JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.167.4.231

54.167.4.231 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-167-4-231.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.167.4.231

Whois 54.167.4.231

IP Abuse Reports for 54.167.4.231:

This IP address has been reported a total of 43 times from 26 distinct sources. 54.167.4.231 was first reported on October 4th 2025, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2025-10-05 21:59:04 (8 months ago)	Auto-ban: >3000 req/min op 2025-10-05	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-10-05 00:05:48 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 54.167.4.231 (ec2-54-167-4-231.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.167.4.231 (ec2-54-167-4-231.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 20:05:42.234847 2025] [security2:error] [pid 20018:tid 20018] [client 54.167.4.231:52942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oligofoundry.com"] [uri "/.env"] [unique_id "aOG2Vu_Yytt8Tsmc30qLAQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-05 00:05:43 (8 months ago)	Restricted File Access Requests	Hacking Brute-Force
Anonymous	2025-10-04 23:38:33 (8 months ago)	Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET /phpinfo HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-10-04 21:59:06 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 54.167.4.231 (ec2-54-167-4-231.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.167.4.231 (ec2-54-167-4-231.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 17:59:01.783280 2025] [security2:error] [pid 1611:tid 1611] [client 54.167.4.231:58870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "network22.net"] [uri "/.env"] [unique_id "aOGYpUzIMJI7-7OcRtC7ogAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-04 20:17:53 (8 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇨🇭 YF	2025-10-04 20:05:02 (8 months ago)	Attempted access to sensitive files	Web App Attack
🇩🇪 on-com	2025-10-04 19:57:15 (8 months ago)	URL scan	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-10-04 19:38:58 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 54.167.4.231 (ec2-54-167-4-231.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.167.4.231 (ec2-54-167-4-231.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 15:38:54.016010 2025] [security2:error] [pid 29489:tid 29489] [client 54.167.4.231:58188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrbaystreet.com"] [uri "/.env"] [unique_id "aOF3znURaarI61XKDY1sngAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-04 19:02:32 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 54.167.4.231 (ec2-54-167-4-231.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.167.4.231 (ec2-54-167-4-231.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 15:02:26.647177 2025] [security2:error] [pid 10908:tid 10908] [client 54.167.4.231:50090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "monkeyonabike.com"] [uri "/.git/config"] [unique_id "aOFvQntfJJt9FEd1ABgVGwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kjaerulff	2025-10-04 18:52:01 (8 months ago)	Probed for .env vounabilities - 2 times	Web App Attack
🇺🇸 TPI-Abuse	2025-10-04 18:13:05 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 54.167.4.231 (ec2-54-167-4-231.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.167.4.231 (ec2-54-167-4-231.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 14:12:58.704606 2025] [security2:error] [pid 8027:tid 8027] [client 54.167.4.231:47692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mikeneame.com"] [uri "/.env"] [unique_id "aOFjqqf2SCMxv_1guoj3dgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-04 17:56:11 (8 months ago)	Aggressive Robot or Attack DDOS	DDoS Attack
🇱🇹 Evag Touf	2025-10-04 17:51:01 (8 months ago)	(mod_security) mod_security triggered on hostname [redacted] 54.167.4.231 (US/United States/-)	SQL Injection
🇺🇸 TPI-Abuse	2025-10-04 17:41:12 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 54.167.4.231 (ec2-54-167-4-231.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.167.4.231 (ec2-54-167-4-231.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 13:41:07.133966 2025] [security2:error] [pid 29569:tid 29569] [client 54.167.4.231:56862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "memrfixitok.com"] [uri "/portal/.env"] [unique_id "aOFcM0MF5Riqsl2R2GHC9gAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 141.98.9.39

🇳🇱 45.148.10.121

🇺🇸 192.169.136.182

🇨🇴 190.67.106.221

🇳🇱 172.94.9.215

🇩🇪 167.94.146.61

🇹🇷 94.154.43.46

🇺🇿 84.54.70.63

🇺🇸 47.77.215.90

🇳🇱 45.148.10.152

🇺🇸 2001:470:2cc:1::1e2

🇺🇸 192.169.244.109

🇹🇭 110.49.6.37

🇫🇮 91.186.220.81

🇺🇸 64.62.156.220

🇨🇳 60.8.73.250

🇧🇷 45.229.91.34

🇵🇱 23.230.91.191

🇺🇸 195.184.76.61

🇩🇪 167.94.146.58