JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 44.243.237.141

44.243.237.141 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 64%: ?

64%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-44-243-237-141.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 44.243.237.141

Whois 44.243.237.141

IP Abuse Reports for 44.243.237.141:

This IP address has been reported a total of 14 times from 11 distinct sources. 44.243.237.141 was first reported on July 24th 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-27 07:58:24 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 44.243.237.141 (ec2-44-243-237-141.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 44.243.237.141 (ec2-44-243-237-141.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 03:58:19.950424 2026] [security2:error] [pid 102447:tid 102480] [client 44.243.237.141:44732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leadingedgesupply.com"] [uri "/.git/config"] [unique_id "amcPmykyUcHb3CyVF0Ph1QAAAIE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 05:15:54 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 44.243.237.141 (ec2-44-243-237-141.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 44.243.237.141 (ec2-44-243-237-141.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 01:15:48.248485 2026] [security2:error] [pid 1919053:tid 1919068] [client 44.243.237.141:34352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leaderoftheopposition.com"] [uri "/.git/config"] [unique_id "ambphO2oa-MZ6LVjXdev1QAAAYc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 04:50:06 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 44.243.237.141 (ec2-44-243-237-141.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 44.243.237.141 (ec2-44-243-237-141.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 00:49:56.380321 2026] [security2:error] [pid 4034595:tid 4034595] [client 44.243.237.141:47118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leadek.com"] [uri "/.git/config"] [unique_id "ambjdAXMQNdHSLeDF93VpQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-26 21:59:54 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-25. show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-07-25 22:00:39 (2 days ago)	Auto-ban: >3000 req/min op 2026-07-25	Web App Attack SSH Hacking
Anonymous	2026-07-25 07:07:44 (2 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan
🇩🇪 raph	2026-07-25 06:21:20 (3 days ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇳🇱 vaddilyin	2026-07-25 05:29:48 (3 days ago)	{"ClientAddr":"44.243.237.141:49096","ClientHost":"44.243.237.141","ClientPort":"49096","ClientUsern ... show more {"ClientAddr":"44.243.237.141:49096","ClientHost":"44.243.237.141","ClientPort":"49096","ClientUsername":"-","DownstreamContentSize":555,"DownstreamStatus":403,"Duration":518678,"OriginContentSize":555,"OriginDuration":461550,"OriginStatus":403,"Overhead":57128,"RequestAddr":"kriston.vdkln.com","RequestContentSize":0,"RequestCount":136225,"RequestHost":"kriston.vdkln.com","RequestMethod":"GET","RequestPath":"/.git/config","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"kriston@docker","ServiceAddr":"172.18.0.54:80","ServiceName":"kriston@docker","ServiceURL":"http://172.18.0.54:80","StartLocal":"2026-07-25T05:29:48.132346817Z","StartUTC":"2026-07-25T05:29:48.132346817Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-07-25T05:29:48Z"} {"ClientAddr":"44.243.237.141:49096","ClientHost":"44.243.237.141","ClientPort":"49096","ClientUsername":"-","DownstreamConten ... show less	Web App Attack
🇱🇻 garmtech.com	2026-07-25 04:36:21 (3 days ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/app/.env	Web App Attack
🇩🇪 FeG Deutschland	2026-07-25 03:22:03 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack
🇸🇪 vaia.cloud	2026-07-25 02:45:02 (3 days ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇺🇸 masterguru	2026-07-25 01:22:47 (3 days ago)	Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\$(?:\\\\(.\\\\ ... show more Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.\\\$\|.)\\\\)\|\\\\{.\\\\})\| (932130-169) show less	Hacking
Anonymous	2026-07-24 23:37:25 (3 days ago)	[25/Jul/2026:02:37:25 +0300] 178493624553.630738 44.243.237.141 50460 148.251.76.218 443 [25/Jul/202 ... show more [25/Jul/2026:02:37:25 +0300] 178493624553.630738 44.243.237.141 50460 148.251.76.218 443 [25/Jul/2026:02:37:25 +0300] 178493624557.968226 44.243.237.141 50460 148.251.76.218 443 show less	Web App Attack
🇦🇹 penguin-solutions.at	2026-07-24 06:54:57 (3 days ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 125.228.239.89

🇹🇼 125.227.156.55

🇭🇰 125.59.145.23

🇭🇰 101.36.117.234

🇭🇰 101.36.117.187

🇭🇰 101.36.113.241

🇺🇸 98.94.22.227

🇺🇸 47.251.174.68

🇳🇱 45.148.10.29

🇺🇸 24.199.98.33

🇱🇧 5.57.6.233

🇩🇪 213.209.159.225

🇩🇪 213.209.159.25

🇺🇸 184.105.247.220

🇺🇸 172.202.44.182

🇵🇰 161.248.202.88

🇺🇸 153.66.28.132

🇭🇰 125.215.199.37

🇮🇳 125.20.251.70

🇨🇳 118.212.123.182