JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

44.220.188.70

Recent Activity

Abuse confidence score ?

89% Critical

406 reports

157 reporters · latest 2 days ago

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	scanner-44-220-188-70.reposify.net
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 44.220.188.70

Export CSV

This IP address has been reported a total of 406 times from 157 distinct sources. 44.220.188.70 was first reported on February 24th 2024, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: France with 12 reports; United States of America with 7 reports; Germany with 5 reports. The most common categories in these recent reports were: Port Scan 26 times; Hacking 15 times; Brute-Force 11 times; SSH 8 times; Web App Attack 6 times; Other 7 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Kejult	2026-10-13 19:02:30 (2 days ago)	Honeypot Finding: active TCP application payload captured by Honeytrap; 6 payload-bearing connection ... show more Honeypot Finding: active TCP application payload captured by Honeytrap; 6 payload-bearing connection/event(s), 2779 payload byte(s) total, maximum payload 1560 byte(s). Target port(s): 5357. show less	Port Scan Hacking
🇨🇴 juan_mesa	2026-10-12 23:31:48 (3 days ago)	Unauthorized connection attempts to Winbox TCP/8291 on 1 MikroTik router(s) (blocked by firewall).	Port Scan
🇫🇷 Kejult	2026-10-10 09:06:53 (5 days ago)	Honeypot Finding: active TCP application payload captured by Honeytrap; 6 payload-bearing connection ... show more Honeypot Finding: active TCP application payload captured by Honeytrap; 6 payload-bearing connection/event(s), 2783 payload byte(s) total, maximum payload 1560 byte(s). Target port(s): 51007. show less	Port Scan Hacking
🇺🇸 drewf.ink	2026-10-10 05:03:57 (6 days ago)	[05:03] Port scanning. Port(s) scanned: TCP/50000	Port Scan
🇧🇬 MazenHost	2026-10-10 04:10:49 (6 days ago)	1791605449 - 10/10/2026 06:10:49 Host: 44.220.188.70/44.220.188.70 Port: 143 TCP Blocked ...	Port Scan
🇩🇪 Kejult	2026-10-09 08:29:34 (6 days ago)	Honeypot Finding: repeated TCP service probing on TCP/8888 (service); 6 application-level events acr ... show more Honeypot Finding: repeated TCP service probing on TCP/8888 (service); 6 application-level events across 6 source port(s). Sensor(s): Honeytrap. show less	Port Scan
🇺🇸 donarev419	2026-10-09 04:32:16 (1 week ago)	Connection to port 139 with data transfer. Data preview:	Port Scan Hacking
🇸🇬 Leslie Alexander	2026-10-08 17:30:56 (1 week ago)	2026-10-08T17:30:55.649052+00:00 instance-20260917-1717 sshd-session[165314]: Invalid user from 44. ... show more 2026-10-08T17:30:55.649052+00:00 instance-20260917-1717 sshd-session[165314]: Invalid user from 44.220.188.70 port 40640 ... show less	Brute-Force SSH
🇫🇷 Kejult	2026-10-08 13:26:18 (1 week ago)	Honeypot Finding: active TCP application payload captured by Honeytrap; 6 payload-bearing connection ... show more Honeypot Finding: active TCP application payload captured by Honeytrap; 6 payload-bearing connection/event(s), 2779 payload byte(s) total, maximum payload 1560 byte(s). Target port(s): 2000. show less	Port Scan Hacking
🇩🇪 Kejult	2026-10-08 08:07:47 (1 week ago)	Honeypot Finding: repeated TCP service probing on TCP/4433 (service); 6 application-level events acr ... show more Honeypot Finding: repeated TCP service probing on TCP/4433 (service); 6 application-level events across 6 source port(s). Sensor(s): Honeytrap. show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-10-08 00:16:48 (1 week ago)	Honeypot hit: HTTP/1.1 request on 2082 GET / User-Agent: Mozilla/5.0 (Windows NT 6.2;en-US) AppleWe ... show more Honeypot hit: HTTP/1.1 request on 2082 GET / User-Agent: Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/50.0.3080.72 Safari/537.32 Accept: / Accept-Encoding: gzip, deflate; 2082 [7] TCP show less	Web App Attack
🇫🇷 Kejult	2026-10-07 06:28:55 (1 week ago)	Honeypot Finding: active TCP application payload captured by Honeytrap; 6 payload-bearing connection ... show more Honeypot Finding: active TCP application payload captured by Honeytrap; 6 payload-bearing connection/event(s), 2777 payload byte(s) total, maximum payload 1560 byte(s). Target port(s): 7001. show less	Port Scan Hacking
🇮🇳 659761066	2026-10-07 06:00:12 (1 week ago)	2026-10-07T11:30:10.714608localhost sshd[3990459]: Invalid user from 44.220.188.70 port 52402 ...	Port Scan Hacking Brute-Force Exploited Host Web App Attack
Anonymous	2026-10-07 04:55:38 (1 week ago)	postfix	Email Spam Web App Attack
Anonymous	2026-10-05 05:20:18 (1 week ago)	fail2ban: brute-force/credential spraying against mail (IMAP/POP/webmail) — rmnet.it	Brute-Force

Showing 1 to 15 of 406 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 210.86.226.51

🇳🇱 185.93.89.111

🇩🇪 157.230.107.38

🇺🇸 47.77.213.24

🇷🇴 2.57.122.208

🇯🇵 216.226.78.10

🇦🇷 190.2.126.177

🇨🇳 183.94.33.245

🇨🇳 182.138.158.129

🇦🇷 181.92.153.152

🇭🇰 152.32.169.155

🇸🇬 145.223.146.146

🇺🇸 136.144.35.188

🇧🇷 131.161.249.165

🇰🇷 118.37.214.187

🇰🇷 115.160.76.23

🇹🇼 35.221.138.107

🇬🇧 5.226.140.13

🇦🇷 181.104.43.225

🇧🇩 103.112.54.86