JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.175.94.97

Activity Trending Down

Abuse Confidence Score

44% Elevated

47 reports

41 reporters · latest 1 month ago

ISP: Amazon Technologies Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14618
Hostname(s): ec2-54-175-94-97.compute-1.amazonaws.com
Domain Name: amazon.com
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

47 from 41 distinct reporters

First reported

September 16th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 10 🇫🇷 France 6 🇺🇸 United States of America 6

Most common categories Web App Attack 34 Brute-Force 15 Bad Web Bot 14 Port Scan 5 Hacking 5

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-09-18 17:02:47 (1 month ago)	Web application attack detected	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-09-17 22:24:04 (1 month ago)		Brute-Force Web App Attack
🇮🇳 evicky2002	2026-09-17 06:00:05 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇳🇱 Savvii	2026-09-17 02:32:21 (1 month ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
🇺🇸 helios.live	2026-09-17 02:29:34 (1 month ago)	2026/09/17 02:29:33 [error] 1106817#1106817: 3464921 access forbidden by rule, client: 54.175.94.97, server: kocerroxy.com, request: "GET /.git-credentials HTTP/1.1", host: "kocerroxy.com" 2026/09/17 02:29:33 [error] 1106817#1106817: 3465343 access ... show more 2026/09/17 02:29:33 [error] 1106817#1106817: 3464921 access forbidden by rule, client: 54.175.94.97, server: kocerroxy.com, request: "GET /.git-credentials HTTP/1.1", host: "kocerroxy.com" 2026/09/17 02:29:33 [error] 1106817#1106817: 3465343 access forbidden by rule, client: 54.175.94.97, server: kocerroxy.com, request: "GET /.gitlab-ci.yml HTTP/1.1", host: "kocerroxy.com" 2026/09/17 02:29:33 [error] 1106817#1106817: 3465343 access forbidden by rule, client: 54.175.94.97, server: kocerroxy.com, request: "GET /.gitconfig HTTP/1.1", host: "kocerroxy.com" 2026/09/17 02:29:33 [error] 1106817#1106817: 3464921 access forbidden by rule, client: 54.175.94.97, server: kocerroxy.com, request: "GET /.env.backup HTTP/1.1", host: "kocerroxy.com" 2026/09/17 02:29:33 [error] 1106817#1106817: *3464921 access forbidden by rule, client: 54.175.94.97, server: kocerroxy.com, request: "GET /.env.local HTTP/1.1", host: "kocerroxy.com" ... show less	Web App Attack
🇫🇷 pm33	2026-09-17 02:26:02 (1 month ago)	Unauthorized connections HTTP 403	Web App Attack
🇳🇱 BlueWire Hosting	2026-09-17 02:12:46 (1 month ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 01:49:03 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 54.175.94.97 (ec2-54-175-94-97.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 21:48:59.285816 2026] [security2:error] [pid 483:tid 4 ... show more (mod_security) mod_security (id:210492) triggered by 54.175.94.97 (ec2-54-175-94-97.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 21:48:59.285816 2026] [security2:error] [pid 483:tid 483] [client 54.175.94.97:52306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jbaydeliveries.com"] [uri "/%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env"] [unique_id "aqtHC4OxrtVNH3PdrcVK5wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 findlab	2026-09-17 01:30:04 (1 month ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇬🇧 andypiper	2026-09-17 01:02:38 (1 month ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇪🇸 robotstxt	2026-09-17 00:58:06 (1 month ago)	54.175.94.97 - - [17/Sep/2026:00:57:13 +0000] "GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1 HTTP/2.0" 403 15075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrom ... show more 54.175.94.97 - - [17/Sep/2026:00:57:13 +0000] "GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1 HTTP/2.0" 403 15075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-" edge="54.175.94.97" 54.175.94.97 - - [17/Sep/2026:00:57:13 +0000] "GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/2.0" 403 15075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-" edge="54.175.94.97" 54.175.94.97 - - [17/Sep/2026:00:57:13 +0000] "GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb HTTP/2.0" 403 15002 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-" edge="54.175.94.97" 54.175.94.97 - - [17/Sep/2026:00:57:13 +0000] "GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/2.0" 403 15075 "- ... show less	Web App Attack
🇩🇪 netclix.gr	2026-09-17 00:55:45 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 54.175.94.97 (US/United States/ec2-54-175-94-97.compute-1.amazonaws.com): (CF_ENABLE)	SQL Injection
🇳🇱 Savvii	2026-09-17 00:29:42 (1 month ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ✨	2026-09-17 00:24:18 (1 month ago)	Domain : gwha.org.uk Rule : hack 2026-09-17 00:22:05 *hidden-privacy* GET /.htpasswd - 443 - 54.175.94.97 HTTP/2 Mozilla/5.0 (compatible; MistralAI-User/1.0; https://mistral.ai/) - gwha.org.uk 404 0 2 5224 440 125 - -	Hacking SQL Injection Brute-Force
🇺🇸 TPI-Abuse	2026-09-17 00:11:47 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 54.175.94.97 (ec2-54-175-94-97.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 20:11:42.938102 2026] [security2:error] [pid 9030:tid ... show more (mod_security) mod_security (id:210492) triggered by 54.175.94.97 (ec2-54-175-94-97.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 20:11:42.938102 2026] [security2:error] [pid 9030:tid 9030] [client 54.175.94.97:52952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grasslakepizzatime.com"] [uri "/.github/.env"] [unique_id "aqswPpIfWv08nN91OyHxuAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇦 192.162.134.35

🇳🇱 109.160.32.128

🇲🇩 80.96.109.182

🇺🇸 66.132.195.55

🇬🇧 51.195.244.250

🇬🇧 51.195.244.25

🇧🇪 35.210.62.153

🇺🇸 20.118.235.125

🇦🇷 190.196.253.14

🇨🇦 76.75.107.1

🇨🇦 76.71.47.215

🇬🇧 51.195.244.248

🇬🇧 51.195.244.247

🇬🇧 51.195.244.246

🇳🇱 45.148.10.121

🇨🇱 34.176.173.135

🇫🇷 2001:41d0:33a:a00::40e

🇹🇼 198.235.24.28

🇬🇧 193.163.125.10

🇧🇬 193.24.211.219