JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

44.249.102.222

Recent Activity

Abuse Confidence Score

90% Critical

23 reports

17 reporters · latest 4 days ago

ISP: Amazon.com, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16509
Hostname(s): ec2-44-249-102-222.us-west-2.compute.amazonaws.com
Domain Name: amazon.com
Country: 🇺🇸 United States of America
City: Boardman, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

23 from 17 distinct reporters

First reported

October 21st 2026

Most recent report

4 days ago

Last 60 days

Top reporter locations 🇫🇷 France 6 🇩🇪 Germany 5 🇺🇸 United States of America 3

Most common categories Port Scan 17 Hacking 7 Email Spam 2 Web App Attack 2 Bad Web Bot 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dusfor72	2026-10-24 02:03:41 (4 days ago)	aggressive portscan ...	Port Scan
🇺🇸 xmission.com	2026-10-23 21:23:35 (4 days ago)	Blocked by UFW (TCP on 8083) Source port: 49066 TTL: 123 Packet length: 60 TOS: 0x00 This report (for 44.249.102.222) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇭🇰 www.winos.me	2026-10-23 20:13:59 (4 days ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking
🇮🇹 VHosting	2026-10-23 19:55:05 (4 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 Jochen Pretli	2026-10-23 17:14:58 (5 days ago)	connection to honeypot	Email Spam Port Scan
🇫🇷 GabrielJST	2026-10-23 14:19:30 (5 days ago)	(PERMBLOCK) 44.249.102.222 (US/United States/ec2-44-249-102-222.us-west-2.compute.amazonaws.com) has had more than 1 temp blocks	Hacking
🇮🇹 Fusty	2026-10-23 12:08:55 (5 days ago)	Unauthorized attempt on (TCP on port 1500). Source port: 34430 TTL: 118 Packet length: 60 Timestamp: 2026-10-23 14:08:55	Port Scan
🇬🇧 ByteGuard Security Systems	2026-10-23 10:21:12 (5 days ago)	Automated scanner matched our decoy-secret-scan filter (2 request(s) starting 23/Oct/2026:13:21:12 +0300 MSK, UA: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)). Sample paths: GET /enhancecp, GET /robots.txt. All requests ... show more Automated scanner matched our decoy-secret-scan filter (2 request(s) starting 23/Oct/2026:13:21:12 +0300 MSK, UA: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)). Sample paths: GET /enhancecp, GET /robots.txt. All requests returned 404/405 on a decoy host with no such resources. show less	Bad Web Bot
🇺🇸 xmission.com	2026-10-23 08:17:12 (5 days ago)	Blocked by UFW (TCP on 8083) Source port: 37876 TTL: 123 Packet length: 60 TOS: 0x00 This report (for 44.249.102.222) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇬🇧 openstrike.co.uk	2026-10-23 07:56:44 (5 days ago)	15 packets to port 2083	Port Scan
🇩🇪 rh24	2026-10-23 07:21:07 (5 days ago)	(badbots) Bad bot user-agent [redacted] from 44.249.102.222 (US/United States/ec2-44-249-102-222.us-west-2.compute.amazonaws.com)	Hacking
🇫🇷 sthoyer.de	2026-10-23 06:16:06 (5 days ago)	Oct 23 08:16:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=44.249.102.222 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=65091 DF PROTO=TCP SPT=48824 DPT=2005 WINDOW=62727 RES=0x00 SYN ... show more Oct 23 08:16:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=44.249.102.222 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=65091 DF PROTO=TCP SPT=48824 DPT=2005 WINDOW=62727 RES=0x00 SYN URGP=0 Oct 23 08:16:01 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=44.249.102.222 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=65092 DF PROTO=TCP SPT=48824 DPT=2005 WINDOW=62727 RES=0x00 SYN URGP=0 Oct 23 08:16:01 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=44.249.102.222 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=65092 DF PROTO=TCP SPT=48824 DPT=2005 WINDOW=62727 RES=0x00 SYN URGP=0 Oct 23 08:16:03 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=44.249.102.222 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=65093 DF PROTO=TCP SPT=48824 DPT=200 ... show less	Port Scan
Anonymous	2026-10-23 05:47:40 (5 days ago)	apache vulnerability scan	Web App Attack
🇷🇴 DamonOne	2026-10-23 00:50:57 (5 days ago)	Blocked by OPNsense; 3 hits, proto=tcp, ports=2443	Port Scan Hacking
🇩🇪 _ArminS_	2026-10-22 19:05:23 (5 days ago)	SP-Scan 60730:1500 detected 2026.10.22 21:05:23 blocked until 2026.12.11 13:08:10	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 109.160.32.161

🇷🇴 2.57.122.209

🇱🇰 220.247.224.226

🇯🇵 220.57.67.116

🇬🇧 193.163.125.125

🇰🇷 183.109.124.136

🇳🇱 138.226.239.11

🇳🇱 77.239.124.73

🇺🇦 46.201.71.121

🇳🇱 45.148.10.152

🇺🇸 34.42.81.165

🇨🇦 24.71.240.41

🇮🇹 213.45.230.2

🇩🇪 109.160.32.147

🇬🇧 87.236.176.185

🇧🇷 164.163.204.104

🇺🇸 138.197.221.54

🇰🇷 119.192.128.163

🇩🇪 109.160.32.111

🇨🇳 58.240.123.98