JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.160.170.215

Neutral Activity

Abuse confidence score ?

0% Low Risk

46 reports

39 reporters · latest 1 year ago

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-160-170-215.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.160.170.215 has been reported 46 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 54.160.170.215

Export CSV

This IP address has been reported a total of 46 times from 39 distinct sources. 54.160.170.215 was first reported on September 28th 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-09-29 20:09:04 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 octageeks.com	2025-09-29 04:06:30 (1 year ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇹🇷 rtbh.com.tr	2025-09-29 00:09:03 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-28 20:09:03 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2025-09-28 13:58:12 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 54.160.170.215 (ec2-54-160-170-215.compute-1.am ... show more (mod_security) mod_security (id:225170) triggered by 54.160.170.215 (ec2-54-160-170-215.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 28 09:58:07.590030 2025] [security2:error] [pid 746:tid 746] [client 54.160.170.215:62723] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.socialalchemy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.socialalchemy.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNk-77n1oF3-7-LX7eWuqAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2025-09-28 13:29:47 (1 year ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [wa02]	Bad Web Bot Web App Attack
🇱🇹 NotACaptcha	2025-09-28 13:24:09 (1 year ago)	webserver:80 [28/Sep/2025] "GET / HTTP/1.1" 200 444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) ... show more webserver:80 [28/Sep/2025] "GET / HTTP/1.1" 200 444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" webserver:80 [28/Sep/2025] "GET /xmlrpc.php?rsd HTTP/1.1" 404 210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" webserver:80 [28/Sep/2025] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" webserver:80 [28/Sep/2025] "GET / HTTP/1.1" 200 444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" webserver:80 [28/Sep/2025] "GET / HTTP/1.1" 200 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Web App Attack
🇸🇬 pusathosting.com	2025-09-28 13:18:03 (1 year ago)	2ds22 bruteforce	Brute-Force Web App Attack
🇨🇦 polycoda	2025-09-28 13:11:26 (1 year ago)	🔑 Probes for xmlrpc.php everywhere	Hacking Web App Attack
Anonymous	2025-09-28 13:05:50 (1 year ago)	54.160.170.215 - sliver85.eu - [28/Sep/2025:15:05:44 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windo ... show more 54.160.170.215 - sliver85.eu - [28/Sep/2025:15:05:44 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.160.170.215 - sliver85.eu - [28/Sep/2025:15:05:45 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Brute-Force Web App Attack
🇫🇮 as211431.net	2025-09-28 13:02:49 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /sito/wp-includes/wlwmanifest.xml UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 2000cn.com.au	2025-09-28 12:59:30 (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-09-28 12:46:10 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 54.160.170.215 (ec2-54-160-170-215.compute-1.am ... show more (mod_security) mod_security (id:225170) triggered by 54.160.170.215 (ec2-54-160-170-215.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 28 08:46:03.432009 2025] [security2:error] [pid 22726:tid 22726] [client 54.160.170.215:62711] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|skinnywheels.xyz\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "skinnywheels.xyz"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNkuC5N1rshm51m-bofcawAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-09-28 12:04:13 (1 year ago)	Bot / seems abusive / Apache connections: 44	DDoS Attack Web Spam Bad Web Bot Web App Attack
Anonymous	2025-09-28 10:55:42 (1 year ago)	...	Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.50

🇩🇪 193.36.236.18

🇺🇸 185.251.19.129

🇹🇷 176.235.182.82

🇭🇰 154.92.2.59

🇨🇳 125.88.225.11

🇰🇷 118.37.214.187

🇺🇸 100.59.196.196

🇷🇴 80.94.92.234

🇳🇱 45.153.34.117

🇳🇱 45.148.10.5

🇺🇸 34.41.211.48

🇮🇩 202.158.36.50

🇧🇷 177.172.67.177

🇿🇦 152.110.151.48

🇮🇳 122.168.197.245

🇮🇳 117.250.94.35

🇰🇷 112.164.240.110

🇿🇦 102.132.175.207

🇮🇱 91.90.163.15