JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.145.129.228

Neutral Activity

Abuse confidence score ?

0% Low Risk

33 reports

23 reporters · latest 2 years ago

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-145-129-228.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.145.129.228 has been reported 33 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 54.145.129.228

This IP address has been reported a total of 33 times from 23 distinct sources. 54.145.129.228 was first reported on September 27th 2021, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-02-19 05:17:25 (2 years ago)	Common attack or app scan event detected and blocked	Port Scan Hacking Web App Attack
🇫🇮 6kilowatti	2022-08-22 06:55:26 (4 years ago)	54.145.129.228 triggered Icarus honeypot on port 1723. Server: Lempäälä. Check us out on github.	Port Scan Hacking
🇺🇸 tinyshield.me	2021-10-06 09:38:48 (4 years ago)	Provided by tinyshield.me - Simple Security For WordPress	Brute-Force Web App Attack
🇩🇪 Gwyneth Llewelyn	2021-10-01 19:30:14 (4 years ago)	54.145.129.228 - - [02/Oct/2021:00:30:11 +0100] "GET /.env HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Macin ... show more 54.145.129.228 - - [02/Oct/2021:00:30:11 +0100] "GET /.env HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 2021/10/02 00:30:11 [error] 1647522#1647522: *2152 access forbidden by rule, client: 54.145.129.228, server: virtualgovernance.tk, request: "GET /.env HTTP/2.0", host: "virtualgovernance.tk" 54.145.129.228 - - [02/Oct/2021:00:30:11 +0100] "GET /.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Web App Attack
🇬🇧 Epimetheus	2021-10-01 11:26:46 (4 years ago)	Unauthorized access attempts: From: 54.145.129.228 Method: HTTP GET URI Path: /.env UA: "Moz ... show more Unauthorized access attempts: From: 54.145.129.228 Method: HTTP GET URI Path: /.env UA: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Web App Attack
🇺🇸 HJ5Ss4Ju	2021-10-01 00:33:57 (4 years ago)	WordPress XMLRPC scan :: 54.145.129.228 - - [01/Oct/2021:04:33:57 0000] "GET //xmlrpc.php?rsd HTTP/ ... show more WordPress XMLRPC scan :: 54.145.129.228 - - [01/Oct/2021:04:33:57 0000] "GET //xmlrpc.php?rsd HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" show less	Hacking Brute-Force Web App Attack
🇫🇷 security.rdmc.fr	2021-09-30 22:48:40 (4 years ago)	Automatic report - Banned IP Access	Web App Attack
Anonymous	2021-09-30 22:00:42 (4 years ago)	54.145.129.228 - - [01/Oct/2021:04:00:40 +0200] "POST //xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5. ... show more 54.145.129.228 - - [01/Oct/2021:04:00:40 +0200] "POST //xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 54.145.129.228 - - [01/Oct/2021:04:00:40 +0200] "POST //xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 54.145.129.228 - - [01/Oct/2021:04:00:40 +0200] "POST //xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" ... show less	Web App Attack
🇬🇧 findlab	2021-09-30 19:53:01 (4 years ago)	Backdrop CMS module - Request: //wp-includes/wlwmanifest.xml	Bad Web Bot Web App Attack
Anonymous	2021-09-30 19:04:43 (4 years ago)	Fail2Ban Log Report - 54.145.129.228 - - [01/Oct/2021:01:04:40 +0200] "GET //wp-includes/wlwmanifes ... show more Fail2Ban Log Report - 54.145.129.228 - - [01/Oct/2021:01:04:40 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 403 1967 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" "2.03" ... show less	Hacking SQL Injection Web App Attack
🇩🇪 Gwyneth Llewelyn	2021-09-30 06:15:19 (4 years ago)	54.145.129.228 - - [30/Sep/2021:11:15:16 +0100] "GET /.env HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Macin ... show more 54.145.129.228 - - [30/Sep/2021:11:15:16 +0100] "GET /.env HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 2021/09/30 11:15:17 [error] 571252#571252: *401262 access forbidden by rule, client: 54.145.129.228, server: virtualgovernance.tk, request: "GET /.env HTTP/2.0", host: "virtualgovernance.tk" 54.145.129.228 - - [30/Sep/2021:11:15:17 +0100] "GET /.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Web App Attack
🇫🇷 I.Hate.Spam	2021-09-30 04:50:55 (4 years ago)	Website hacking attempt	Hacking
🇺🇸 HJ5Ss4Ju	2021-09-30 04:23:10 (4 years ago)	Forbidden directory scan :: 2021/09/30 08:23:10 [error] 957#957: 14307 access forbidden by rule, cl ... show more Forbidden directory scan :: 2021/09/30 08:23:10 [error] 957#957: 14307 access forbidden by rule, client: 54.145.129.228, server: static.[censored_1], request: "GET /.env HTTP/2.0", host: "static.[censored_1]" show less	Hacking
Anonymous	2021-09-29 20:30:29 (4 years ago)	$f2bV_matches	Brute-Force
🇦🇺 ozisp.com.au	2021-09-29 17:20:30 (4 years ago)	US_Amazon Amazon_<177>1632950429 [1:2031502:2] ET INFO Request to Hidden Environment File [Classific ... show more US_Amazon Amazon_<177>1632950429 [1:2031502:2] ET INFO Request to Hidden Environment File [Classification: Misc Attack] [Priority: 2]: <seconione-ens192-1> {TCP} 54.145.129.228:57755 show less	Hacking

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 203.175.125.201

🇵🇱 195.3.220.7

🇺🇸 150.107.38.251

🇻🇳 103.237.144.204

🇷🇴 92.118.39.213

🇷🇴 92.118.39.212

🇷🇴 92.118.39.211

🇺🇦 91.244.17.70

🇺🇸 66.132.224.228

🇷🇺 37.28.177.141

🇧🇷 177.201.2.42

🇷🇴 92.118.39.210

🇷🇴 92.118.39.209

🇷🇴 92.118.39.205

🇷🇴 92.118.39.204

🇫🇷 92.93.99.25

🇱🇹 62.60.130.201

🇸🇬 47.128.98.79

🇷🇴 92.118.39.203

🇷🇴 92.118.39.202