54.184.211.164

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
102 reports
86 reporters · latest 7 hours ago
ISP
Amazon.com, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-54-184-211-164.us-west-2.compute.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Boardman, Oregon
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
102 from 86 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 27 🇺🇸 United States of America 27 🇫🇷 France 15
Most common categories Web App Attack 90 Bad Web Bot 30 Hacking 29 Brute-Force 28 Port Scan 13
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Trying to access config files
Web App Attack
🇺🇸 leasj
Observed Scanned 1 known-sensitive endpoint(s), e.g.: /.git/config.
Hacking Bad Web Bot Web App Attack
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
Anonymous
Trying to access config files
Web App Attack
🇮🇩 David Koswari
REQ_BLOCKED_ACL
DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇩🇪 TheDjRider
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-11-11T03:46:23.956529398Z. Context: http_status=404
Web App Attack
🇮🇹 ipald
MIoT SecOps: Web probe: git-exposure [200]
Web App Attack
🇩🇪 thesimonmanuel
54.184.211.164 - - [11/Nov/2026:09:01:59 +0530] "GET /.git/config HTTP/2.0" 404 87 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/75.0.3770.103 Mobile/15E148 Safari/605.1" "54.184.211.164"
Web App Attack
🇫🇷 masterguru
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking Web App Attack
Anonymous
jails=sensitive-probe; categories=14,21; events=1; first=2026-11-11T02:58:45Z; last=2026-11-11T02:58:45Z
Port Scan Web App Attack
🇨🇦 TechnoSolutions CL
Hacking Brute-Force Bad Web Bot Web App Attack
Anonymous
54.184.211.164 - - [11/Nov/2026:03:52:19 +0100] "GET /.git/config HTTP/1.1" 301 169 "-" "WebZIP/3.5 (http://)"
Web App Attack
🇺🇸 interbiznw.com
malicious-web-requests-vulnerability-scanning
Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 kosada.com
Repeated requests for suspicious nonexistent URLs, for example: /.git/config (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.2; Trident/5.0)")
Web App Attack
🇺🇸 Blamdom
Hacking Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇾 185.53.74.188
🇺🇸 162.216.150.131
🇺🇸 47.190.117.191
🇷🇺 46.188.52.59
🇳🇱 45.153.34.217
🇯🇵 43.167.232.38
🇲🇩 37.75.123.146
🇺🇸 20.121.211.17
🇺🇸 20.29.27.184
🇰🇷 220.90.23.32
🇹🇷 193.35.153.236
🇦🇷 181.26.189.155
🇵🇱 172.64.200.87
🇺🇸 152.39.223.201
🇸🇬 145.223.151.13
🇸🇬 145.223.140.81
🇧🇷 131.0.201.128
🇮🇳 103.109.13.50
🇲🇦 41.141.94.224
🇬🇧 35.203.210.15
feedback