JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.145.18.152

54.145.18.152 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 79%: ?

79%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-145-18-152.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.145.18.152

Whois 54.145.18.152

IP Abuse Reports for 54.145.18.152:

This IP address has been reported a total of 16 times from 13 distinct sources. 54.145.18.152 was first reported on July 24th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-27 15:03:47 (18 hours ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ... show more Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-27 14:42:30 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.145.18.152 (ec2-54-145-18-152.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.145.18.152 (ec2-54-145-18-152.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:42:23.629709 2026] [security2:error] [pid 959681:tid 959681] [client 54.145.18.152:36010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "studiopilates.net"] [uri "/.git/config"] [unique_id "amduT7pu42P7D90q1HgDdAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-07-27 11:30:02 (21 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇮🇹 CoreTech srl	2026-07-27 11:03:59 (22 hours ago)	cloudlinux2 fail2ban: 2026-07-27 13:01:37,427 fail2ban.actions [1917]: NOTICE [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-07-27 13:01:37,427 fail2ban.actions [1917]: NOTICE [plesk-modsecurity] Unban 103.162.216.249cloudlinux2 fail2ban: 2026-07-27 13:01:48,538 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 106.219.162.173 - 2026-07-27 13:01:47cloudlinux2 fail2ban: 2026-07-27 13:01:56,763 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 106.192.108.187 - 2026-07-27 13:01:56cloudlinux2 fail2ban: 2026-07-27 13:02:38,119 fail2ban.actions [1917]: NOTICE [plesk-modsecurity] Unban 172.111.80.56cloudlinux2 fail2ban: 2026-07-27 13:02:48,142 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 54.145.18.152 - 2026-07-27 13:02:48cloudlinux2 fail2ban: 2026-07-27 13:02:48,160 fail2ban.filter [1917]: INFO [recidive] Found 54.145.18.152 - 2026-07-27 13:02:48cloudlinux2 fail2ban: 2026-07-27 13:02:48,037 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 54.145.18.152 - 2026-07-27 13:02:48cloudlinux2 fail2ban: 2026-07-27 13:02:48, show less	Brute-Force
🇫🇷 COMAITE	2026-07-27 10:48:47 (22 hours ago)	Suspicious URL access.	Web App Attack
🇮🇹 VHosting	2026-07-27 10:15:03 (23 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-27 09:59:35 (23 hours ago)	Multiple WAF Violations	Web App Attack
🇩🇪 paissangroup	2026-07-27 09:33:47 (23 hours ago)	Multiple WAF Violations	Web App Attack
🇩🇪 larse99	2026-07-27 09:23:17 (23 hours ago)	Detected Scanning / Hacking activity	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-07-27 08:23:17 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 54.145.18.152 (ec2-54-145-18-152.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.145.18.152 (ec2-54-145-18-152.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:23:11.405366 2026] [security2:error] [pid 4184385:tid 4184385] [client 54.145.18.152:45504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "studioarmanni.com"] [uri "/.git/config"] [unique_id "amcVbytbrMNyzXTo43QZUQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 07:39:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 54.145.18.152 (ec2-54-145-18-152.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.145.18.152 (ec2-54-145-18-152.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 03:39:21.180715 2026] [security2:error] [pid 3503571:tid 3503571] [client 54.145.18.152:39422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "studio716.info"] [uri "/.git/config"] [unique_id "amcLKT4hCTNY3G0oOS-_fQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-27 05:57:58 (1 day ago)	Aggressive web scan	Web App Attack
🇩🇪 Ba-Yu	2026-07-27 05:40:14 (1 day ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇳🇱 e.fierstra	2026-07-27 05:18:00 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-07-25 00:48:31 (3 days ago)	20 attempts against mh_ha-misbehave-ban on pea	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.253.1.17

🇺🇸 162.216.149.182

🇺🇸 135.119.96.21

🇺🇸 135.119.63.61

🇰🇷 115.68.226.19

🇮🇳 103.199.225.154

🇷🇺 95.156.120.26

🇺🇸 92.204.138.58

🇳🇱 91.92.40.17

🇫🇷 85.217.140.49

🇮🇪 83.70.248.106

🇷🇺 78.36.7.89

🇺🇸 66.132.172.155

🇺🇸 49.51.252.146

🇩🇪 165.245.246.151

🇵🇰 153.117.29.44

🇺🇸 147.182.142.174

🇺🇸 129.121.123.165

🇨🇳 103.85.85.175

🇸🇬 94.231.206.8