JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 44.222.197.165

44.222.197.165 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 61%: ?

61%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-44-222-197-165.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 44.222.197.165

Whois 44.222.197.165

IP Abuse Reports for 44.222.197.165:

This IP address has been reported a total of 14 times from 12 distinct sources. 44.222.197.165 was first reported on January 2nd 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-18 06:35:43 (7 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇨🇭 🇨🇭 Hosting	2026-07-18 05:10:22 (8 hours ago)	Automated WAF report: 200-300 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇨🇭 backslash	2026-07-18 04:51:00 (9 hours ago)	block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0	SQL Injection
🇺🇸 Matthew Ping	2026-07-18 02:30:01 (11 hours ago)	ModSecurity rule 949110 triggered on wp3. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇳🇱 Mangelot Hosting	2026-07-18 00:39:28 (13 hours ago)	(modsecurity) srv102 ModSecurity 44.222.197.165 (US/United States/ec2-44-222-197-165.compute-1.amazo ... show more (modsecurity) srv102 ModSecurity 44.222.197.165 (US/United States/ec2-44-222-197-165.compute-1.amazonaws.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 06:56:41 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 44.222.197.165 (ec2-44-222-197-165.compute-1.am ... show more (mod_security) mod_security (id:949110) triggered by 44.222.197.165 (ec2-44-222-197-165.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 02:56:37.390961 2026] [security2:error] [pid 317655:tid 317655] [client 44.222.197.165:54108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.letahitibookings.hamiltonbookings.com"] [uri "/.git/config"] [unique_id "alnSJapigAmdlhfmMQ6KaAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-17 04:01:18 (1 day ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-07-16 22:41:07 (1 day ago)	Honeypot triggered: attacker probed /.git/config (3 times)	Web App Attack Hacking
🇪🇸 pipeline.es	2026-07-16 14:02:47 (2 days ago)	Web scanning / probing for vulnerable paths \| URL: /en/.env \| Evidence: onlinetours.it 44.222.197.16 ... show more Web scanning / probing for vulnerable paths \| URL: /en/.env \| Evidence: onlinetours.it 44.222.197.165 - - [16/Jul/2026:16:00:54 +0200] \"GET /en/.env HTTP/1.1\" 404 37560 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=US \| ASN: AMAZON-AES \| Country: US show less	Port Scan Web App Attack
🇳🇱 Site.eu	2026-07-16 13:47:31 (2 days ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-16 12:42:50 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 44.222.197.165 (ec2-44-222-197-165.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 44.222.197.165 (ec2-44-222-197-165.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 08:42:42.715195 2026] [security2:error] [pid 4729:tid 4914] [client 44.222.197.165:38190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.onlinelawschool.eu.aafm.us"] [uri "/.git/config"] [unique_id "aljRwtK_WXXXYPoteb1H1QAAApg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-09 21:59:45 (3 months ago)	Auto-ban: 336 malicious requests on 2026-04-08 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 336 malicious requests on 2026-04-08 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-04-08 22:00:14 (3 months ago)	Auto-ban: >3000 req/min op 2026-04-08	Web App Attack SSH Hacking
🇩🇪 Petros Stefanakis	2026-01-02 23:22:04 (6 months ago)	(bind) bind triggered by 44.222.197.165 (US/United States/ec2-44-222-197-165.compute-1.amazonaws.com ... show more (bind) bind triggered by 44.222.197.165 (US/United States/ec2-44-222-197-165.compute-1.amazonaws.com) show less	Hacking

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇴 193.163.125.243

🇬🇧 193.163.125.36

🇺🇸 185.243.5.110

🇨🇳 183.155.245.21

🇨🇳 183.23.53.214

🇺🇸 173.239.240.105

🇺🇸 145.132.100.65

🇺🇸 104.28.205.85

🇷🇴 80.94.92.9

🇷🇺 77.37.174.154

🇺🇸 66.132.186.224

🇨🇳 61.164.49.202

🇺🇸 45.50.117.203

🇹🇼 35.229.149.176

🇺🇸 2607:f8b0:400c:c05::121

🇳🇱 195.178.110.26

🇧🇷 186.200.104.66

🇩🇪 185.220.101.41

🇩🇪 178.16.52.62

🇺🇸 174.166.153.20