JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 44.252.33.138

44.252.33.138 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 49%: ?

49%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-44-252-33-138.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 44.252.33.138

Whois 44.252.33.138

IP Abuse Reports for 44.252.33.138:

This IP address has been reported a total of 10 times from 7 distinct sources. 44.252.33.138 was first reported on July 24th 2026, and the most recent report was 37 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 zumbo.net	2026-07-25 18:19:41 (37 minutes ago)	[Sat Jul 25 21:19:39.356628 2026] [proxy_fcgi:error] [pid 1196921:tid 1196938] [client 44.252.33.138 ... show more [Sat Jul 25 21:19:39.356628 2026] [proxy_fcgi:error] [pid 1196921:tid 1196938] [client 44.252.33.138:0] AH01071: Got error 'Primary script unknown' [Sat Jul 25 21:19:39.538470 2026] [proxy_fcgi:error] [pid 1196922:tid 1196940] [client 44.252.33.138:0] AH01071: Got error 'Primary script unknown' [Sat Jul 25 21:19:39.720225 2026] [proxy_fcgi:error] [pid 1196921:tid 1196942] [client 44.252.33.138:0] AH01071: Got error 'Primary script unknown' [Sat Jul 25 21:19:39.901039 2026] [proxy_fcgi:error] [pid 1196921:tid 1196957] [client 44.252.33.138:0] AH01071: Got error 'Primary script unknown' [Sat Jul 25 21:19:40.083033 2026] [proxy_fcgi:error] [pid 1196921:tid 1196943] [client 44.252.33.138:0] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-07-25 01:19:05 (17 hours ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 homeshowdomain.nl	2026-07-24 22:04:19 (20 hours ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
🇳🇱 WeCloudit-Anti-Abuse	2026-07-24 21:23:16 (21 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-24 17:51:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 44.252.33.138 (ec2-44-252-33-138.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 44.252.33.138 (ec2-44-252-33-138.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 13:51:41.776030 2026] [security2:error] [pid 11318:tid 11318] [client 44.252.33.138:40162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pumps.aguasolar.com"] [uri "/.git/config"] [unique_id "amOmLbc4CAR0IC3LSGoDnAAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-07-24 15:30:02 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 13:01:41 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 44.252.33.138 (ec2-44-252-33-138.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 44.252.33.138 (ec2-44-252-33-138.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 09:01:37.539400 2026] [security2:error] [pid 16114:tid 16114] [client 44.252.33.138:54808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.puckerbikinis.puckerbikini.com"] [uri "/.git/config"] [unique_id "amNiMZ4n3A52poxX4HreDAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 11:10:32 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 44.252.33.138 (ec2-44-252-33-138.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 44.252.33.138 (ec2-44-252-33-138.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 07:10:27.622884 2026] [security2:error] [pid 9701:tid 9701] [client 44.252.33.138:44134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.publication.flyingdodostudio.com"] [uri "/.git/config"] [unique_id "amNII_o6j9SQajIxpKU3HQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 09:18:22 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 44.252.33.138 (ec2-44-252-33-138.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 44.252.33.138 (ec2-44-252-33-138.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 05:18:18.071723 2026] [security2:error] [pid 4056123:tid 4056123] [client 44.252.33.138:49606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ptr.dutchlake.com"] [uri "/.git/config"] [unique_id "amMt2vih4xwwtLjWfvAUCgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-24 03:41:03 (1 day ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 130.12.182.227

🇺🇸 91.230.168.121

🇮🇳 203.192.211.180

🇯🇵 160.251.215.51

🇮🇳 122.165.126.207

🇭🇰 101.32.208.152

🇺🇸 74.207.234.148

🇺🇸 66.132.224.17

🇨🇳 59.46.182.10

🇳🇱 45.148.10.147

🇳🇱 45.148.10.141

🇹🇿 41.59.13.165

🇧🇪 35.240.42.184

🇬🇧 35.203.210.58

🇺🇸 20.14.89.155

🇰🇷 220.77.214.59

🇺🇸 66.132.186.250

🇩🇪 2a01:488:66:1000:53a9:28d8:0:1

🇨🇳 219.153.103.109

🇪🇪 194.127.167.77