JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.198.34.158

54.198.34.158 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 0%: ?

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-198-34-158.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.198.34.158

Whois 54.198.34.158

IP Abuse Reports for 54.198.34.158:

This IP address has been reported a total of 21 times from 17 distinct sources. 54.198.34.158 was first reported on October 14th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2024-10-17 08:53:44 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-10-16 20:53:47 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇩 penjaga BRIN	2024-10-16 13:16:10 (1 year ago)	Common web attack.-111	Web App Attack
🇮🇩 Burayot	2024-10-16 11:05:41 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 54.198.34.158 (US/United States/ec2 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 54.198.34.158 (US/United States/ec2-54-198-34-158.compute-1.amazonaws.com): 2 in the last 3600 secs show less	Web App Attack
🇩🇪 Ba-Yu	2024-10-16 03:21:20 (1 year ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 uhlhosting	2024-10-15 13:44:24 (1 year ago)	Fail2Ban - Malware rules Mod-Security detected - Bad Bots - Unwanted Crawler ...	Brute-Force
🇨🇭 zynex	2024-10-15 12:36:00 (1 year ago)	URL Probing: /wp-admin/setup-config.php	Web App Attack
🇨🇭 teamsecure	2024-10-15 12:33:53 (1 year ago)	Banned for trying to access env	Web App Attack
🇺🇸 TPI-Abuse	2024-10-15 11:09:15 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 54.198.34.158 (ec2-54-198-34-158.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.198.34.158 (ec2-54-198-34-158.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 15 07:09:08.848844 2024] [security2:error] [pid 26464:tid 26464] [client 54.198.34.158:63279] [client 54.198.34.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nancysmithgibson.com"] [uri "/.env"] [unique_id "Zw5NVNnYijVlKdeXT2CzXwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-15 09:49:21 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 54.198.34.158 (ec2-54-198-34-158.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.198.34.158 (ec2-54-198-34-158.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 15 05:49:17.703081 2024] [security2:error] [pid 14965:tid 14965] [client 54.198.34.158:58027] [client 54.198.34.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "californiarhythmproject.org"] [uri "/.env"] [unique_id "Zw46ne3qDF03jMsTUUuWswAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-15 07:47:47 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 54.198.34.158 (US/United States/ec2-54- ... show more (mod_security) mod_security triggered on hostname [redacted] 54.198.34.158 (US/United States/ec2-54-198-34-158.compute-1.amazonaws.com): (CF_ENABLE) show less	SQL Injection
🇦🇺 paulshipley.com.au	2024-10-15 07:41:14 (1 year ago)	paulshipley.id.au:443 54.198.34.158 - - [15/Oct/2024:18:40:49 +1100] "GET /wp-content/plugins/iwp-cl ... show more paulshipley.id.au:443 54.198.34.158 - - [15/Oct/2024:18:40:49 +1100] "GET /wp-content/plugins/iwp-client/readme.txt HTTP/1.1" 404 70380 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" paulshipley.id.au:443 54.198.34.158 - - [15/Oct/2024:18:40:55 +1100] "GET /wp-admin/vuln.php HTTP/1.1" 404 70355 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" paulshipley.id.au:443 54.198.34.158 - - [15/Oct/2024:18:40:58 +1100] "GET /wp-admin/vuln.htm HTTP/1.1" 404 70356 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" paulshipley.id.au:443 54.198.34.158 - - [15/Oct/2024:18:41:01 +1100] "GET /wp-content/plugins/cherry-plugin/admin/import-export/upload.php HTTP/1.1" 404 70405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" paulshipley.id.au:443 54.198.34.158 - - [15/Oct/2024:18:41:04 +1100] "GET /wp-content/plugins/cherry-plugin/admin/import-export/settings_auto.php HTTP/1.1" ... show less	Web App Attack
🇳🇱 maxxsense	2024-10-15 06:37:39 (1 year ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 54.198.34.158 (US/United ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 54.198.34.158 (US/United States/ec2-54-198-34-158.compute-1.amazonaws.com) show less	Port Scan
🇺🇸 TPI-Abuse	2024-10-15 06:34:18 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 54.198.34.158 (ec2-54-198-34-158.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.198.34.158 (ec2-54-198-34-158.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 15 02:34:13.454334 2024] [security2:error] [pid 24901:tid 24901] [client 54.198.34.158:52036] [client 54.198.34.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "comsew.com.au"] [uri "/.env"] [unique_id "Zw4M5aKWboWwuJ1El-lElwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2024-10-15 05:43:16 (1 year ago)	(wordpress-user-enum) Failed wordpress-user-enum trigger from 54.198.34.158 (US/United States/ec2-54 ... show more (wordpress-user-enum) Failed wordpress-user-enum trigger from 54.198.34.158 (US/United States/ec2-54-198-34-158.compute-1.amazonaws.com): (CF_ENABLE) show less	Brute-Force

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.126.35.78

🇰🇷 3.34.254.77

🇩🇪 217.236.66.224

🇪🇬 197.63.88.177

🇳🇱 195.178.110.30

🇵🇰 160.187.180.175

🇧🇷 143.95.209.223

🇨🇳 120.76.240.4

🇨🇳 112.48.49.52

🇬🇧 87.236.176.105

🇸🇦 82.197.48.194

🇩🇪 43.165.62.10

🇨🇦 15.235.27.186

🇰🇷 14.55.144.22

🇨🇳 220.181.108.103

🇮🇱 194.213.4.139

🇷🇺 188.32.104.175

🇨🇦 142.44.233.67

🇨🇳 116.172.249.243

🇺🇿 84.54.115.46