54.209.185.240

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
72 reports
62 reporters · latest 1 year ago
ISP
Amazon.com, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-54-209-185-240.compute-1.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

54.209.185.240 has been reported 72 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
72 from 62 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇧🇪 sid3windr
GET /.git/config (Tarpitted for , wasted 120B)
Web App Attack
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪 SpaceHost-Server
Brute-Force Web App Attack
🇨🇳 ThreatBook.io
ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/54.209.185.240 2025-09-03 02:02:19 /
Web App Attack
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪 paprika
Automated report #1: 1 attacks detected. Types: Hex Encoded Attack.
Hacking
🇨🇦 polycoda
📡 Port scan
Hacking Web App Attack
🇫🇷 service Informatique
/.git
Web App Attack
🇫🇷 Pythagus
Aggressive web scan
SQL Injection Bad Web Bot Web App Attack
🇩🇪 SpaceHost-Server
Brute-Force Web App Attack
🇮🇪 RoboSOC
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: ec2-54-209-185-240.compute-1.amazonaws.com.
Port Scan
Anonymous
Reported from Nginx log analysis 17. Log: 54.209.185.240 - - [02/Sep/2025:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "-" "-" "US United States Ashburn" "AS14618" "AMAZON-AES"
Port Scan Brute-Force SSH
Anonymous
Trying to access config files
Web App Attack
🇩🇪 Little Iguana
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 92.118.39.50
🇰🇷 218.155.106.83
🇨🇳 203.132.60.136
🇺🇸 172.180.64.139
🇺🇸 152.32.148.140
🇷🇺 84.54.44.204
🇺🇸 72.90.150.11
🇷🇴 2.57.121.25
🇨🇴 200.118.80.156
🇮🇩 152.32.153.53
🇺🇸 146.70.186.132
🇲🇾 113.211.209.34
🇸🇪 84.243.8.197
🇺🇸 71.202.84.186
🇺🇸 64.62.197.44
🇮🇳 47.15.17.81
🇩🇴 38.51.188.18
🇬🇧 35.203.211.55
🇦🇺 20.28.214.139
🇹🇭 203.156.108.110
feedback