JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 44.242.230.154

44.242.230.154 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 68%: ?

68%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-44-242-230-154.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 44.242.230.154

Whois 44.242.230.154

IP Abuse Reports for 44.242.230.154:

This IP address has been reported a total of 22 times from 11 distinct sources. 44.242.230.154 was first reported on July 20th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-21 06:06:05 (11 hours ago)	Trying to access config files	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 03:38:47 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 23:38:43.644667 2026] [security2:error] [pid 13577:tid 13577] [client 44.242.230.154:56336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendeenicole.com"] [uri "/.env"] [unique_id "al7pwxt0tKziPdSTed09jQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 03:20:58 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 23:20:50.951377 2026] [security2:error] [pid 1737859:tid 1737859] [client 44.242.230.154:51586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uphillfarmvt.com"] [uri "/.env"] [unique_id "al7lkmuZOUP63q9tvmxAvAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-20 22:05:15 (19 hours ago)	Abuse Detected (9)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 20:46:02 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 16:45:54.681577 2026] [security2:error] [pid 847861:tid 847861] [client 44.242.230.154:59781] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegoldentether.com"] [uri "/.env"] [unique_id "al6JAojwWj5LUs434PWWxwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 20:30:27 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 16:30:23.208590 2026] [security2:error] [pid 15928:tid 15931] [client 44.242.230.154:57899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tierrasolymar.com"] [uri "/.env"] [unique_id "al6FX0XePYjP5zwtuP1dNgAAAIE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-20 20:17:14 (21 hours ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 19:51:45 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 15:51:38.904553 2026] [security2:error] [pid 2387:tid 2387] [client 44.242.230.154:49370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tandm.us"] [uri "/.env"] [unique_id "al58Sn3SUJy695YfW5gDSwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 19:18:26 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 15:18:22.623936 2026] [security2:error] [pid 1930786:tid 1930786] [client 44.242.230.154:57378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thejourneythroughtime.com"] [uri "/.env"] [unique_id "al50fp7RHzxhT6Ljz1W08QAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-07-20 18:49:12 (22 hours ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after attack pattern. Vegas Security	Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-07-20 17:51:47 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 13:51:39.802508 2026] [security2:error] [pid 5568:tid 5568] [client 44.242.230.154:53745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tlo-afghanistan.org"] [uri "/.env"] [unique_id "al5gK-Q0OPYv1Sue2zEb0wAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-07-20 17:41:33 (23 hours ago)	Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ... show more Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths. show less	Hacking Brute-Force Web App Attack
🇺🇸 almazick	2026-07-20 17:08:20 (1 day ago)	Fail2Ban jail window on srv1.windowrepair.us banned 44.242.230.154 after 1 attempts	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 15:36:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 44.242.230.154 (ec2-44-242-230-154.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 11:36:21.685596 2026] [security2:error] [pid 2204939:tid 2204939] [client 44.242.230.154:61378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wizind.com"] [uri "/.env"] [unique_id "al5AdaccCN_k9Jqiun2vywAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ptlab	2026-07-20 14:45:36 (1 day ago)	Detected env_leak attack from WP-host.	Hacking Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.202.9.120

🇫🇮 147.185.133.32

🇵🇭 136.158.16.206

🇺🇸 107.150.104.197

🇬🇧 35.203.211.162

🇳🇱 185.93.89.39

🇨🇭 178.197.195.196

🇩🇪 176.9.231.97

🇨🇦 172.69.214.154

🇨🇳 120.48.135.189

🇧🇩 103.111.225.224

🇫🇷 85.204.70.88

🇺🇸 66.132.195.121

🇺🇸 66.132.172.251

🇯🇵 45.43.60.213

🇨🇦 38.88.124.99

🇮🇳 34.131.16.90

🇻🇳 27.79.4.201

🇨🇦 20.63.100.92

🇺🇸 2001:4860:4840:400::