44.204.184.42 - IPInfo

Basic Info

City: Ashburn

Region: Virginia

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



# start

NetRange:       44.192.0.0 - 44.255.255.255
CIDR:           44.192.0.0/10
NetName:        AMAZO-4
NetHandle:      NET-44-192-0-0-1
Parent:         NET44 (NET-44-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Amazon.com, Inc. (AMAZO-4)
RegDate:        2019-07-18
Updated:        2019-07-18
Ref:            https://rdap.arin.net/registry/ip/44.192.0.0



OrgName:        Amazon.com, Inc.
OrgId:          AMAZO-4
Address:        Amazon Web Services, Inc.
Address:        P.O. Box 81226
City:           Seattle
StateProv:      WA
PostalCode:     98108-1226
Country:        US
RegDate:        2005-09-29
Updated:        2022-09-30
Comment:        For details of this service please see
Comment:        http://ec2.amazonaws.com
Ref:            https://rdap.arin.net/registry/entity/AMAZO-4


OrgRoutingHandle: ARMP-ARIN
OrgRoutingName:   AWS RPKI Management POC
OrgRoutingPhone:  +1-206-555-0000 
OrgRoutingEmail:  aws-rpki-routing-poc@amazon.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/ARMP-ARIN

OrgNOCHandle: AANO1-ARIN
OrgNOCName:   Amazon AWS Network Operations
OrgNOCPhone:  +1-206-555-0000 
OrgNOCEmail:  amzn-noc-contact@amazon.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/AANO1-ARIN

OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName:   IP Routing
OrgRoutingPhone:  +1-206-555-0000 
OrgRoutingEmail:  aws-routing-poc@amazon.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/IPROU3-ARIN

OrgAbuseHandle: AEA8-ARIN
OrgAbuseName:   Amazon EC2 Abuse
OrgAbusePhone:  +1-206-555-0000 
OrgAbuseEmail:  trustandsafety@support.aws.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AEA8-ARIN

OrgTechHandle: ANO24-ARIN
OrgTechName:   Amazon EC2 Network Operations
OrgTechPhone:  +1-206-555-0000 
OrgTechEmail:  amzn-noc-contact@amazon.com
OrgTechRef:    https://rdap.arin.net/registry/entity/ANO24-ARIN

# end


# start

NetRange:       44.192.0.0 - 44.223.255.255
CIDR:           44.192.0.0/11
NetName:        AMAZON-IAD
NetHandle:      NET-44-192-0-0-2
Parent:         AMAZO-4 (NET-44-192-0-0-1)
NetType:        Reallocated
OriginAS:       
Organization:   Amazon Data Services Northern Virginia (ADSN-1)
RegDate:        2019-08-01
Updated:        2019-08-01
Ref:            https://rdap.arin.net/registry/ip/44.192.0.0



OrgName:        Amazon Data Services Northern Virginia
OrgId:          ADSN-1
Address:        13200 Woodland Park Road
City:           Herndon
StateProv:      VA
PostalCode:     20171
Country:        US
RegDate:        2018-04-25
Updated:        2025-08-14
Ref:            https://rdap.arin.net/registry/entity/ADSN-1


OrgAbuseHandle: AEA8-ARIN
OrgAbuseName:   Amazon EC2 Abuse
OrgAbusePhone:  +1-206-555-0000 
OrgAbuseEmail:  trustandsafety@support.aws.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AEA8-ARIN

OrgNOCHandle: AANO1-ARIN
OrgNOCName:   Amazon AWS Network Operations
OrgNOCPhone:  +1-206-555-0000 
OrgNOCEmail:  amzn-noc-contact@amazon.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/AANO1-ARIN

OrgTechHandle: ANO24-ARIN
OrgTechName:   Amazon EC2 Network Operations
OrgTechPhone:  +1-206-555-0000 
OrgTechEmail:  amzn-noc-contact@amazon.com
OrgTechRef:    https://rdap.arin.net/registry/entity/ANO24-ARIN

# end



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.204.184.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64281
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;44.204.184.42.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026032502 1800 900 604800 86400

