JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.189.134.195

54.189.134.195 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 63%: ?

63%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-189-134-195.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.189.134.195

Whois 54.189.134.195

IP Abuse Reports for 54.189.134.195:

This IP address has been reported a total of 11 times from 10 distinct sources. 54.189.134.195 was first reported on July 14th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-16 15:18:10 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.189.134.195 (ec2-54-189-134-195.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 54.189.134.195 (ec2-54-189-134-195.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 11:18:05.230329 2026] [security2:error] [pid 29103:tid 29283] [client 54.189.134.195:48790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cspmedia.com"] [uri "/.git/config"] [unique_id "alj2LWFXiWggGAq61HvPiAAAAkw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 10:45:40 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.189.134.195 (ec2-54-189-134-195.us-west-2.co ... show more (mod_security) mod_security (id:210492) triggered by 54.189.134.195 (ec2-54-189-134-195.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 06:45:32.045336 2026] [security2:error] [pid 18564:tid 18564] [client 54.189.134.195:39406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "csems.org"] [uri "/.git/config"] [unique_id "ali2TONKFC1mbQPz5wAfKgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 DocNetzwerk	2026-07-16 09:45:03 (13 hours ago)	54.189.134.195 (US/United States/ec2-54-189-134-195.us-west-2.compute.amazonaws.com), more than 7 Ap ... show more 54.189.134.195 (US/United States/ec2-54-189-134-195.us-west-2.compute.amazonaws.com), more than 7 Apache 403 hits show less	Hacking
🇫🇷 masterguru	2026-07-16 01:43:38 (21 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
Anonymous	2026-07-16 01:27:51 (21 hours ago)	54.189.134.195 - - [16/Jul/2026:03:27:39 +0200] "GET /info.php HTTP/1.1" 404 29226 54.189.134.195 - ... show more 54.189.134.195 - - [16/Jul/2026:03:27:39 +0200] "GET /info.php HTTP/1.1" 404 29226 54.189.134.195 - - [16/Jul/2026:03:27:40 +0200] "GET /php.php HTTP/1.1" 404 29226 54.189.134.195 - - [16/Jul/2026:03:27:41 +0200] "GET /i.php HTTP/1.1" 404 29226 54.189.134.195 - - [16/Jul/2026:03:27:42 +0200] "GET /pi.php HTTP/1.1" 404 29226 54.189.134.195 - - [16/Jul/2026:03:27:43 +0200] "GET /pinfo.php HTTP/1.1" 404 29226 54.189.134.195 - - [16/Jul/2026:03:27:44 +0200] "GET /test.php HTTP/1.1" 404 29226 54.189.134.195 - - [16/Jul/2026:03:27:45 +0200] "GET /phpinfo HTTP/1.1" 404 29866 54.189.134.195 - - [16/Jul/2026:03:27:46 +0200] "GET /p.php HTTP/1.1" 404 29226 54.189.134.195 - - [16/Jul/2026:03:27:47 +0200] "GET /debug.php HTTP/1.1" 404 29226 54.189.134.195 - - [16/Jul/2026:03:27:48 +0200] "GET /info HTTP/1.1" 404 29866 ... show less	Web Spam Web App Attack
🇫🇷 dynamix	2026-07-16 00:59:21 (22 hours ago)	Multiple WAF Violations	Web App Attack
🇧🇪 cmbplf	2026-07-15 22:42:18 (1 day ago)	5.166 requests with url.path .env 727 requests with url.path phpinfo.php	Brute-Force Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-07-15 21:59:51 (1 day ago)	Auto-ban: >3000 req/min op 2026-07-15	Web App Attack SSH Hacking
🇳🇱 Site.eu	2026-07-15 19:58:22 (1 day ago)	Excessive 404/403 errors	Brute-Force
Anonymous	2026-07-14 23:18:48 (1 day ago)	54.189.134.195 - - [15/Jul/2026:01:17:29 +0200] "GET /joomla/.env HTTP/1.1" 403 177 "-" "Mozilla/5.0 ... show more 54.189.134.195 - - [15/Jul/2026:01:17:29 +0200] "GET /joomla/.env HTTP/1.1" 403 177 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇦🇺 artful	2026-07-14 21:35:00 (2 days ago)	Excessive errors ~1k in recent hours	Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 2a09:bac5:31ce:2db9::48e:66

🇳🇱 91.92.42.195

🇺🇸 35.237.94.18

🇺🇸 205.210.31.65

🇮🇳 117.223.206.190

🇳🇱 195.178.110.26

🇮🇳 103.138.237.18

🇭🇰 42.2.197.219

🇸🇪 194.103.82.72

🇧🇷 189.50.142.82

🇺🇸 179.61.192.160

🇵🇱 176.53.159.198

🇨🇳 120.48.151.153

🇮🇩 103.97.101.25

🇮🇷 87.107.193.249

🇱🇹 62.60.130.219

🇨🇴 190.24.103.27

🇺🇸 185.8.106.168

🇺🇸 161.35.118.149

🇨🇳 123.163.52.74