JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.206.254.149

43.206.254.149 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 49%: ?

49%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-43-206-254-149.ap-northeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.206.254.149

Whois 43.206.254.149

IP Abuse Reports for 43.206.254.149:

This IP address has been reported a total of 8 times from 7 distinct sources. 43.206.254.149 was first reported on July 29th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-29 22:09:04 (20 hours ago)	Auto-ban: >3000 req/min op 2026-07-29	Web App Attack SSH Hacking
🇺🇸 mnsf	2026-07-29 11:05:06 (1 day ago)	Scanning/Probing (12)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 10:46:27 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 43.206.254.149 (ec2-43-206-254-149.ap-northeast ... show more (mod_security) mod_security (id:210492) triggered by 43.206.254.149 (ec2-43-206-254-149.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 06:46:19.334453 2026] [security2:error] [pid 525:tid 525] [client 43.206.254.149:36872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.goodfrequencies.circleofsound.org"] [uri "/.git/config"] [unique_id "amnZ-yaSVsav_K4HcmHCmwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-29 07:42:30 (1 day ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-07-29 07:00:00 (1 day ago)	Automated Apache web application probing in selected 24h window; attempts=142, unique_paths=142, err ... show more Automated Apache web application probing in selected 24h window; attempts=142, unique_paths=142, error_responses=142; targets include WordPress, .env/.git, phpMyAdmin, autodiscover, wpad.dat and related probe paths. show less	Web App Attack
Anonymous	2026-07-29 07:00:00 (1 day ago)	Apache probe; attempts=142; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.bak \| /.env.ci ... show more Apache probe; attempts=142; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.bak \| /.env.ci \| /.env.dev \| /.env.development \| /.env.dist \| /.env.docker \| /.env.example \| /.env.json \| /.env.live \| /.env.local \| /.env.old \| /.env.preprod \| /.env.prod \| /.env.production \| /.env.remote \| /.env.sample \| /.env.save \| /.env.stage \| /.env.staging \| /.env.swp \| /.env.test \| /.env.txt \| /.env.uat \| /.env.yaml \| /.env.yml \| /.env~ \| /.git/config \| /admin-panel/.env \| /admin/.env \| /administrator/.env \| /angular/.env \| /api/.env \| /api/dev/.env \| /api/staging/.env \| /api/v1/.env \| /api/v2/.env \| /api/v3/.env \| /app/.env \| /application/.env \| /apps/.env \| /assets/.env \| /backend/.env \| /backup/.env \| /backups/.env \| /bin/.env \| /bootstrap/.env \| /build/.env \| /cakephp/.env \| /client/.env \| /cms/.env \| /codeigniter/.env \| /config/.env \| /control-panel/.env \| /core/.env \| /core/app/.env \| /crm/.env \| /cron/.env \| \| ... [142 exact paths total] show less	Web App Attack
🇬🇧 consul.to	2026-07-29 05:56:29 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-07-29 05:41:48 (1 day ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ... show more Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195) show less	Hacking

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.176.26.186

🇨🇾 213.149.172.250

🇳🇱 91.92.40.45

🇷🇺 82.162.56.186

🇳🇴 82.102.27.195

🇺🇸 70.166.167.44

🇮🇩 69.5.20.205

🇳🇱 2a00:1450:4013:c05::127

🇺🇿 195.158.14.232

🇧🇷 177.85.73.84

🇻🇳 160.250.4.228

🇺🇸 147.185.132.95

🇭🇰 114.111.54.189

🇨🇳 112.86.225.93

🇳🇱 93.123.118.229

🇺🇸 74.94.234.151

🇫🇷 62.210.142.160

🇱🇹 46.29.234.126

🇧🇷 45.167.49.188

🇧🇷 179.245.230.41