44.211.172.197
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon Data Services Northern Virginia
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14618
- Hostname(s)
- ec2-44-211-172-197.compute-1.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
62 from
56 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 carpes0708 |
|
Port Scan Web App Attack | |
| 🇩🇪 marcel-knorr.de |
[MK-Root1] Blocked by UFW
|
Brute-Force Port Scan | |
| 🇷🇺 dnsbd.tech |
nftables: Port scan (TCP:7443) [srv1]
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (243 bytes of payload); 10443 [1] TCP
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 13 hits on ports [80] (automated)
|
Port Scan Web App Attack | |
| 🇫🇷 sbocquet |
Port 443 scanned from 44.211.172.197:18976.
|
Port Scan | |
| 🇧🇷 mbaute |
Incoming tcp sessions established on 3 different honey sites in the last 24h
|
Port Scan | |
| 🇩🇪 iNetWorker |
firewall-block, port(s): 7547/tcp
|
Port Scan | |
| 🇧🇷 chronos |
HTTP: Connection attempt to the web service, commonly probed for vulnerable web applications. | Port: 8000 | Proto: TCP | rDNS: ec2-44-211-172-197.compute-1.amazonaws.com | AS: AS14618 Amazon.com, Inc. | Location: United States, Ashburn (~20km)
|
Web App Attack Port Scan | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,known_proto_on_non_std_port,ndpi_tls_certificate_about_to_expire
|
Hacking | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇸🇪 NordhTech |
Multiple malicious connection attempts detected, trying port(s) 3000/tcp, then blocked by firewall.
|
Port Scan Hacking | |
| 🇪🇪 Selckie |
fail2ban: NGINX unusual impact
|
Web App Attack | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/8000 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
|
Port Scan | |
| 🇳🇱 nandadytm |
[2026-11-09 16:19:20] Banned 44.211.172.197 after 3 attempts: Portscan probe on TCP port 9200
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown