JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.219.20.168

54.219.20.168 was found in our database!

This IP was reported 66 times. Confidence of Abuse is 0%: ?

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-219-20-168.us-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.219.20.168

Whois 54.219.20.168

IP Abuse Reports for 54.219.20.168:

This IP address has been reported a total of 66 times from 42 distinct sources. 54.219.20.168 was first reported on December 24th 2022, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 geot	2022-12-28 15:48:19 (3 years ago)	GET /wp-config.inc HTTP/1.1	Hacking Web App Attack
🇬🇧 Buster	2022-12-27 12:39:49 (3 years ago)	Repeated mass attack attempts on multiple sites from Perm Blocked ASN & country	DDoS Attack VPN IP Hacking Web App Attack
Anonymous	2022-12-27 12:15:29 (3 years ago)	#CCTV-DVR Remote Code Execution - HTTP (Request), Certificate fields with missing or useless data - ... show more #CCTV-DVR Remote Code Execution - HTTP (Request), Certificate fields with missing or useless data - SSL - Variant 2, Certificate fields with missing or useless data - SSL - Variant 6, JAWS Remote Code Execution Exploit - HTTP (Request), New Domain URL in Web Reputation Services database - HTTP (Request), Port Sweep - TCP, TCP Backdoor Agent Request, ThinkPHP 5x Remote Code Execution - HTTP (Request), UNIX IFS SHELL RCE - HTTP (Request), show less	Hacking
🇬🇧 Buster	2022-12-27 10:37:27 (3 years ago)	Repeated mass attack attempts from Perm Blocked ASN & country	DDoS Attack VPN IP Hacking Web App Attack
🇩🇪 conseilgouz	2022-12-27 09:45:30 (3 years ago)	ave-Security key failure(phpinfo.php)	Hacking
🇳🇱 LapisRuber	2022-12-27 08:13:50 (3 years ago)	Fail2ban action triggered	Bad Web Bot Web App Attack
🇩🇪 Thomas Lewis	2022-12-27 08:09:35 (3 years ago)	Scanning for known vulnerabilities	Hacking
🇩🇪 niceshops.com	2022-12-27 07:24:29 (3 years ago)	Web Attack ([27/Dec/2022:13:24:27.934] GET //phpinfo.php)	Web App Attack
🇬🇧 findlab	2022-12-27 05:50:06 (3 years ago)	Backdrop CMS module - Request: /wp-config.old	Bad Web Bot Web App Attack
🇺🇸 advena	2022-12-27 03:45:38 (3 years ago)	54.219.20.168 (AS16509 AMAZON-02) was intercepted at 2022-12-27T08:34:27Z after violating WAF direct ... show more 54.219.20.168 (AS16509 AMAZON-02) was intercepted at 2022-12-27T08:34:27Z after violating WAF directive: 100038 (Information Disclosure - Common Files). Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇬🇧 Epimetheus	2022-12-27 02:34:47 (3 years ago)	Unauthorized access attempts: From: 54.219.20.168 Method: HTTP GET URI Path: /sftp-config.json ... show more Unauthorized access attempts: From: 54.219.20.168 Method: HTTP GET URI Path: /sftp-config.json UA: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Web App Attack
🇬🇧 Epimetheus	2022-12-27 02:12:47 (3 years ago)	Unauthorized access attempts: From: 54.219.20.168 Method: HTTP GET URI Path: /.vscode/sftp.jso ... show more Unauthorized access attempts: From: 54.219.20.168 Method: HTTP GET URI Path: /.vscode/sftp.json UA: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Web App Attack
Anonymous	2022-12-27 00:40:01 (3 years ago)		Web App Attack
🇩🇪 Gwyneth Llewelyn	2022-12-26 22:36:15 (3 years ago)	2022/12/27 03:35:57 [error] 1445987#1445987: 1499758 access forbidden by rule, client: 54.219.20.16 ... show more 2022/12/27 03:35:57 [error] 1445987#1445987: 1499758 access forbidden by rule, client: 54.219.20.168, server: wp.slcds.info, request: "GET /.env HTTP/2.0", host: "cds-inquirer.tk" 54.219.20.168 - - [27/Dec/2022:03:35:57 +0000] "GET /.env HTTP/2.0" 403 1166 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 2022/12/27 03:36:13 [error] 1445987#1445987: *1499793 access forbidden by rule, client: 54.219.20.168, server: wp.slcds.info, request: "GET /.env HTTP/2.0", host: "locus-amoenus.slcds.info" ... show less	Web App Attack
🇳🇱 CryptoYakari	2022-12-26 21:12:58 (3 years ago)	54.219.20.168 - - [27/Dec/2022:05:12:44 +0300] "GET /wp-config.inc HTTP/1.0" 403 3330 "-" "Mozilla/5 ... show more 54.219.20.168 - - [27/Dec/2022:05:12:44 +0300] "GET /wp-config.inc HTTP/1.0" 403 3330 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 54.219.20.168 - - [27/Dec/2022:05:12:45 +0300] "GET /wp-config.old HTTP/1.0" 403 3330 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 54.219.20.168 - - [27/Dec/2022:05:12:47 +0300] "GET /wp-config.txt HTTP/1.0" 403 3330 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇸 160.99.13.185

🇺🇸 143.110.145.158

🇮🇩 103.79.90.26

🇺🇸 54.242.23.208

🇺🇸 54.189.41.52

🇪🇬 41.33.45.100

🇷🇺 31.76.34.47

🇰🇷 218.157.133.155

🇹🇷 213.232.48.172

🇳🇱 213.126.221.10

🇧🇬 213.91.254.211

🇧🇪 198.235.24.215

🇹🇷 178.210.170.114

🇺🇸 147.185.132.12

🇧🇬 109.160.32.112

🇱🇺 64.89.160.201

🇨🇳 14.216.130.134

🇬🇧 213.122.11.129

🇰🇷 211.228.103.46

🇺🇸 205.210.31.43