JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.145.16.228

54.145.16.228 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 36%: ?

36%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-145-16-228.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.145.16.228

Whois 54.145.16.228

IP Abuse Reports for 54.145.16.228:

This IP address has been reported a total of 32 times from 29 distinct sources. 54.145.16.228 was first reported on April 24th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-04-27 14:41:29 (1 month ago)	54.145.16.228 - - [27/Apr/2026:17:41:26 +0300] "GET /.env HTTP/1.1" 404 763 "-" "python-requests/2.3 ... show more 54.145.16.228 - - [27/Apr/2026:17:41:26 +0300] "GET /.env HTTP/1.1" 404 763 "-" "python-requests/2.33.1" 54.145.16.228 - - [27/Apr/2026:17:41:28 +0300] "GET /.env HTTP/1.1" 404 3362 "-" "python-requests/2.33.1" ... show less	Web App Attack
🇩🇪 raph	2026-04-27 14:35:19 (1 month ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
Anonymous	2026-04-27 12:59:04 (1 month ago)	[27/Apr/2026:15:59:01 +0300] 177729474185.128955 54.145.16.228 56502 148.251.76.218 80 [27/Apr/2026: ... show more [27/Apr/2026:15:59:01 +0300] 177729474185.128955 54.145.16.228 56502 148.251.76.218 80 [27/Apr/2026:15:59:02 +0300] 177729474288.158164 54.145.16.228 56512 148.251.76.218 443 show less	Web App Attack
🇨🇿 ptlab	2026-04-27 12:45:11 (1 month ago)	Detected env_leak attack from WP-host.	Hacking Web App Attack
🇩🇪 london2038.com	2026-04-27 12:26:28 (1 month ago)	Probing for exploits 54.145.16.228 - - [27/Apr/2026:14:26:23 +0200] "GET /.env HTTP/1.1" 422 0 "-" " ... show more Probing for exploits 54.145.16.228 - - [27/Apr/2026:14:26:23 +0200] "GET /.env HTTP/1.1" 422 0 "-" "python-requests/2.33.1" 54.145.16.228 - - [27/Apr/2026:14:26:24 +0200] "GET /.env HTTP/1.1" 422 0 "-" "python-requests/2.33.1" show less	Hacking Web App Attack
🇳🇱 mieg	2026-04-27 11:28:17 (1 month ago)	Web vulnerability probing	Brute-Force Web App Attack
Anonymous	2026-04-27 11:03:59 (1 month ago)	"GET /.env HTTP/1.1"	Hacking Web App Attack
🇫🇷 mrcrassi	2026-04-27 10:09:41 (1 month ago)	Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET ... show more Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /.env UA: python-requests/2.33.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-04-27 06:30:01 (1 month ago)	suspicious request in access.log	Web App Attack
🇬🇧 Bytemark	2026-04-27 06:26:55 (1 month ago)	54.145.16.228 - - [27/Apr/2026:07:26:54 +0100] "GET /.env HTTP/1.1" 200 5648 "-" "python-requests/2. ... show more 54.145.16.228 - - [27/Apr/2026:07:26:54 +0100] "GET /.env HTTP/1.1" 200 5648 "-" "python-requests/2.33.1" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-27 06:09:10 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 54.145.16.228 (ec2-54-145-16-228.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.145.16.228 (ec2-54-145-16-228.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 02:09:03.529646 2026] [security2:error] [pid 6986:tid 6986] [client 54.145.16.228:64528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.serviciodepinturadecasas.com"] [uri "/.env"] [unique_id "ae79f47U0NupyKJBi9dqeQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 SilverZippo	2026-04-27 03:51:14 (1 month ago)	Web App Attack	Web App Attack
🇧🇪 voormedia	2026-04-27 03:20:47 (1 month ago)	Accessed trap at '/.env'	Web App Attack
🇫🇮 tjs	2026-04-26 22:10:00 (1 month ago)	web attack, SQL injection attempt	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2026-04-26 16:48:10 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 54.145.16.228 (ec2-54-145-16-228.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.145.16.228 (ec2-54-145-16-228.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 12:48:02.951373 2026] [security2:error] [pid 25742:tid 25742] [client 54.145.16.228:59590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.powerkiteforum.com"] [uri "/.env"] [unique_id "ae5BwkeGsWlpnDEvFGuFcQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 188.190.219.241

🇺🇿 213.230.92.215

🇯🇵 160.16.127.33

🇳🇬 152.32.141.86

🇰🇿 147.30.143.81

🇳🇱 146.70.175.4

🇺🇸 136.117.35.48

🇯🇵 87.83.100.173

🇺🇸 66.132.195.49

🇲🇾 47.254.238.212

🇧🇪 34.79.0.222

🇮🇷 5.113.71.231

🇳🇱 176.65.139.249

🇺🇸 162.216.149.45

🇵🇰 103.121.7.18

🇸🇬 45.78.198.199

🇨🇳 42.248.129.234

🇫🇷 35.181.172.72

🇹🇼 34.81.84.111

🇪🇬 220.171.34.197