JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.234.112.235

Recent Activity

Abuse Confidence Score

93% Critical

444 reports

270 reporters · latest 6 days ago

ISP: Amazon.com, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14618
Hostname(s): ec2-54-234-112-235.compute-1.amazonaws.com
Domain Name: amazon.com
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

444 from 270 distinct reporters

First reported

September 7th 2026

Most recent report

6 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 129 🇩🇪 Germany 96 🇫🇷 France 33

Most common categories Web App Attack 307 Bad Web Bot 132 Brute-Force 109 Hacking 98 Port Scan 59

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-24 14:09:55 (6 days ago)	fail2ban jail apache-secrets-probe: 54.234.112.235 - - [09/Sep/2026:19:19:54 -0700] "GET /.env HTTP/1.1" 403 4404 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"	Web App Attack
🇺🇸 1cyb3rpunk	2026-10-23 18:43:01 (1 week ago)	Coordinated campaign CMP-1786835248-000: 2228 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot sur ... show more Coordinated campaign CMP-1786835248-000: 2228 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-21 13:44:00 (1 week ago)	fail2ban jail apache-secrets-probe: 54.234.112.235 - - [09/Sep/2026:19:19:54 -0700] "GET /.env HTTP/1.1" 403 4404 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"	Web App Attack
Anonymous	2026-10-10 03:11:03 (3 weeks ago)	fail2ban jail apache-secrets-probe: 54.234.112.235 - - [09/Sep/2026:19:19:54 -0700] "GET /.env HTTP/1.1" 403 4404 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"	Web App Attack
🇩🇪 webanyone	2026-10-03 10:21:54 (4 weeks ago)	WAF-refused requests \| path: /.env, /	Web App Attack Hacking
🇺🇸 1cyb3rpunk	2026-10-02 14:09:39 (4 weeks ago)	Coordinated campaign CMP-1786835248-000: 1140 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surfac ... show more Coordinated campaign CMP-1786835248-000: 1140 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-01 13:29:55 (4 weeks ago)	fail2ban jail apache-secrets-probe: 54.234.112.235 - - [09/Sep/2026:19:19:54 -0700] "GET /.env HTTP/1.1" 403 4404 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"	Web App Attack
Anonymous	2026-09-25 13:29:40 (1 month ago)	fail2ban jail apache-secrets-probe: 54.234.112.235 - - [09/Sep/2026:19:19:54 -0700] "GET /.env HTTP/1.1" 403 4404 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"	Web App Attack
🇧🇷 radardatelecom	2026-09-23 22:23:07 (1 month ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
🇸🇮 administrator	2026-09-23 22:16:46 (1 month ago)	2026-09-23 00:06:25,339 fail2ban.actions [1182]: NOTICE [apache-badbots] Ban 54.234.112.235 2026-09-23 00:06:25,339 fail2ban.actions [1182]: NOTICE [apache-badbots] Ban 54.234.112.235 ...	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
Anonymous	2026-09-22 13:56:44 (1 month ago)	fail2ban jail apache-secrets-probe: 54.234.112.235 - - [09/Sep/2026:19:19:54 -0700] "GET /.env HTTP/1.1" 403 4404 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"	Web App Attack
🇺🇸 1cyb3rpunk	2026-09-22 01:24:29 (1 month ago)	Coordinated campaign CMP-1786835248-000: 912 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface ... show more Coordinated campaign CMP-1786835248-000: 912 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 1cyb3rpunk	2026-09-21 16:29:12 (1 month ago)	Coordinated campaign CMP-1786835248-000: 910 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface ... show more Coordinated campaign CMP-1786835248-000: 910 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 1cyb3rpunk	2026-09-19 22:34:42 (1 month ago)	Coordinated campaign CMP-1786835248-000: 861 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface ... show more Coordinated campaign CMP-1786835248-000: 861 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 1cyb3rpunk	2026-09-18 02:11:34 (1 month ago)	Coordinated campaign CMP-1786835248-000: 836 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface ... show more Coordinated campaign CMP-1786835248-000: 836 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 444 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇿🇦 102.217.243.131

🇲🇰 77.29.187.241

🇮🇳 66.116.252.157

🇳🇱 45.148.10.152

🇷🇺 31.29.214.9

🇺🇸 23.118.241.164

🇺🇸 20.150.193.142

🇨🇳 218.9.233.253

🇮🇳 117.216.33.31

🇨🇳 116.149.90.66

🇮🇩 114.141.58.22

🇻🇳 101.99.37.80

🇺🇸 66.132.159.37

🇺🇸 52.224.109.126

🇺🇸 47.251.142.84

🇵🇱 45.138.12.10

🇧🇪 35.206.135.80

🇺🇸 20.221.79.36

🇲🇽 189.203.237.8

🇵🇱 188.146.180.41