JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.205.246.45

Recent Activity

Abuse confidence score ?

70% Elevated

16 reports

11 reporters · latest 4 hours ago

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-205-246-45.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 54.205.246.45

Export CSV

This IP address has been reported a total of 16 times from 11 distinct sources. 54.205.246.45 was first reported on October 22nd 2026, and the most recent report was 4 hours ago. In the last 60 days, the top reporter locations were: United States of America with 6 reports; Germany with 4 reports; Belgium with 2 reports. The most common categories in these recent reports were: Web App Attack 9 times; Bad Web Bot 7 times; Brute-Force 4 times; DDoS Attack 2 times; Web Spam 2 times; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 findlab	2026-10-24 16:30:03 (4 hours ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-10-24 04:37:01 (15 hours ago)	Many_bad_calls	Web App Attack
Anonymous	2026-10-24 03:39:30 (16 hours ago)	ALTB WEBFORM SPAM 54.205.246.45 (ec2-54-205-246-45.compute-1.amazonaws.com)	Web Spam
🇺🇸 mnsf	2026-10-24 01:05:26 (19 hours ago)	Request Overload (110)	Brute-Force Web App Attack
🇧🇪 taivas.nl	2026-10-23 16:36:23 (1 day ago)	Bad_requests	Bad Web Bot
🇩🇪 FeG Deutschland	2026-10-23 05:46:50 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 26	Exploited Host Web App Attack
🇨🇭 YF	2026-10-23 00:10:18 (1 day ago)	Malicious web activity confirmed — IP previously flagged as suspicious (automated re-check, score: 4 ... show more Malicious web activity confirmed — IP previously flagged as suspicious (automated re-check, score: 49%) show less	Web App Attack
🇺🇸 mnsf	2026-10-23 00:09:53 (1 day ago)	Too many Status 40X (13) Request Overload (105)	Brute-Force Web App Attack
🇨🇭 backslash	2026-10-22 19:42:05 (2 days ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
Anonymous	2026-10-22 19:25:47 (2 days ago)	REPM WEBFORM SPAM 54.205.246.45 (ec2-54-205-246-45.compute-1.amazonaws.com)	Web Spam
🇺🇸 TPI-Abuse	2026-10-22 17:22:03 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 54.205.246.45 (ec2-54-205-246-45.compute-1.amaz ... show more (mod_security) mod_security (id:210730) triggered by 54.205.246.45 (ec2-54-205-246-45.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 13:21:55.426439 2026] [security2:error] [pid 27850:tid 27906] [client 54.205.246.45:37726] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.gafm.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gafm.org"] [uri "/http/charteredfinancialmanager.com"] [unique_id "atpGM4mjt04KHuow5N21gwAAAgo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 claude CALVET	2026-10-22 16:09:06 (2 days ago)	gew-Joomla User : try to access forms...	Hacking
🇺🇸 stechusa	2026-10-22 15:10:56 (2 days ago)	[Askari] \| country=US \| ASN=Amazon.com, Inc. \| Behavior: Inhuman browsing speed, No referrer on deep ... show more [Askari] \| country=US \| ASN=Amazon.com, Inc. \| Behavior: Inhuman browsing speed, No referrer on deep pages, Rapid page enumeration, HTTP/1.1 only, Automated crawling show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-10-22 15:10:56 (2 days ago)	country=US \| ASN=Amazon.com, Inc. \| 20 facet requests/minute (threshold: 20) \| 20 facet requests/min ... show more country=US \| ASN=Amazon.com, Inc. \| 20 facet requests/minute (threshold: 20) \| 20 facet requests/minute (threshold: 20) \| Average 0.00s between page loads (5 pages in 0.0s) show less	Bad Web Bot DDoS Attack
🇺🇸 TPI-Abuse	2026-10-22 12:44:18 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 54.205.246.45 (ec2-54-205-246-45.compute-1.amaz ... show more (mod_security) mod_security (id:210730) triggered by 54.205.246.45 (ec2-54-205-246-45.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 08:44:14.320655 2026] [security2:error] [pid 12448:tid 12448] [client 54.205.246.45:36230] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.elsmithpest.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.elsmithpest.com"] [uri "/[email protected]"] [unique_id "atoFHvna5aKhCZzeedWglQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.41

🇦🇺 194.193.175.82

🇨🇳 171.114.227.112

🇨🇳 171.114.225.27

🇫🇷 78.192.21.78

🇸🇾 46.58.211.213

🇨🇳 220.178.246.43

🇰🇭 220.158.233.62

🇧🇷 205.210.31.235

🇹🇼 198.235.24.59

🇺🇦 188.163.16.42

🇧🇷 186.216.179.144

🇺🇸 185.102.112.192

🇫🇷 178.20.214.191

🇮🇹 101.56.163.84

🇮🇹 95.248.215.115

🇷🇺 95.106.11.132

🇮🇹 94.33.255.129

🇹🇷 88.231.218.252

🇸🇦 84.13.129.116