JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 44.243.248.149

44.243.248.149 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 45%: ?

45%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-44-243-248-149.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 44.243.248.149

Whois 44.243.248.149

IP Abuse Reports for 44.243.248.149:

This IP address has been reported a total of 7 times from 7 distinct sources. 44.243.248.149 was first reported on July 21st 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 jfz-abuse	2026-07-21 08:44:12 (2 days ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇳🇱 sernate	2026-07-21 08:31:21 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 44.243.248.149 (US/United States/ec2-44-243-248 ... show more (mod_security) mod_security (id:210492) triggered by 44.243.248.149 (US/United States/ec2-44-243-248-149.us-west-2.compute.amazonaws.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-21 08:29:30 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 44.243.248.149 (ec2-44-243-248-149.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 44.243.248.149 (ec2-44-243-248-149.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 04:29:26.251594 2026] [security2:error] [pid 15850:tid 15850] [client 44.243.248.149:41148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.zmnc.tr"] [uri "/.git/config"] [unique_id "al8t5loCdPDlkm8jVwYIMwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-07-21 08:02:28 (2 days ago)	(modsecurity) srv104 ModSecurity 44.243.248.149 (US/United States/ec2-44-243-248-149.us-west-2.compu ... show more (modsecurity) srv104 ModSecurity 44.243.248.149 (US/United States/ec2-44-243-248-149.us-west-2.compute.amazonaws.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇮🇩 zam	2026-07-21 07:48:11 (2 days ago)	44.243.248.149 - - [21/Jul/2026:07:48:06 +0000] "GET /.git/config HTTP/1.1" 404 167 44.243.248.149 - ... show more 44.243.248.149 - - [21/Jul/2026:07:48:06 +0000] "GET /.git/config HTTP/1.1" 404 167 44.243.248.149 - - [21/Jul/2026:07:48:07 +0000] "GET /.env HTTP/1.1" 404 167 44.243.248.149 - - [21/Jul/2026:07:48:07 +0000] "GET /.env.local HTTP/1.1" 404 167 44.243.248.149 - - [21/Jul/2026:07:48:07 +0000] "GET /.env.production HTTP/1.1" 404 167 44.243.248.149 - - [21/Jul/2026:07:48:07 +0000] "GET /.env.staging HTTP/1.1" 404 167 44.243.248.149 - - [21/Jul/2026:07:48:08 +0000] "GET /.env.development HTTP/1.1" 404 167 show less	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-21 06:39:28 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇬🇧 Aetherweb Ark	2026-07-21 06:32:16 (3 days ago)	(mod_security) mod_security (id:949110) triggered by 44.243.248.149 (US/United States/ec2-44-243-248 ... show more (mod_security) mod_security (id:949110) triggered by 44.243.248.149 (US/United States/ec2-44-243-248-149.us-west-2.compute.amazonaws.com): N in the last X secs show less	Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 216.10.242.215

🇬🇧 185.170.109.2

🇺🇸 162.216.112.19

🇮🇩 103.172.20.218

🇬🇧 74.114.29.158

🇯🇵 20.78.56.149

🇧🇷 179.34.209.191

🇺🇸 162.216.149.74

🇺🇸 162.214.22.174

🇺🇸 154.29.87.145

🇩🇪 141.98.102.187

🇨🇳 122.241.40.53

🇨🇳 117.69.234.214

🇬🇧 104.28.163.244

🇩🇪 94.16.17.140

🇺🇸 45.43.57.251

🇵🇱 176.53.159.197

🇧🇷 170.82.150.105

🇺🇸 162.240.218.183

🇺🇸 162.216.149.181