JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 44.211.134.157

44.211.134.157 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-44-211-134-157.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 44.211.134.157

Whois 44.211.134.157

IP Abuse Reports for 44.211.134.157:

This IP address has been reported a total of 27 times from 24 distinct sources. 44.211.134.157 was first reported on August 23rd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-24 22:01:05 (2 days ago)	Auto-ban: >3000 req/min op 2026-08-24	Web App Attack SSH Hacking
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-08-24 09:03:07 (2 days ago)	44.211.134.157 - - [24/Aug/2026:03:03:07 -0600] "GET /wp-login.php HTTP/1.1" 301 3816 "-" "Mozilla/5 ... show more 44.211.134.157 - - [24/Aug/2026:03:03:07 -0600] "GET /wp-login.php HTTP/1.1" 301 3816 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇮 as211431.net	2026-08-24 08:55:41 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 MyGlobalFlowers	2026-08-24 08:49:41 (2 days ago)	Multiple WAF Violations	Web App Attack
🇵🇱 Budyn	2026-08-24 06:16:45 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jenkins.definitelynotahoneypot.top \| URI: /wp-json/batch/v1 \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 mccsoft.io	2026-08-24 04:27:36 (2 days ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇦🇺 Klaverstyn	2026-08-24 03:22:43 (2 days ago)	Excessive HTTP request rate	Web App Attack
🇵🇱 Budyn	2026-08-24 02:01:08 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: gitlab.teddypot.site \| URI: /wp-json/batch/v1 \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-08-24 00:41:03 (3 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /wp-json (Match: /wp-json) show less	Hacking Exploited Host Web App Attack
Anonymous	2026-08-24 00:33:03 (3 days ago)	Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/1.1, GET / HTTP/1.1, GET /wp-json/ HT ... show more Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/1.1, GET / HTTP/1.1, GET /wp-json/ HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 raph	2026-08-24 00:28:12 (3 days ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
Anonymous	2026-08-24 00:14:12 (3 days ago)	Web application attack detected.	Web App Attack
🇩🇪 iNetWorker	2026-08-23 19:47:27 (3 days ago)	trolling for resource vulnerabilities	Web App Attack
🇫🇷 LRob	2026-08-23 19:18:30 (3 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-json/batch/v1 \| 2026-08-23 19:18 UTC show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-08-23 19:15:45 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 197.52.25.61

🇲🇽 177.238.210.65

🇵🇭 49.149.142.64

🇺🇸 20.42.119.196

🇮🇶 5.175.146.161

🇫🇷 2a01:cb1d:8c24:b300:46a:3312:fc6f:9cb4

🇻🇪 201.242.144.92

🇿🇦 197.184.169.159

🇧🇷 138.94.161.192

🇻🇳 116.99.252.203

🇺🇸 104.152.52.139

🇬🇧 90.201.48.165

🇫🇷 83.195.23.60

🇬🇧 82.32.43.4

🇫🇷 77.131.124.9

🇺🇸 72.244.47.243

🇱🇹 62.60.130.242

🇧🇷 45.236.139.91

🇳🇱 45.148.10.151

🇺🇸 45.78.94.104