JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.160.126.6

Activity Trending Down

Abuse Confidence Score

10% Caution

2 reports

2 reporters · latest 3 weeks ago

ISP: Amazon Technologies Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14618
Hostname(s): ec2-54-160-126-6.compute-1.amazonaws.com
Domain Name: amazon.com
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

2 from 2 distinct reporters

First reported

October 20th 2026

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇩🇪 Germany 1 🇺🇸 United States of America 1

Most common categories Bad Web Bot 2 Port Scan 1 Brute-Force 1 Web Spam 1 Web App Attack 1

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 arthome.info	2026-10-20 23:28:00 UTC · (3 weeks ago)	54.160.126.6 - - [20/Oct/2026:00:41:35 +0200] "GET / HTTP/1.1" "-" "Download Demon/3.5.0.11"	Bad Web Bot Web Spam Port Scan
🇺🇸 TPI-Abuse	2026-10-20 17:18:05 UTC · (3 weeks ago)	(mod_security) mod_security (id:210831) triggered by 54.160.126.6 (ec2-54-160-126-6.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 13:17:58.971159 2026] [security2:error] [pid 17641:tid ... show more (mod_security) mod_security (id:210831) triggered by 54.160.126.6 (ec2-54-160-126-6.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 13:17:58.971159 2026] [security2:error] [pid 17641:tid 17641] [client 54.160.126.6:50052] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|dpcfab.com\|F\|4"] [data "Microsoft URL"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "dpcfab.com"] [uri "/"] [unique_id "ateiRpplooviA2n_hhesjAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇦 217.73.91.80

🇳🇱 193.47.62.69

🇲🇽 187.190.35.163

🇬🇧 143.110.160.17

🇧🇷 45.175.0.125

🇺🇸 2a03:2880:f818:2::

🇰🇷 211.226.63.61

🇧🇷 45.239.74.121

🇺🇸 45.132.184.29

🇳🇱 45.9.150.214

🇺🇸 34.24.112.227

🇺🇸 2a10:4a00:cccd:f609:c2e7:abe0:83d4:5b49

🇨🇳 221.228.203.3

🇳🇱 213.209.159.226

🇺🇸 147.90.234.214

🇺🇸 142.93.199.146

🇺🇸 66.228.34.203

🇫🇮 65.21.74.21

🇩🇪 207.154.230.208

🇺🇸 162.233.105.62