JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.200.44.215

Neutral Activity

Abuse Confidence Score

0% Low Risk

48 reports

26 reporters · latest 11 months ago

ISP: Amazon.com, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16509
Hostname(s): ec2-54-200-44-215.us-west-2.compute.amazonaws.com
Domain Name: amazon.com
Country: 🇺🇸 United States of America
City: Boardman, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.200.44.215 has been reported 48 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

48 from 26 distinct reporters

First reported

March 16th 2025

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2025-12-14 22:59:03 UTC · (11 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-12-13.	Hacking Web App Attack SSH
🇬🇧 [email protected]	2025-12-14 00:56:00 UTC · (11 months ago)	...	Brute-Force SSH
🇳🇱 homeshowdomain.nl	2025-12-13 22:59:03 UTC · (11 months ago)	Auto-ban: >3000 req/min op 2025-12-13	Hacking Web App Attack SSH
🇨🇦 Anymous	2025-12-13 14:03:57 UTC · (11 months ago)	GET /.env HTTP/1.1 403 344 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0"	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2025-12-13 13:48:53 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 54.200.44.215 (ec2-54-200-44-215.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 08:48:50.254773 2025] [security2:error] [pid ... show more (mod_security) mod_security (id:210492) triggered by 54.200.44.215 (ec2-54-200-44-215.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 08:48:50.254773 2025] [security2:error] [pid 6815:tid 6815] [client 54.200.44.215:43728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.honeybeeplace.com.garyrankin.com"] [uri "/.env"] [unique_id "aT1uwkvGA--dw1vvmXv8CgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2025-12-13 13:15:33 UTC · (11 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-13 11:20:31 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 54.200.44.215 (ec2-54-200-44-215.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 06:20:23.991663 2025] [security2:error] [pid ... show more (mod_security) mod_security (id:210492) triggered by 54.200.44.215 (ec2-54-200-44-215.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 06:20:23.991663 2025] [security2:error] [pid 31627:tid 31627] [client 54.200.44.215:60198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.francesphilosophy.cygnetsilks.com"] [uri "/.env"] [unique_id "aT1L9yWTXuPC5QRFKjn19QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-13 10:36:19 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 54.200.44.215 (ec2-54-200-44-215.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 05:36:14.323887 2025] [security2:error] [pid ... show more (mod_security) mod_security (id:210492) triggered by 54.200.44.215 (ec2-54-200-44-215.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 05:36:14.323887 2025] [security2:error] [pid 12174:tid 12183] [client 54.200.44.215:38998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fandgins.antidote-it.com"] [uri "/.env.old"] [unique_id "aT1Bnufyrprmf1aGDkK4mwAAAMY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-13 10:14:57 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 54.200.44.215 (ec2-54-200-44-215.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 05:14:50.651526 2025] [security2:error] [pid ... show more (mod_security) mod_security (id:210492) triggered by 54.200.44.215 (ec2-54-200-44-215.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 05:14:50.651526 2025] [security2:error] [pid 4697:tid 4697] [client 54.200.44.215:49836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.events.execsandtechs.com"] [uri "/.git/config"] [unique_id "aT08mqa_iFfMf4hPW_Td9gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2025-12-13 10:05:18 UTC · (11 months ago)	Too many Status 40X (20)	Brute-Force Web App Attack
🇩🇪 Bedios GmbH	2025-12-13 10:01:47 UTC · (11 months ago)	Login credentials theft attempt	Hacking
🇩🇪 itsolon	2025-12-13 10:00:09 UTC · (11 months ago)	Fail2Ban plesk-modsecurity ban	Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-13 09:37:36 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 54.200.44.215 (ec2-54-200-44-215.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 04:37:31.371210 2025] [security2:error] [pid ... show more (mod_security) mod_security (id:210492) triggered by 54.200.44.215 (ec2-54-200-44-215.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 04:37:31.371210 2025] [security2:error] [pid 8079:tid 8079] [client 54.200.44.215:59084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.elessenux.lucid-events.com"] [uri "/.env"] [unique_id "aT0z22Y_Ft0NT1FOlsBqjQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2025-12-13 09:34:38 UTC · (11 months ago)	(modsecurity) srv103 ModSecurity 54.200.44.215 (US/United States/ec2-54-200-44-215.us-west-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
Anonymous	2025-12-13 09:21:12 UTC · (11 months ago)	Bot / seems abusive / Apache connections: 37	DDoS Attack Web Spam Bad Web Bot Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 104.252.30.220

🇺🇸 67.207.82.120

🇺🇸 34.162.54.205

🇩🇪 185.201.160.56

🇺🇸 147.185.132.111

🇫🇷 85.217.140.8

🇳🇱 77.239.124.77

🇳🇱 45.148.10.141

🇬🇧 31.14.254.10

🇬🇧 5.226.140.80

🇬🇧 188.240.59.39

🇺🇸 185.180.141.52

🇺🇸 172.110.223.81

🇺🇸 161.35.6.200

🇺🇸 157.245.254.4

🇺🇸 155.2.212.4

🇩🇪 82.21.56.228

🇳🇱 34.1.252.252

🇺🇸 31.134.9.239

🇺🇸 173.24.127.133