JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 44.250.71.57

44.250.71.57 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 36%: ?

36%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-44-250-71-57.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 44.250.71.57

Whois 44.250.71.57

IP Abuse Reports for 44.250.71.57:

This IP address has been reported a total of 10 times from 5 distinct sources. 44.250.71.57 was first reported on July 24th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇿 Tripwire	2026-07-26 04:23:02 (17 hours ago)	Scanning for exploits - /.env	Web App Attack
🇬🇧 gws-hostmaster	2026-07-25 00:25:58 (1 day ago)	ModSecurity OWASP CRS (Anomaly Score: 50): JavaScript Prototype Pollution;JSON-Based SQL Injection;N ... show more ModSecurity OWASP CRS (Anomaly Score: 50): JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;PHP Injection Attack: Variable Access Found;Remote Command Execution: Direct Unix Command Execution;Remote Command Execution: Unix Shell Expression Found;Restricted File Access Attempt;SQL Injection Attack: SQL function name detected;URL file extension is restricted by policy; show less	Web App Attack
🇳🇱 Site.eu	2026-07-24 23:26:23 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-24 14:16:31 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 44.250.71.57 (ec2-44-250-71-57.us-west-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 44.250.71.57 (ec2-44-250-71-57.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 10:16:25.739932 2026] [security2:error] [pid 1118927:tid 1118946] [client 44.250.71.57:51828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cynosurelandscapers.com"] [uri "/.git/config"] [unique_id "amNzuVvDZpbNNbnMcxsclgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 13:26:05 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 44.250.71.57 (ec2-44-250-71-57.us-west-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 44.250.71.57 (ec2-44-250-71-57.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 09:25:58.951415 2026] [security2:error] [pid 3806834:tid 3806834] [client 44.250.71.57:52992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cygnetsilks.com"] [uri "/.git/config"] [unique_id "amNn5n-YvDcFV-v9kKwVOQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 13:03:59 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 44.250.71.57 (ec2-44-250-71-57.us-west-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 44.250.71.57 (ec2-44-250-71-57.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 09:03:52.577425 2026] [security2:error] [pid 222109:tid 222109] [client 44.250.71.57:49256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cydab.com"] [uri "/.git/config"] [unique_id "amNiuJFbkvMMSePljap5tQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-07-24 11:37:23 (2 days ago)	[FriJul2413:37:17.0239882026][security2:error][pid3192157:tid3192342][client44.250.71.57:0]ModSecuri ... show more [FriJul2413:37:17.0239882026][security2:error][pid3192157:tid3192342][client44.250.71.57:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\271$\)\\|base64-w0\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"cybertelgroup.com\"][uri\"/\"][unique_id\"amNObbOAqfiL7D7-pUHSuQAAAQU\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 11:26:24 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 44.250.71.57 (ec2-44-250-71-57.us-west-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 44.250.71.57 (ec2-44-250-71-57.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 07:26:20.410844 2026] [security2:error] [pid 1428884:tid 1428884] [client 44.250.71.57:38640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cybersoftware.org"] [uri "/.git/config"] [unique_id "amNL3Ff3nspdsttQ_YOTxgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 07:21:31 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 44.250.71.57 (ec2-44-250-71-57.us-west-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 44.250.71.57 (ec2-44-250-71-57.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:21:25.817836 2026] [security2:error] [pid 2236329:tid 2236329] [client 44.250.71.57:52670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cwvr.org"] [uri "/.git/config"] [unique_id "amMSdSZzb5wX-_anOQBvPQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 03:03:34 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 44.250.71.57 (ec2-44-250-71-57.us-west-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 44.250.71.57 (ec2-44-250-71-57.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 23:03:28.701031 2026] [security2:error] [pid 3646503:tid 3646503] [client 44.250.71.57:56042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cuul.co"] [uri "/.git/config"] [unique_id "amLWAMVTALV1E9W_XKaIJgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 173.194.170.84

🇺🇸 144.225.6.161

🇺🇸 35.227.153.166

🇶🇦 2600:1900:4260:40e::20

🇺🇸 216.25.89.101

🇺🇸 198.46.152.106

🇺🇸 170.106.161.78

🇺🇸 167.17.73.68

🇺🇦 46.133.171.6

🇳🇱 45.155.90.234

🇳🇱 45.148.10.152

🇲🇲 37.111.53.110

🇺🇸 205.210.31.64

🇷🇴 193.32.162.34

🇵🇰 101.50.83.146

🇭🇺 89.134.23.190

🇧🇬 78.128.113.46

🇺🇸 74.125.181.156

🇳🇱 45.198.224.18

🇺🇸 185.191.171.8