JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 44.249.193.125

44.249.193.125 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 79%: ?

79%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-44-249-193-125.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 44.249.193.125

Whois 44.249.193.125

IP Abuse Reports for 44.249.193.125:

This IP address has been reported a total of 17 times from 14 distinct sources. 44.249.193.125 was first reported on May 5th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 1cyb3rpunk	2026-08-25 21:37:34 (6 hours ago)	Coordinated campaign CMP-1786835848-001: 175 IPs sharing an attack fingerprint (acme_challenge_probe ... show more Coordinated campaign CMP-1786835848-001: 175 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, backup_file_probe, cms_version_probe, command_injection_attempt, config_leak_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 1cyb3rpunk	2026-08-25 20:27:01 (7 hours ago)	Coordinated campaign CMP-1786835848-001: 171 IPs sharing an attack fingerprint (acme_challenge_probe ... show more Coordinated campaign CMP-1786835848-001: 171 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, backup_file_probe, cms_version_probe, command_injection_attempt, config_leak_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 1cyb3rpunk	2026-08-25 19:39:23 (8 hours ago)	Coordinated campaign CMP-1786835848-001: 170 IPs sharing an attack fingerprint (acme_challenge_probe ... show more Coordinated campaign CMP-1786835848-001: 170 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, backup_file_probe, cms_version_probe, command_injection_attempt, config_leak_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 1cyb3rpunk	2026-08-25 16:29:58 (11 hours ago)	Coordinated campaign CMP-1786835848-001: 161 IPs sharing an attack fingerprint (acme_challenge_probe ... show more Coordinated campaign CMP-1786835848-001: 161 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, backup_file_probe, cms_version_probe, command_injection_attempt, config_leak_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 Admins@FBN	2026-08-23 16:22:54 (2 days ago)	FW-PortScan: Traffic Blocked srcport=38242 dstport=2443	Port Scan
Anonymous	2026-08-23 15:52:42 (2 days ago)	Port Scan detected from 44.249.193.125 (US/United States/ec2-44-249-193-125.us-west-2.compute.amaz ... show more Port Scan detected from 44.249.193.125 (US/United States/ec2-44-249-193-125.us-west-2.compute.amazonaws.com). 5 hits in the last 20 seconds show less	Brute-Force Port Scan
🇫🇷 dusfor72	2026-08-23 15:31:22 (2 days ago)	aggressive portscan ...	Port Scan
🇸🇪 NordhTech	2026-08-23 15:30:15 (2 days ago)	More than 3 malicious connection attempts, trying port(s) 1500/tcp, then blocked from services ...	Port Scan Hacking
🇺🇸 ISPLtd	2026-08-23 13:50:52 (2 days ago)	Aug 23 07:50:50 44.249.193.125 TCP SPT=45122 DPT=2222 SYN Aug 23 07:50:51 44.249.193.125 TCP SPT=451 ... show more Aug 23 07:50:50 44.249.193.125 TCP SPT=45122 DPT=2222 SYN Aug 23 07:50:51 44.249.193.125 TCP SPT=45122 DPT=2222 SYN ... show less	Port Scan SSH
🇫🇷 sthoyer.de	2026-08-23 13:48:14 (2 days ago)	Aug 23 15:47:57 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Aug 23 15:47:57 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=44.249.193.125 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=111 ID=58276 DF PROTO=TCP SPT=35572 DPT=2222 WINDOW=62727 RES=0x00 SYN URGP=0 Aug 23 15:47:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=44.249.193.125 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=111 ID=58277 DF PROTO=TCP SPT=35572 DPT=2222 WINDOW=62727 RES=0x00 SYN URGP=0 Aug 23 15:48:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=44.249.193.125 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=111 ID=58278 DF PROTO=TCP SPT=35572 DPT=2222 WINDOW=62727 RES=0x00 SYN URGP=0 Aug 23 15:48:04 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=44.249.193.125 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=111 ID=58279 DF PROTO=TCP SPT=35572 DPT=222 ... show less	Port Scan
🇬🇧 pinguin	2026-08-23 13:42:59 (2 days ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /enhancecp UA: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 iNetWorker	2026-08-23 13:40:44 (2 days ago)	firewall-block, port(s): 1500/tcp	Port Scan
🇺🇸 xmission.com	2026-08-23 12:49:49 (2 days ago)	Blocked by UFW (TCP on 10000) Source port: 45112 TTL: 123 Packet length: 60 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 10000) Source port: 45112 TTL: 123 Packet length: 60 TOS: 0x00 This report (for 44.249.193.125) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 cloudmax	2026-08-23 10:02:49 (2 days ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇩🇪 bescared	2026-08-23 09:48:33 (2 days ago)	F2B - Malicious activity detected. Excessive port scans. -151302cd-	Port Scan

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.107

🇸🇬 209.42.27.172

🇻🇳 180.93.250.126

🇩🇪 139.59.208.49

🇭🇰 46.247.61.190

🇺🇸 189.104.191.6

🇲🇽 149.232.139.79

🇺🇸 51.81.111.137

🇧🇷 45.95.26.67

🇮🇳 2404:6800:4013:813::127

🇩🇪 167.94.146.38

🇫🇮 147.185.133.212

🇺🇸 147.185.132.43

🇹🇼 111.70.3.122

🇸🇬 85.203.23.180

🇸🇬 85.203.21.132

🇭🇷 82.132.37.204

🇸🇬 43.160.246.215

🇨🇳 218.240.128.67

🇺🇿 213.230.111.14