JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 50.17.101.143

50.17.101.143 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-50-17-101-143.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 50.17.101.143

Whois 50.17.101.143

IP Abuse Reports for 50.17.101.143:

This IP address has been reported a total of 112 times from 82 distinct sources. 50.17.101.143 was first reported on August 21st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Tsumugi Kotobuki	2026-08-25 05:12:32 (1 day ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 52 \| Len: 60B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 52 \| Len: 60B \| Win: 26883(1) \| rDNS: ec2-50-17-101-143.compute-1.amazonaws.com \| F2B/ufw-honeypot@2026-08-25T05:12:31Z show less	Port Scan Hacking
🇺🇸 HamSammich	2026-08-25 04:10:29 (1 day ago)	Automated sensor: 2 HTTP connection/probe attempts over the last 24h (latest 2026-08-25T04:10Z).	Brute-Force Web App Attack
🇺🇸 Choice Tech LLC	2026-08-25 03:55:02 (1 day ago)	Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=80	Port Scan Hacking
🇳🇱 Webhoster	2026-08-24 23:44:47 (1 day ago)	{"ClientAddr":"172.71.190.140:13344","ClientHost":"50.17.101.143","ClientPort":"13344","ClientUserna ... show more {"ClientAddr":"172.71.190.140:13344","ClientHost":"50.17.101.143","ClientPort":"13344","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":403,"Duration":16494029,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":16494029,"RequestAddr":"obsidian.timvdberg.dev","RequestContentSize":0,"RequestCount":192033,"RequestHost":"obsidian.timvdberg.dev","RequestMethod":"GET","RequestPath":"/","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"obsidian@file","StartLocal":"2026-08-24T23:44:47.478777001Z","StartUTC":"2026-08-24T23:44:47.478777001Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"50.17.101.143","request_X-Forwarded-For":"50.17.101.143","request_X-Real-Ip":"172.71.190.140","time":"2026-08-24T23:44:47Z"} ... show less	Port Scan Hacking Bad Web Bot Web App Attack
🇳🇱 Ike57	2026-08-24 23:22:49 (1 day ago)	Detected activity: Proxycheck.io Risk score: 100%; Multiple WAF violations; Scanning for known vulne ... show more Detected activity: Proxycheck.io Risk score: 100%; Multiple WAF violations; Scanning for known vulnerabilities / exploits; Abuse Confidence score over set treshold; Blocked by web application firewall; VPN server detected; Datacenter IP detected; Anonymous Network detected; Compromised/Hacked server activity; Is also listed in DNSBL: (S5H Blocking List + DroneBL) \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack VPN IP
🇺🇸 xxkodedxx	2026-08-24 21:49:20 (2 days ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: US / AS14618 Amazon.com, Inc. Active: 21:48:21 UTC Volume: 1 HTTP req Probed: / Status mix: 444×1 Vhost fishing: teachme.ztx-lab.com UA: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
Anonymous	2026-08-24 20:38:49 (2 days ago)	apache vulnerability scan	Web App Attack
Anonymous	2026-08-24 20:18:42 (2 days ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
Anonymous	2026-08-24 17:57:32 (2 days ago)	Malicious activity detected	Hacking Web App Attack
🇨🇿 ptlab	2026-08-24 16:00:05 (2 days ago)	Detected forbidden path/plugin attack from WP-host.	Hacking Web App Attack
Anonymous	2026-08-24 15:11:57 (2 days ago)	Unauthorized access (80/tcp/http)	Port Scan Web App Attack
🇭🇺 kranem	2026-08-24 15:00:18 (2 days ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 14618 (Amazon.com, Inc.) Protocol: HTTP/1 ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 14618 (Amazon.com, Inc.) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-08-24T13:49:12Z User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-24 09:18:54 (2 days ago)	FortiWeb WAF: 124 attacks detected. Threat Score: 33600. Types: Client Management(62), Block IP List ... show more FortiWeb WAF: 124 attacks detected. Threat Score: 33600. Types: Client Management(62), Block IP List(62). Origin: United States. show less	Web App Attack
🇵🇱 sefinek.net	2026-08-24 08:00:00 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:92.0) Gecko/20100101 Firefox/92.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 Interceptor_HQ	2026-08-24 07:51:24 (2 days ago)	request_uri: / -- automatic report --	Brute-Force Hacking

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.76.105.165

🇸🇬 165.232.164.223

🇺🇸 109.105.210.75

🇺🇸 216.25.89.90

🇳🇱 195.178.110.227

🇩🇪 130.12.180.107

🇯🇵 96.126.130.210

🇺🇸 20.172.182.212

🇺🇸 2603:300b:4a0:0:c803:3277:83d1:d678

🇺🇸 205.210.31.60

🇨🇳 182.43.235.75

🇮🇳 172.68.147.185

🇸🇬 118.194.233.182

🇷🇺 94.26.130.173

🇺🇸 71.185.255.106

🇺🇸 71.27.86.44

🇺🇸 52.249.217.235

🇺🇸 51.8.108.105

🇨🇦 20.48.179.39

🇫🇷 2400:cb00:987:1000:79fb:b6c7:24ff:c50d