JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.193.3.195

54.193.3.195 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 0%: ?

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-193-3-195.us-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.193.3.195

Whois 54.193.3.195

IP Abuse Reports for 54.193.3.195:

This IP address has been reported a total of 63 times from 39 distinct sources. 54.193.3.195 was first reported on June 8th 2023, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 zwh	2023-06-15 19:12:59 (3 years ago)	SMTP Brute-Force	Brute-Force
🇩🇪 kreativstrecke	2023-06-14 12:14:53 (3 years ago)	Jun 14 14:14:51 srv02 postfix/smtps/smtpd[3933985]: lost connection after CONNECT from ec2-54-193-3- ... show more Jun 14 14:14:51 srv02 postfix/smtps/smtpd[3933985]: lost connection after CONNECT from ec2-54-193-3-195.us-west-1.compute.amazonaws.com[54.193.3.195] Jun 14 14:14:52 srv02 postfix/smtps/smtpd[3933985]: lost connection after CONNECT from ec2-54-193-3-195.us-west-1.compute.amazonaws.com[54.193.3.195] Jun 14 14:14:52 srv02 postfix/smtps/smtpd[3933985]: lost connection after CONNECT from ec2-54-193-3-195.us-west-1.compute.amazonaws.com[54.193.3.195] ... show less	Brute-Force
🇻🇳 trung.fun	2023-06-14 09:40:50 (3 years ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇩🇪 niceshops.com	2023-06-14 03:59:38 (3 years ago)	Web Attack ([14/Jun/2023:05:59:37.547] GET /_profiler/phpinfo)	Web App Attack
🇺🇦 URAN Publishing Service	2023-06-14 00:29:43 (3 years ago)	54.193.3.195 - - [14/Jun/2023:03:29:13 +0300] "GET /.env HTTP/1.1" 404 284 "-" "Mozilla/5.0 (X11; Li ... show more 54.193.3.195 - - [14/Jun/2023:03:29:13 +0300] "GET /.env HTTP/1.1" 404 284 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 54.193.3.195 - - [14/Jun/2023:03:29:42 +0300] "GET /sendgrid/.env HTTP/1.1" 404 284 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
🇭🇺 DumaNet	2023-06-13 19:30:23 (3 years ago)	Web app attack attempts, scanning for vulnerability. Date: 2023 Jun 13. 14:45:38 Source IP: 54.193 ... show more Web app attack attempts, scanning for vulnerability. Date: 2023 Jun 13. 14:45:38 Source IP: 54.193.3.195 Portion of the log(s): 54.193.3.195 - [13/Jun/2023:14:45:35 +0200] "POST /.env_1 HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 54.193.3.195 - [13/Jun/2023:14:45:34 +0200] "GET /.env_1 HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 54.193.3.195 - [13/Jun/2023:14:45:34 +0200] "POST /.env.www HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 54.193.3.195 - [13/Jun/2023:14:45:34 +0200] "GET /.env.www HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 54.193.3.195 - [13/Jun/2023:14:45:33 +0200] "POST /.env.old HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit .... show less	Web App Attack
🇮🇪 RoboSOC	2023-06-13 18:46:43 (3 years ago)	phpunit Remote Code Execution Vulnerability, PTR: ec2-54-193-3-195.us-west-1.compute.amazonaws.com.	Hacking
Anonymous	2023-06-13 18:31:01 (3 years ago)	Backdrop CMS module - Request: /vendor/phpunit/phpunit/src/Util/PHP/eval-std...	Bad Web Bot Web App Attack
Anonymous	2023-06-13 13:58:07 (3 years ago)	Jun 13 16:58:07 ns sm-mta[47805]: 35DDw7ow047805: rejecting commands from ec2-54-193-3-195.us-west-1 ... show more Jun 13 16:58:07 ns sm-mta[47805]: 35DDw7ow047805: rejecting commands from ec2-54-193-3-195.us-west-1.compute.amazonaws.com [54.193.3.195] due to pre-greeting traffic after 0 seconds Jun 13 16:58:07 ns sm-mta[44931]: 35DDw7bm044931: ec2-54-193-3-195.us-west-1.compute.amazonaws.com [54.193.3.195] did not issue MAIL/EXPN/VRFY/ETRN during connection to TLSMTA ... show less	Email Spam
Anonymous	2023-06-13 09:58:58 (3 years ago)	Jun 13 12:58:57 ns sm-mta[68277]: 35D9wvfW068277: rejecting commands from ec2-54-193-3-195.us-west-1 ... show more Jun 13 12:58:57 ns sm-mta[68277]: 35D9wvfW068277: rejecting commands from ec2-54-193-3-195.us-west-1.compute.amazonaws.com [54.193.3.195] due to pre-greeting traffic after 0 seconds Jun 13 12:58:57 ns sm-mta[67259]: 35D9wvrr067259: ec2-54-193-3-195.us-west-1.compute.amazonaws.com [54.193.3.195] did not issue MAIL/EXPN/VRFY/ETRN during connection to TLSMTA ... show less	Email Spam
Anonymous	2023-06-13 08:05:27 (3 years ago)	54.193.3.195 - - \[13/Jun/2023:16:05:26 +0800\] \"GET /admin/.env HTTP/1.1\" 404 53236 \"-\" \"Mozil ... show more 54.193.3.195 - - \[13/Jun/2023:16:05:26 +0800\] \"GET /admin/.env HTTP/1.1\" 404 53236 \"-\" \"Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_10_1\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/39.0.2171.95 Safari/537.36\" show less	Web App Attack
🇬🇧 David Gebler	2023-06-13 07:30:04 (3 years ago)	54.193.3.195 - - [13/Jun/2023:07:30:03 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.p ... show more 54.193.3.195 - - [13/Jun/2023:07:30:03 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 403 5486 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" show less	Brute-Force Web App Attack
🇫🇷 Grincheux	2023-06-13 06:12:56 (3 years ago)	Jun 13 08:00:32 dovecot: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:140 ... show more Jun 13 08:00:32 dovecot: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:1408F09C:SSL routines:ssl3_get_record:http request (no auth attempts in 0 secs): user=<>, rip=54.193.3.195, TLS handshaking: SSL_accept() failed: error:1408F09C:SSL routines:ssl3_get_record:http request show less	Brute-Force
🇻🇳 trung.fun	2023-06-13 04:44:41 (3 years ago)	Email ...	Email Spam Spoofing
🇨🇭 foobar	2023-06-13 02:32:04 (3 years ago)	SMTP nagging	Email Spam Brute-Force

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 195.178.191.5

🇺🇸 195.184.76.187

🇬🇧 194.50.235.142

🇺🇸 146.88.241.179

🇦🇺 120.157.77.96

🇨🇳 115.229.195.238

🇧🇩 103.174.20.20

🇮🇩 103.97.101.25

🇫🇷 91.196.152.234

🇩🇪 69.5.169.243

🇺🇸 46.202.71.243

🇬🇧 35.203.211.29

🇧🇪 35.195.0.115

🇫🇷 34.163.69.184

🇯🇵 8.221.136.6

🇵🇱 193.150.46.23

🇩🇪 167.94.146.70

🇺🇸 143.198.150.150

🇺🇸 143.198.130.244

🇸🇪 135.116.20.17