JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 44.243.66.48

44.243.66.48 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-44-243-66-48.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 44.243.66.48

Whois 44.243.66.48

IP Abuse Reports for 44.243.66.48:

This IP address has been reported a total of 41 times from 34 distinct sources. 44.243.66.48 was first reported on September 16th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-09-17 06:00:05 (8 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇷 ✨	2026-09-17 00:59:15 (13 hours ago)	Domain : ilbacioexpress.uk Rule : hack 2026-09-17 00:57:24 *hidden-privacy* GET /.env.bak - 443 ... show more Domain : ilbacioexpress.uk Rule : hack 2026-09-17 00:57:24 *hidden-privacy* GET /.env.bak - 443 - 44.243.66.48 HTTP/2 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; https://openai.com/bot) - ilbacioexpress.uk 404 0 2 1553 429 137 - - show less	Hacking SQL Injection Brute-Force
🇺🇸 H24	2026-09-17 00:36:32 (13 hours ago)	/data/.env /conf/.env /env/.env /shop/.env /portal/.env /internal/.env	Web App Attack
🇳🇱 Savvii	2026-09-17 00:30:33 (14 hours ago)	20 attempts against mh-misbehave-ban on ethyl	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-09-17 00:07:12 (14 hours ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bazter.pro	2026-09-16 23:28:47 (15 hours ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
Anonymous	2026-09-16 23:24:57 (15 hours ago)	Automatically blocked after 12 security events. Observed sensitive configuration-file probes. Source ... show more Automatically blocked after 12 security events. Observed sensitive configuration-file probes. Source: Cloudflare security controls. show less	Hacking Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-09-16 23:00:12 (15 hours ago)		Web App Attack
🇩🇪 macrob	2026-09-16 22:45:32 (15 hours ago)	2026/09/16 22:45:31 [error] 2961660#2961660: 6108173 access forbidden by rule, client: 44.243.66.48 ... show more 2026/09/16 22:45:31 [error] 2961660#2961660: 6108173 access forbidden by rule, client: 44.243.66.48, server: finami.ph, request: "GET /services/.env HTTP/2.0", host: "finami.ph" 2026/09/16 22:45:31 [error] 2961663#2961663: 6108115 access forbidden by rule, client: 44.243.66.48, server: finami.ph, request: "GET /project/.env HTTP/2.0", host: "finami.ph" 2026/09/16 22:45:31 [error] 2961660#2961660: 6109107 access forbidden by rule, client: 44.243.66.48, server: finami.ph, request: "GET /workspace/.env HTTP/2.0", host: "finami.ph" ... show less	Web App Attack
🇵🇱 tomkolp	2026-09-16 22:17:42 (16 hours ago)	CrowdSec - Scenario: crowdsecurity/http-probing. Duration: 4h.	Port Scan Web App Attack
🇩🇪 FeG Deutschland	2026-09-16 22:01:36 (16 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 247	Exploited Host Web App Attack
🇳🇱 mieg	2026-09-16 21:41:23 (16 hours ago)	Web vulnerability probing	Brute-Force Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-16 21:15:57 (17 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 Séfora Srl	2026-09-16 21:05:40 (17 hours ago)	crowdsecurity/http-probing detected by CrowdSec	Web App Attack
Anonymous	2026-09-16 21:00:04 (17 hours ago)	Bot / scanning and/or hacking attempts: GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/ca.crt ... show more Bot / scanning and/or hacking attempts: GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/ca.crt?ra, GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/, GET /@fs/.env?import&?raw?? HTTP/2.0, GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/token?raw, GET /@fs/.env?url&raw?? HTTP/2.0, GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0, GET /assets../.env HTTP/2.0, GET /@fs/.env?raw&url?? HTTP/2.0, GET /media../.env HTTP/2.0, GET /__vite_rsc_findSourceMapURL?filename=file:///app/.env&envi, GET /static../.env HTTP/2.0, GET //.env HTTP/2.0, GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/cre, GET /@fs/proc/self/cmdline?raw?? HTTP/2.0 show less	Hacking Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 124.88.174.143

🇺🇸 104.23.243.76

🇬🇭 80.87.83.229

🇦🇺 34.151.171.104

🇩🇪 213.209.159.21

🇩🇪 157.230.124.230

🇺🇸 71.6.134.233

🇹🇯 62.89.208.253

🇺🇸 40.119.45.95

🇹🇼 35.201.248.89

🇨🇳 8.138.81.114

🇨🇳 211.149.143.207

🇺🇸 185.180.141.2

🇺🇸 168.91.173.57

🇺🇸 162.216.149.125

🇫🇮 147.185.133.203

🇺🇸 144.172.105.41

🇺🇸 137.184.179.100

🇻🇳 103.154.63.88

🇺🇸 71.6.134.236