JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.224.44.40

Neutral Activity

Abuse Confidence Score

0% Low Risk

39 reports

21 reporters · latest 1 year ago

ISP: Amazon Technologies Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14618
Hostname(s): ec2-54-224-44-40.compute-1.amazonaws.com
Domain Name: amazon.com
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.224.44.40 has been reported 39 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

39 from 21 distinct reporters

First reported

July 11th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 insightdiabetes.com	2025-08-12 19:01:35 (1 year ago)	Reported from WordPress plugin AbuseIPDB Reporter	Brute-Force
🇺🇸 skamerica	2025-07-17 10:23:00 (1 year ago)	Jul 11, 2025 23:50:36 54.224.44.40 ad invalid_username Jul 11, 2025 20:56:05 54.224.44.40 admi invalid_username Jul 11, 2025 20:50:04 54.224.44.40 admin@primetre* invalid_email Jul 11, 2025 20:13:04 54.224.44.40 2l invalid_username	Brute-Force
🇨🇦 TheGnome	2025-07-13 18:36:00 (1 year ago)	Ashburn, Virginia, United States was blocked by firewall for Known malicious User-Agents at https://REDACTED/ 2025-07-11 9:48:37 p.m. (1 day 16 hours ago) IP: 54.224.44.40 Hostname: ec2-54-224-44-40.compute-1.amazonaws.com Human/Bot: Bot	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇺🇸 mnsf	2025-07-12 21:05:02 (1 year ago)	Request Overload (115)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-07-12 06:26:59 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 54.224.44.40 (ec2-54-224-44-40.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 02:26:53.609548 2025] [security2:error] [pid 19538:tid ... show more (mod_security) mod_security (id:225170) triggered by 54.224.44.40 (ec2-54-224-44-40.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 02:26:53.609548 2025] [security2:error] [pid 19538:tid 19538] [client 54.224.44.40:61391] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|innolympics.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "innolympics.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aHIALbQp-_4_8L3zoVDm5AAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 mgarofano80	2025-07-12 05:52:50 (1 year ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-07-12 05:06:02 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 54.224.44.40 (ec2-54-224-44-40.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 01:05:55.250723 2025] [security2:error] [pid 11780:tid ... show more (mod_security) mod_security (id:225170) triggered by 54.224.44.40 (ec2-54-224-44-40.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 01:05:55.250723 2025] [security2:error] [pid 11780:tid 11780] [client 54.224.44.40:58832] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ferrarapanfitness.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ferrarapanfitness.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aHHtM4FvcFFHCFZdjeTHWQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2025-07-12 04:32:22 (1 year ago)	Many_bad_calls	Web App Attack
🇦🇺 MAGIC	2025-07-12 04:03:48 (1 year ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-07-12 03:17:20 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 54.224.44.40 (ec2-54-224-44-40.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 23:17:13.431270 2025] [security2:error] [pid 15903:tid ... show more (mod_security) mod_security (id:225170) triggered by 54.224.44.40 (ec2-54-224-44-40.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 23:17:13.431270 2025] [security2:error] [pid 15903:tid 15903] [client 54.224.44.40:64849] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|artspacecleveland.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artspacecleveland.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aHHTua4U6m0J02i4ut_6UgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Globe2	2025-07-12 02:29:47 (1 year ago)	[12/Jul/2025:03:24:35 +0100] X0dz5-O15Pl2LJNZbpuvlldl 54.224.44.40 61118 91.212.212.13 80 [12/Jul/2025:03:29:44 +0100] kTeR8RqbfTPWh2mIm3WUt7Qf 54.224.44.40 62421 91.212.212.13 443 [12/Jul/2025:03:29:46 +0100] gk2RxkuWA1Oy71mbZv2F-eGh 54.224.44.40 53 ... show more [12/Jul/2025:03:24:35 +0100] X0dz5-O15Pl2LJNZbpuvlldl 54.224.44.40 61118 91.212.212.13 80 [12/Jul/2025:03:29:44 +0100] kTeR8RqbfTPWh2mIm3WUt7Qf 54.224.44.40 62421 91.212.212.13 443 [12/Jul/2025:03:29:46 +0100] gk2RxkuWA1Oy71mbZv2F-eGh 54.224.44.40 53436 91.212.212.13 443 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-07-12 02:19:27 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 54.224.44.40 (ec2-54-224-44-40.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 22:19:24.026856 2025] [security2:error] [pid 28731:tid ... show more (mod_security) mod_security (id:225170) triggered by 54.224.44.40 (ec2-54-224-44-40.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 22:19:24.026856 2025] [security2:error] [pid 28731:tid 28731] [client 54.224.44.40:60243] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|portlunchgroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "portlunchgroup.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aHHGLKWUWPW3XErs1VugQAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-12 01:54:48 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 54.224.44.40 (ec2-54-224-44-40.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 21:54:41.949150 2025] [security2:error] [pid 15909:tid ... show more (mod_security) mod_security (id:225170) triggered by 54.224.44.40 (ec2-54-224-44-40.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 21:54:41.949150 2025] [security2:error] [pid 15909:tid 15909] [client 54.224.44.40:63876] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|velvetculture.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "velvetculture.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aHHAYQeFu_8PWtBGL4kvvwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-12 01:06:50 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 54.224.44.40 (ec2-54-224-44-40.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 21:06:43.042944 2025] [security2:error] [pid 22373:tid ... show more (mod_security) mod_security (id:225170) triggered by 54.224.44.40 (ec2-54-224-44-40.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 21:06:43.042944 2025] [security2:error] [pid 22373:tid 22373] [client 54.224.44.40:53584] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|trinitydent.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "trinitydent.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aHG1I-R4FA3KJhM6CjAtTAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-07-12 00:55:03 (1 year ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 220.250.52.101

🇻🇳 180.93.244.95

🇺🇸 155.212.38.30

🇯🇵 47.74.27.55

🇸🇬 43.134.109.200

🇩🇪 35.198.149.227

🇳🇱 213.152.161.201

🇧🇴 200.105.172.184

🇷🇴 193.46.255.86

🇺🇸 172.66.47.166

🇺🇸 155.212.108.227

🇲🇲 103.233.206.154

🇮🇩 103.63.101.24

🇿🇦 41.13.14.235

🇺🇸 34.48.126.18

🇺🇸 23.247.136.239

🇵🇰 223.123.96.252

🇺🇸 205.210.31.6

🇸🇳 179.64.79.157

🇺🇸 167.253.16.247