JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.208.214.90

Neutral Activity

Abuse confidence score ?

0% Low Risk

46 reports

21 reporters · latest 2 years ago

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-208-214-90.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.208.214.90 has been reported 46 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 54.208.214.90

Export CSV

This IP address has been reported a total of 46 times from 21 distinct sources. 54.208.214.90 was first reported on March 27th 2021, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2023-11-17 09:33:10 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 54.208.214.90 (ec2-54-208-214-90.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.208.214.90 (ec2-54-208-214-90.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 17 04:33:07.842742 2023] [security2:error] [pid 32269] [client 54.208.214.90:60152] [client 54.208.214.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.elitedesignsbykd.com"] [uri "/wp-config.php"] [unique_id "ZVczU9BaLwZ1wyF5kI8G7wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇩 iHost	2021-05-19 00:15:38 (5 years ago)	Port Scan detected from 54.208.214.90 (US/United States/-). 3 hits in the last 261 seconds; Ports: ... show more Port Scan detected from 54.208.214.90 (US/United States/-). 3 hits in the last 261 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: May 19 07:15:35 web1 kernel: Firewall: TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.208.214.90 DST=31.131.1.4 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=44311 PROTO=TCP SPT=57734 DPT=8002 WINDOW=1024 RES=0x00 SYN URGP=0 May 19 07:15:35 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.208.214.90 DST=31.131.1.6 LEN=40 TOS=0x00 PREC=0x00 TTL=226 ID=33165 PROTO=TCP SPT=57734 DPT=8002 WINDOW=1024 RES=0x00 SYN URGP=0 May 19 07:15:35 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.208.214.90 DST=31.131.1.7 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=61001 PROTO=TCP SPT=57734 DPT=8002 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇲🇩 iHost	2021-05-18 22:08:24 (5 years ago)	Port Scan detected from 54.208.214.90 (US/United States/-). 3 hits in the last 151 seconds; Ports: ... show more Port Scan detected from 54.208.214.90 (US/United States/-). 3 hits in the last 151 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: May 19 05:08:20 web1 kernel: Firewall: TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.208.214.90 DST=31.131.1.51 LEN=40 TOS=0x00 PREC=0x00 TTL=226 ID=38256 PROTO=TCP SPT=50099 DPT=10001 WINDOW=1024 RES=0x00 SYN URGP=0 May 19 05:08:20 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.208.214.90 DST=31.131.1.51 LEN=40 TOS=0x00 PREC=0x00 TTL=226 ID=30717 PROTO=TCP SPT=50099 DPT=5002 WINDOW=1024 RES=0x00 SYN URGP=0 May 19 05:08:20 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.208.214.90 DST=31.131.1.50 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=41939 PROTO=TCP SPT=50099 DPT=8000 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇲🇩 iHost	2021-05-16 02:10:55 (5 years ago)	Port Scan detected from 54.208.214.90 (US/United States/-). 3 hits in the last 261 seconds; Ports: ... show more Port Scan detected from 54.208.214.90 (US/United States/-). 3 hits in the last 261 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: May 16 09:10:37 web1 kernel: Firewall: UDP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.208.214.90 DST=31.131.1.30 LEN=61 TOS=0x00 PREC=0x00 TTL=234 ID=54321 PROTO=UDP SPT=39252 DPT=53 LEN=41 May 16 09:10:37 web1 kernel: Firewall: UDP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.208.214.90 DST=31.131.1.31 LEN=61 TOS=0x00 PREC=0x00 TTL=234 ID=54321 PROTO=UDP SPT=57853 DPT=53 LEN=41 May 16 09:10:54 web1 kernel: Firewall: UDP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.208.214.90 DST=31.131.1.29 LEN=61 TOS=0x00 PREC=0x00 TTL=225 ID=54321 PROTO=UDP SPT=35182 DPT=53 LEN=41 show less	Port Scan
🇹🇭 Sawasdee	2021-05-14 04:48:24 (5 years ago)	Port Scan ...	Port Scan
🇪🇸 domotuto.com	2021-05-12 22:26:01 (5 years ago)	Mikrotik port scanner detected. EA4GKQ	Port Scan
🇲🇩 iHost	2021-05-12 05:52:38 (5 years ago)	Port Scan detected from 54.208.214.90 (US/United States/-). 3 hits in the last 45 seconds; Ports: ... show more Port Scan detected from 54.208.214.90 (US/United States/-). 3 hits in the last 45 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: May 12 12:52:35 web1 kernel: Firewall: UDP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.208.214.90 DST=31.131.1.82 LEN=61 TOS=0x00 PREC=0x00 TTL=234 ID=54321 PROTO=UDP SPT=36532 DPT=53 LEN=41 May 12 12:52:35 web1 kernel: Firewall: UDP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.208.214.90 DST=31.131.1.83 LEN=61 TOS=0x00 PREC=0x00 TTL=226 ID=54321 PROTO=UDP SPT=41782 DPT=53 LEN=41 May 12 12:52:35 web1 kernel: Firewall: UDP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.208.214.90 DST=31.131.1.81 LEN=61 TOS=0x00 PREC=0x00 TTL=234 ID=54321 PROTO=UDP SPT=42950 DPT=53 LEN=41 show less	Port Scan
Anonymous	2021-05-11 15:54:30 (5 years ago)	scans	Port Scan
🇩🇰 bredelund.dk	2021-05-11 12:16:37 (5 years ago)	(2req.)Scanning for vulnerabilities	Hacking Bad Web Bot Web App Attack
🇿🇦 IrisFlower	2021-05-11 08:47:42 (5 years ago)	Unauthorized connection attempt detected from IP address 54.208.214.90 to port 443 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2021-05-11 01:36:07 (5 years ago)	Unauthorized connection attempt detected from IP address 54.208.214.90 to port 81 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2021-05-10 11:49:56 (5 years ago)	Unauthorized connection attempt detected from IP address 54.208.214.90 to port 997 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2021-05-09 08:04:19 (5 years ago)	Unauthorized connection attempt detected from IP address 54.208.214.90 to port 80 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2021-05-08 00:30:21 (5 years ago)	Unauthorized connection attempt detected from IP address 54.208.214.90 to port 82 [J]	Port Scan Hacking
🇪🇸 domotuto.com	2021-05-07 08:46:02 (5 years ago)	Mikrotik port scanner detected. EA4GKQ	Port Scan

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 178.16.53.150

🇳🇱 176.65.148.80

🇩🇪 138.201.135.150

🇻🇳 123.30.106.64

🇮🇩 103.90.27.83

🇮🇳 103.86.180.10

🇳🇱 94.154.43.70

🇷🇴 80.94.92.55

🇧🇬 79.124.49.82

🇺🇸 57.141.20.47

🇬🇧 35.203.211.86

🇺🇸 2606:4700::6810:7c60

🇹🇭 203.150.107.244

🇧🇷 190.180.177.232

🇺🇸 185.180.141.8

🇧🇷 177.52.218.154

🇺🇸 172.215.217.70

🇨🇴 149.130.186.207

🇻🇳 113.173.19.15

🇨🇳 106.75.16.140