JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.161.9.194

54.161.9.194 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 74%: ?

74%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-161-9-194.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.161.9.194

Whois 54.161.9.194

IP Abuse Reports for 54.161.9.194:

This IP address has been reported a total of 16 times from 12 distinct sources. 54.161.9.194 was first reported on July 16th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-07-18 22:35:39 (17 hours ago)	[SunJul1900:35:36.3341662026][security2:error][pid2533421:tid2533717][client54.161.9.194:0]ModSecuri ... show more [SunJul1900:35:36.3341662026][security2:error][pid2533421:tid2533717][client54.161.9.194:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"duoacaja.com\"][uri\"/robots.txt\"][unique_id\"alv_uGAkBfCKCq-1iOMaZwAAAVQ\"] show less	Hacking Web App Attack
🇬🇧 Mendip_Defender	2026-07-18 20:56:44 (18 hours ago)	54.161.9.194 - - [18/Jul/2026:21:33:31 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (c ... show more 54.161.9.194 - - [18/Jul/2026:21:33:31 +0100] "GET /robots.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, [email protected])" 54.161.9.194 - - [18/Jul/2026:21:33:31 +0100] "GET /robots.txt HTTP/1.1" 301 5560 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, [email protected])" 54.161.9.194 - - [18/Jul/2026:21:56:41 +0100] "GET /robots.txt HTTP/1.1" 301 5560 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, [email protected])" ... show less	Hacking Web App Attack
🇺🇸 Alvino	2026-07-18 07:36:56 (1 day ago)	Blocked due to using a VPN or data center IP with abuse: 65	Web Spam VPN IP
🇩🇪 Hazzard	2026-07-18 07:20:58 (1 day ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇧🇪 taivas.nl	2026-07-18 06:32:12 (1 day ago)	Bad_requests	Bad Web Bot
🇪🇸 elcruzado.es	2026-07-18 06:02:53 (1 day ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.161.9.194 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.161.9.194 (US/United States/ec2-54-161-9-194.compute-1.amazonaws.com) show less	Bad Web Bot
🇩🇪 grassau.com	2026-07-18 04:42:52 (1 day ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.161.9.194 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.161.9.194 (US/United States/Virginia/Ashburn/ec2-54-161-9-194.compute-1.amazonaws.com) show less	Bad Web Bot
🇩🇪 DocNetzwerk	2026-07-18 03:30:21 (1 day ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.161.9.194 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.161.9.194 (US/United States/ec2-54-161-9-194.compute-1.amazonaws.com) show less	Bad Web Bot
🇳🇱 Roderic	2026-07-17 23:53:37 (1 day ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇩🇪 4server	2026-07-17 21:04:52 (1 day ago)	[FriJul1723:04:50.9177782026][security2:error][pid2375930:tid2375935][client54.161.9.194:0]ModSecuri ... show more [FriJul1723:04:50.9177782026][security2:error][pid2375930:tid2375935][client54.161.9.194:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"artisteer-italia.org\"][uri\"/robots.txt\"][unique_id\"alqY8pqsSLSvmjit94g1vAAAAQI\"] show less	Port Scan Brute-Force Web App Attack
🇭🇺 kranem	2026-07-17 21:00:13 (1 day ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 14618 (Amazon.com, Inc.) Protocol: HTTP/1 ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 14618 (Amazon.com, Inc.) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-07-17T20:14:00Z User-Agent: Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, [email protected]) show less	Bad Web Bot
Anonymous	2026-07-17 19:27:39 (1 day ago)	Banned by Fail2Ban on server	Web App Attack
🇨🇭 backslash	2026-07-17 15:33:01 (2 days ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇩🇪 Hazzard	2026-07-17 05:12:53 (2 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇩🇪 grassau.com	2026-07-16 21:44:53 (2 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.161.9.194 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.161.9.194 (US/United States/Virginia/Ashburn/ec2-54-161-9-194.compute-1.amazonaws.com) show less	Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 167.126.6.183

🇨🇳 116.168.104.85

🇨🇳 42.53.32.91

🇺🇸 164.92.90.240

🇮🇷 78.39.209.90

🇺🇸 63.47.149.59

🇳🇱 45.198.224.120

🇺🇸 45.194.67.27

🇻🇪 186.96.73.6

🇻🇳 171.231.180.11

🇮🇳 103.66.78.51

🇺🇸 18.235.182.164

🇵🇱 176.53.159.197

🇿🇼 74.244.197.117

🇸🇬 47.82.51.39

🇳🇿 45.133.7.104

🇳🇿 45.133.7.103

🇰🇪 197.248.207.138

🇩🇪 185.242.3.195

🇻🇳 171.243.150.226