JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 44.246.230.136

44.246.230.136 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 74%: ?

74%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-44-246-230-136.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 44.246.230.136

Whois 44.246.230.136

IP Abuse Reports for 44.246.230.136:

This IP address has been reported a total of 14 times from 12 distinct sources. 44.246.230.136 was first reported on July 24th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ger-stg-sifi1	2026-07-27 12:56:39 (5 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 11:57:15 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 44.246.230.136 (ec2-44-246-230-136.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 44.246.230.136 (ec2-44-246-230-136.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:57:11.869324 2026] [security2:error] [pid 1775648:tid 1775648] [client 44.246.230.136:41012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mapleleaf-marketing.com"] [uri "/.git/config"] [unique_id "amdHl3aKNNNf5BcDTSlDegAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-26 22:04:23 (20 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-25. show less	Web App Attack SSH Hacking
Anonymous	2026-07-26 04:53:30 (1 day ago)	(caddyscan) Scanner path probe from 44.246.230.136 (US/United States/ec2-44-246-230-136.us-west-2.co ... show more (caddyscan) Scanner path probe from 44.246.230.136 (US/United States/ec2-44-246-230-136.us-west-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 44.246.230.136 - - [26/Jul/2026:04:53:27 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 44.246.230.136 - - [26/Jul/2026:04:53:27 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 44.246.230.136 - - [26/Jul/2026:04:53:27 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 44.246.230.136 - - [26/Jul/2026:04:53:27 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 44.246.230.136 - - [26/Jul/2026:04:53:27 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
🇮🇹 clamehost.it	2026-07-26 02:51:13 (1 day ago)	Automatic report - Brute Force attack using this IP address	Brute-Force
🇳🇱 homeshowdomain.nl	2026-07-25 21:59:47 (1 day ago)	Auto-ban: >3000 req/min op 2026-07-25	Web App Attack SSH Hacking
🇧🇪 voormedia	2026-07-25 12:28:16 (2 days ago)	Accessed trap at '/.git/config'	Web App Attack
🇩🇪 grassau.com	2026-07-25 04:33:46 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 44.246.230.136 (US/United States/Oregon ... show more (mod_security) mod_security triggered on hostname [redacted] 44.246.230.136 (US/United States/Oregon/Boardman/ec2-44-246-230-136.us-west-2.compute.amazonaws.com) show less	SQL Injection
Anonymous	2026-07-24 14:09:53 (3 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 12:49:53 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 44.246.230.136 (ec2-44-246-230-136.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 44.246.230.136 (ec2-44-246-230-136.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 08:49:47.040927 2026] [security2:error] [pid 779:tid 779] [client 44.246.230.136:54384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.perlcreative.com"] [uri "/.git/config"] [unique_id "amNfa9ARRJOUyDs5uwNlVAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-07-24 10:47:08 (3 days ago)	http-sensitive-files - IP: 44.246.230.136 - time="2026-07-24T12:47:08+02:00" level=info msg="(555f6 ... show more http-sensitive-files - IP: 44.246.230.136 - time="2026-07-24T12:47:08+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 44.246.230.136 (US/16509) : 4h ban on Ip 44.246.230.136" module=db show less	Web App Attack
🇳🇱 maxxsense	2026-07-24 06:38:32 (3 days ago)	(mod_security) mod_security triggered on hostname [redacted] 44.246.230.136 (US/United States/ec2-44 ... show more (mod_security) mod_security triggered on hostname [redacted] 44.246.230.136 (US/United States/ec2-44-246-230-136.us-west-2.compute.amazonaws.com) show less	SQL Injection
Anonymous	2026-07-24 05:19:08 (3 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇮🇹 VHosting	2026-07-24 03:45:04 (3 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 80.94.92.109

🇵🇱 57.128.223.80

🇫🇷 213.32.20.78

🇳🇱 195.178.110.4

🇵🇱 176.53.159.198

🇺🇸 162.216.149.233

🇯🇵 156.227.235.77

🇧🇷 138.117.46.67

🇮🇩 103.191.14.210

🇮🇳 103.93.37.178

🇮🇱 82.81.13.117

🇨🇳 1.197.102.62

🇮🇩 180.252.228.143

🇫🇷 176.31.21.38

🇺🇸 162.216.150.132

🇺🇸 150.107.36.236

🇨🇳 121.46.239.199

🇨🇳 121.22.99.2

🇰🇷 118.37.170.88

🇮🇳 117.252.86.216