JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.149.157.231

54.149.157.231 was found in our database!

This IP was reported 2 times. Confidence of Abuse is 15%: ?

15%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-149-157-231.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.149.157.231

Whois 54.149.157.231

IP Abuse Reports for 54.149.157.231:

This IP address has been reported a total of 2 times from 2 distinct sources. 54.149.157.231 was first reported on June 28th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-28 13:02:17 (1 day ago)	(mod_security) mod_security (id:210810) triggered by 54.149.157.231 (ec2-54-149-157-231.us-west-2.co ... show more (mod_security) mod_security (id:210810) triggered by 54.149.157.231 (ec2-54-149-157-231.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 09:02:12.095242 2026] [security2:error] [pid 23327:tid 23327] [client 54.149.157.231:49318] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "X-Scanner" at REQUEST_HEADERS_NAMES:X-Scanner. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "20"] [id "210810"] [rev "4"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|dashboard.alitcogroup.com\|F\|2"] [data "X-Scanner"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "dashboard.alitcogroup.com"] [uri "/"] [unique_id "akEbVJLAByJbvMBjPSDjXgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-06-28 10:35:41 (2 days ago)	{"level":"info","ts":1782642851.7876618,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1782642851.7876618,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"54.149.157.231","remote_port":"35044","client_ip":"54.149.157.231","proto":"HTTP/1.1","method":"GET","host":"status.paratira.ai","uri":"/sslvpn/Login/Login","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"],"Connection":["close"],"Accept":["/"],"Accept-Language":["en"],"X-Scanner":["CTM360 HackerView DeepScan"]}},"bytes_read":0,"user_id":"","duration":0.000091825,"size":0,"status":308,"resp_headers":{"Content-Type":[],"Server":["Caddy"],"Connection":["close"],"Location":["https://status.paratira.ai/sslvpn/Login/Login"]}} {"level":"info","ts":1782642859.8002532,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"54.149.157.231","remote_port":"60140","client_ip":"54.149.157.231","proto":"HTTP/1.1","method":"GET","host": ... show less	DDoS Attack Web App Attack

Showing 1 to 2 of 2 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.19.35.57

🇺🇸 172.253.196.155

🇳🇱 172.94.9.55

🇺🇸 138.197.87.21

🇭🇰 112.119.21.245

🇱🇹 81.30.98.62

🇺🇸 66.132.172.44

🇺🇸 52.103.20.95

🇨🇳 218.201.226.254

🇬🇧 195.96.139.117

🇨🇦 161.115.231.190

🇪🇬 156.223.210.29

🇨🇳 120.48.178.142

🇮🇩 103.251.8.54

🇮🇳 103.38.182.49

🇱🇺 64.89.161.91

🇬🇧 213.166.84.47

🇮🇳 202.141.81.223

🇬🇧 198.244.183.36

🇬🇧 188.240.59.5