;; Query time: 28 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 26 05:00:18 CST 2026
;; MSG SIZE  rcvd: 106

Host info

42.184.204.44.in-addr.arpa domain name pointer ec2-44-204-184-42.compute-1.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
42.184.204.44.in-addr.arpa	name = ec2-44-204-184-42.compute-1.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
200.69.65.234	attackbots	SSH Brute-Forcing (server1)	2019-12-20 18:16:28
118.69.186.86	attackbotsspam	Unauthorized connection attempt detected from IP address 118.69.186.86 to port 445	2019-12-20 18:09:55
189.49.159.204	attackbots	/var/log/messages:Dec 18 19:15:20 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1576696520.296:45504): pid=10739 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=10740 suid=74 rport=39329 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=189.49.159.204 terminal=? res=success' /var/log/messages:Dec 18 19:15:20 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1576696520.300:45505): pid=10739 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=10740 suid=74 rport=39329 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=189.49.159.204 terminal=? res=success' /var/log/messages:Dec 18 19:15:31 sanyalnet-cloud-vps fail2ban.filter[1551]: WARNING........ -------------------------------	2019-12-20 18:41:10
222.186.136.64	attack	Dec 20 11:05:01 vpn01 sshd[29763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.136.64 Dec 20 11:05:03 vpn01 sshd[29763]: Failed password for invalid user atilla from 222.186.136.64 port 49054 ssh2 ...	2019-12-20 18:22:17
71.51.77.222	attackbots	firewall-block, port(s): 81/tcp	2019-12-20 18:18:01
106.51.78.188	attack	Dec 20 01:56:04 mockhub sshd[6850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.78.188 Dec 20 01:56:07 mockhub sshd[6850]: Failed password for invalid user minus from 106.51.78.188 port 33152 ssh2 ...	2019-12-20 18:10:25
223.149.104.125	attackbotsspam	Honeypot hit.	2019-12-20 18:37:40
89.248.172.85	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-20 18:31:00
77.247.110.58	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-20 18:42:11
222.186.175.151	attackbots	Dec 20 10:48:53 mail sshd[16199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root Dec 20 10:48:55 mail sshd[16199]: Failed password for root from 222.186.175.151 port 60290 ssh2 ...	2019-12-20 18:24:34
118.126.112.72	attack	Dec 20 07:39:32 ns3042688 sshd\[25777\]: Invalid user garron from 118.126.112.72 Dec 20 07:39:32 ns3042688 sshd\[25777\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.126.112.72 Dec 20 07:39:34 ns3042688 sshd\[25777\]: Failed password for invalid user garron from 118.126.112.72 port 34918 ssh2 Dec 20 07:46:20 ns3042688 sshd\[29318\]: Invalid user policeauctions from 118.126.112.72 Dec 20 07:46:20 ns3042688 sshd\[29318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.126.112.72 ...	2019-12-20 18:25:17
45.136.108.68	attack	RDP over non-standard port attempt	2019-12-20 18:29:23
165.231.178.18	attack	C1,WP GET /nelson/wp-login.php	2019-12-20 18:23:33
49.88.112.67	attackspambots	Dec 20 10:58:44 eventyay sshd[16315]: Failed password for root from 49.88.112.67 port 57611 ssh2 Dec 20 10:59:37 eventyay sshd[16357]: Failed password for root from 49.88.112.67 port 25087 ssh2 ...	2019-12-20 18:03:40
141.98.81.37	attack	detected by Fail2Ban	2019-12-20 18:35:26

Recently Reported IPs

120.124.229.26	44.202.13.116	3.90.5.174	20.74.212.144
185.242.3.64	110.78.156.191	2606:4700:10::6814:7662	2606:4700:10::6814:7215
2606:4700:10::6816:3590	2606:4700:10::6816:476	2606:4700:10::6814:5572	110.78.138.189
2606:4700:10::6814:4926	2606:4700:10::6816:4581	2606:4700:10::6814:9702	2606:4700:10::6816:3123
2606:4700:10::ac43:2864	195.13.239.66	142.239.35.12	2606:4700:10::6814:9792