-236.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

44.204.29.236 has been reported 49 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 44.204.29.236

This IP address has been reported a total of 49 times from 37 distinct sources. 44.204.29.236 was first reported on June 11th 2023, and the most recent report was 6 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-03-11 22:59:03 (6 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-03-10. show less	Web App Attack SSH Hacking
🇳🇱 jjnxpct	2026-03-11 04:49:14 (6 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/config (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/config] show less	Web App Attack Hacking
🇫🇷 service Informatique	2026-03-11 04:00:37 (6 months ago)	/.git	Web App Attack
🇳🇱 homeshowdomain.nl	2026-03-10 23:01:05 (6 months ago)	Auto-ban: >3000 req/min op 2026-03-10	Web App Attack SSH Hacking
🇺🇸 Charlesiv	2026-03-10 10:00:51 (6 months ago)	Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE ASN: 14618 (AMAZON-AES ... show more Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE ASN: 14618 (AMAZON-AES - Amazon.com, Inc.) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config Timestamp: 2026-03-10T04:40:13Z Ray ID: 9d9fa3ddee89d6fc UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-03-10 08:02:30 (6 months ago)	Portscan: TCP/80 (4x), TCP/443 (2x)	Port Scan
🇺🇸 TPI-Abuse	2026-03-10 05:01:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 44.204.29.236 (ec2-44-204-29-236.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 44.204.29.236 (ec2-44-204-29-236.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 01:01:26.992715 2026] [security2:error] [pid 32097:tid 32097] [client 44.204.29.236:55160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.seacorre.com"] [uri "/.git/config"] [unique_id "aa-lphiXvOwTL33zn4iWLgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-10 04:31:44 (6 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇳🇱 i-turnradio.nl	2026-03-10 04:03:38 (6 months ago)	2026-03-10 05:03:38 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇺🇸 TPI-Abuse	2026-03-10 03:58:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 44.204.29.236 (ec2-44-204-29-236.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 44.204.29.236 (ec2-44-204-29-236.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 23:58:09.271638 2026] [security2:error] [pid 32591:tid 32591] [client 44.204.29.236:42706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whitmarshinc.com"] [uri "/.git/config"] [unique_id "aa-W0cy4HJtcJ5WmjDUKfAAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRob	2026-03-10 03:30:13 (6 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇫🇮 as211431.net	2026-03-10 03:26:15 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.20 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 Axel	2026-03-10 03:07:35 (6 months ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇫🇷 masterguru	2026-03-10 02:57:20 (6 months ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇩🇪 todix	2026-03-10 02:48:21 (6 months ago)	Web App Attack Exploid from 44.204.29.236	Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 165.154.45.254

🇮🇳 152.57.232.65

🇨🇦 146.190.240.210

🇺🇸 91.230.168.131

🇳🇱 34.7.200.109

🇨🇳 218.93.165.108

🇰🇷 211.62.96.42

🇧🇷 205.210.31.136

🇷🇴 193.32.162.84

🇭🇰 165.154.156.67

🇮🇳 103.87.106.26

🇻🇳 103.48.192.222

🇸🇬 69.48.229.164

🇵🇪 38.224.49.7

🇬🇧 35.203.211.194

🇩🇪 31.56.24.50

🇸🇦 2001:16a2:6991:6f00:77a5:dff:35ed:69ed

🇧🇷 177.128.6.101

🇳🇱 173.239.217.184

🇺🇸 136.67.85.135