54.185.147.217

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
28 reports
26 reporters · latest 8 months ago
ISP
Amazon.com, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-54-185-147-217.us-west-2.compute.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Boardman, Oregon
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

54.185.147.217 has been reported 28 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
28 from 26 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 homeshowdomain.nl
Auto-ban: 244 malicious requests on 2026-03-05 (e.g., env/backup probes, brute-force, or error bursts).
Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl
Auto-ban: >3000 req/min op 2026-03-05
Web App Attack SSH Hacking
🇩🇪 Viveronese
HTTP vulnerability scanning
Web App Attack
🇫🇷 masterguru
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking Web App Attack
🇺🇸 conrad10781
nginx-dot-env
Web App Attack
🇫🇷 HerrWolf
CrowdSec Detection: crowdsecurity/http-admin-interface-probing
Web App Attack
🇬🇧 Aetherweb Ark
(mod_security) mod_security (id:949110) triggered by 54.185.147.217 (US/United States/ec2-54-185-147-217.us-west-2.compute.amazonaws.com): N in the last X secs
Web App Attack
🇫🇷 masterguru
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /server-status HTTP/1.1, GET /_ignition/health-check HTTP/1.1, GET /api/documentation HTTP/1.1
Hacking Web App Attack
🇬🇧 Apache
(mod_security) mod_security (id:210730) triggered by 54.185.147.217 (US/United States/ec2-54-185-147-217.us-west-2.compute.amazonaws.com): 5 in the last 300 secs
Brute-Force Web App Attack
Anonymous
suspicious request in access.log
Web App Attack
🇩🇪 Bedios GmbH
Login credentials theft attempt
Hacking
🇫🇷 Quarks Solutions
crowdsecurity/appsec-vpatch
Web App Attack
🇺🇸 myagent.site
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸 hyena
Repeated mod_security events.
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇿 94.158.60.26
🇺🇸 45.156.129.182
🇺🇸 35.81.39.40
🇰🇷 14.33.96.3
🇳🇱 193.47.62.31
🇳🇱 86.38.187.4
🇺🇸 66.132.159.123
🇻🇳 14.191.140.54
🇺🇸 222.167.96.190
🇺🇸 216.25.90.2
🇺🇸 216.25.89.157
🇨🇱 190.22.156.223
🇲🇽 187.145.152.14
🇨🇳 115.190.188.201
🇷🇺 94.243.14.198
🇺🇸 64.16.133.25
🇰🇷 59.5.166.198
🇨🇦 34.152.4.98
🇳🇱 192.253.248.226
🇳🇱 192.253.248.223
feedback