JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 44.252.97.33

44.252.97.33 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 73%: ?

73%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-44-252-97-33.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 44.252.97.33

Whois 44.252.97.33

IP Abuse Reports for 44.252.97.33:

This IP address has been reported a total of 21 times from 14 distinct sources. 44.252.97.33 was first reported on July 24th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Klaverstyn	2026-07-28 00:28:07 (1 day ago)	Persistent attacker - banned repeatedly for multiple attack types within 24h	Hacking
🇮🇹 zenmorro	2026-07-27 07:15:00 (1 day ago)	Honeypot hit (homeassistant:8123) — scanner-path: /.git/config. Automated report from honeypot infra ... show more Honeypot hit (homeassistant:8123) — scanner-path: /.git/config. Automated report from honeypot infrastructure show less	Port Scan Web App Attack
🇧🇪 webbie	2026-07-27 07:04:11 (1 day ago)	44.252.97.33 - - [27/Jul/2026:09:04:08 +0200] "GET /.git/config HTTP/1.1" 404 458 "-" "Mozilla/5.0 ( ... show more 44.252.97.33 - - [27/Jul/2026:09:04:08 +0200] "GET /.git/config HTTP/1.1" 404 458 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 44.252.97.33 - - [27/Jul/2026:09:04:09 +0200] "GET /.env HTTP/1.1" 404 458 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 44.252.97.33 - - [27/Jul/2026:09:04:09 +0200] "GET /.env.local HTTP/1.1" 404 458 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 44.252.97.33 - - [27/Jul/2026:09:04:09 +0200] "GET /.env.production HTTP/1.1" 404 458 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 44.252.97.33 - - [27/Jul/2026:09:04:09 +0200] "GET /.env.staging HTTP/1.1" 404 458 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrom ... show less	Brute-Force Web App Attack
🇩🇪 itsolon	2026-07-27 06:25:10 (1 day ago)	[27/Jul/2026:08:25:08 +0200] 178513350816.312804 44.252.97.33 40900 217.154.7.177 443 [27/Jul/2026:0 ... show more [27/Jul/2026:08:25:08 +0200] 178513350816.312804 44.252.97.33 40900 217.154.7.177 443 [27/Jul/2026:08:25:08 +0200] 178513350888.775730 44.252.97.33 40900 217.154.7.177 443 [27/Jul/2026:08:25:08 +0200] 178513350832.157884 44.252.97.33 40900 217.154.7.177 443 [27/Jul/2026:08:25:09 +0200] 178513350970.922698 44.252.97.33 40900 217.154.7.177 443 [27/Jul/2026:08:25:09 +0200] 178513350971.857232 44.252.97.33 40900 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇩🇪 mravb	2026-07-27 05:20:48 (1 day ago)	44.252.97.33 - - [27/Jul/2026:08:20:48 +0300] "GET /.git/config HTTP/1.1" 404 150 "-" "Mozilla/5.0 ( ... show more 44.252.97.33 - - [27/Jul/2026:08:20:48 +0300] "GET /.git/config HTTP/1.1" 404 150 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack Hacking
🇦🇺 Klaverstyn	2026-07-27 04:57:36 (2 days ago)	Repeated 403 Forbidden responses	Web App Attack
🇩🇪 itsolon	2026-07-27 04:28:56 (2 days ago)	[27/Jul/2026:06:28:55 +0200] 17851265350.278922 44.252.97.33 36728 217.154.7.177 443 [27/Jul/2026:06 ... show more [27/Jul/2026:06:28:55 +0200] 17851265350.278922 44.252.97.33 36728 217.154.7.177 443 [27/Jul/2026:06:28:56 +0200] 178512653641.105888 44.252.97.33 36728 217.154.7.177 443 [27/Jul/2026:06:28:56 +0200] 178512653660.790428 44.252.97.33 36728 217.154.7.177 443 [27/Jul/2026:06:28:56 +0200] 178512653623.445240 44.252.97.33 36728 217.154.7.177 443 [27/Jul/2026:06:28:56 +0200] 17851265362.095882 44.252.97.33 36728 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇩🇪 pscriptos	2026-07-26 06:56:45 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇦 URAN Publishing Service	2026-07-26 06:29:55 (2 days ago)	44.252.97.33 - - [26/Jul/2026:09:29:54 +0300] "GET /.git/config HTTP/1.1" 404 558 "-" "Mozilla/5.0 ( ... show more 44.252.97.33 - - [26/Jul/2026:09:29:54 +0300] "GET /.git/config HTTP/1.1" 404 558 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 44.252.97.33 - - [26/Jul/2026:09:29:54 +0300] "GET /.env HTTP/1.1" 404 558 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-07-26 05:42:26 (2 days ago)	Fail2Ban - Nginx Bot Probes	Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 03:07:00 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 44.252.97.33 (ec2-44-252-97-33.us-west-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 44.252.97.33 (ec2-44-252-97-33.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 23:06:52.253084 2026] [security2:error] [pid 4154916:tid 4154953] [client 44.252.97.33:35844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iacsb.com"] [uri "/.git/config"] [unique_id "amV5zJciNpMGu67dqCV1OwAAAFE"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-07-25 06:35:01 (3 days ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 01:04:25 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 44.252.97.33 (ec2-44-252-97-33.us-west-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 44.252.97.33 (ec2-44-252-97-33.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 21:04:19.298869 2026] [security2:error] [pid 480893:tid 480893] [client 44.252.97.33:39774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heathersheels.com"] [uri "/.git/config"] [unique_id "amQLk0zctJInE8c4pYoacgAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-24 22:02:44 (4 days ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
🇱🇻 garmtech.com	2026-07-24 09:15:44 (4 days ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.15

🇺🇸 195.184.76.166

🇩🇪 185.242.3.58

🇺🇸 173.239.214.141

🇫🇮 147.185.133.81

🇺🇸 47.88.94.171

🇮🇱 2.54.85.220

🇺🇸 216.106.179.182

🇧🇪 198.235.24.141

🇬🇧 154.16.44.174

🇩🇪 151.243.11.237

🇺🇸 104.168.117.151

🇫🇷 91.196.152.116

🇨🇦 85.217.149.35

🇫🇷 51.38.224.114

🇩🇪 47.254.181.23

🇺🇸 47.254.72.52

🇺🇦 46.150.72.227

🇸🇬 13.212.214.35

🇺🇸 3.142.170.60