JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.227.39.236

Neutral Activity

Abuse confidence score ?

0% Low Risk

29 reports

16 reporters · latest 10 months ago

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-227-39-236.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.227.39.236 has been reported 29 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 54.227.39.236

Export CSV

This IP address has been reported a total of 29 times from 16 distinct sources. 54.227.39.236 was first reported on October 30th 2025, and the most recent report was 10 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 xyz.rip	2025-11-11 11:23:43 (10 months ago)	Mutliple rate-limit violations...	Bad Web Bot Web App Attack
🇳🇱 Roderic	2025-11-11 05:00:46 (10 months ago)	54.227.39.236 (US/United States/Virginia/Ashburn/ec2-54-227-39-236.compute-1.amazonaws.com/[redacted ... show more 54.227.39.236 (US/United States/Virginia/Ashburn/ec2-54-227-39-236.compute-1.amazonaws.com/[redacted]), more than 30 Apache 403 hits show less	Hacking
🇩🇪 DocNetzwerk	2025-11-10 23:15:59 (10 months ago)	54.227.39.236 (US/United States/ec2-54-227-39-236.compute-1.amazonaws.com), more than 7 Apache 403 h ... show more 54.227.39.236 (US/United States/ec2-54-227-39-236.compute-1.amazonaws.com), more than 7 Apache 403 hits show less	Hacking
🇺🇸 bazter.pro	2025-11-10 23:03:45 (10 months ago)	Banned by nginx-ip-monitor. AbuseIPDB confidence: 70%; Datacenter IP: Data Center/Web Hosting/Transi ... show more Banned by nginx-ip-monitor. AbuseIPDB confidence: 70%; Datacenter IP: Data Center/Web Hosting/Transit; Many unique paths: 5. Total requests: 7. 404 errors: 0. Unique paths: 5. show less	Web App Attack
🇫🇷 bigorre.org	2025-11-08 09:53:38 (10 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇳🇱 xyz.rip	2025-11-08 06:47:35 (10 months ago)	Mutliple rate-limit violations...	Bad Web Bot Web App Attack
Anonymous	2025-11-06 21:18:57 (10 months ago)	06-11-2025 22:18:57.11 ERROR util.AccessViolations - 54.227.39.236 report to fail2ban - action: bloc ... show more 06-11-2025 22:18:57.11 ERROR util.AccessViolations - 54.227.39.236 report to fail2ban - action: block ... show less	Hacking Brute-Force Bad Web Bot
Anonymous	2025-11-06 05:51:29 (10 months ago)	PSCDE WEBFORM SPAM 54.227.39.236 (ec2-54-227-39-236.compute-1.amazonaws.com)	Web Spam
🇳🇱 Site.eu	2025-11-06 03:56:13 (10 months ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2025-11-04 08:22:01 (10 months ago)	(mod_security) mod_security (id:210381) triggered by 54.227.39.236 (ec2-54-227-39-236.compute-1.amaz ... show more (mod_security) mod_security (id:210381) triggered by 54.227.39.236 (ec2-54-227-39-236.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 04 03:21:57.104198 2025] [security2:error] [pid 5246:tid 5246] [client 54.227.39.236:56182] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.sandwcreations.com\|F\|4"] [data "REQUEST_URI=/%1$s"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.sandwcreations.com"] [uri "/%1$s"] [unique_id "aQm3pUjl3rESF_NbNb9hrwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-04 01:38:31 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 54.227.39.236 (ec2-54-227-39-236.compute-1.amaz ... show more (mod_security) mod_security (id:210730) triggered by 54.227.39.236 (ec2-54-227-39-236.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 20:38:26.394565 2025] [security2:error] [pid 914:tid 914] [client 54.227.39.236:55366] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.solcargomiami.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.solcargomiami.com"] [uri "/mailto@[email protected]"] [unique_id "aQlZElZIwnFEIoJjyh2D0gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 rsa	2025-11-03 18:28:00 (10 months ago)	excessive crawling	DDoS Attack Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-03 17:08:12 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 54.227.39.236 (ec2-54-227-39-236.compute-1.amaz ... show more (mod_security) mod_security (id:210730) triggered by 54.227.39.236 (ec2-54-227-39-236.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 12:08:06.041382 2025] [security2:error] [pid 19352:tid 19352] [client 54.227.39.236:55998] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.photojeniq.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.photojeniq.com"] [uri "/photovelvet/Thumbs.db"] [unique_id "aQjhdu1fJfXoCTx-mLh2gAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 xyz.rip	2025-11-03 04:19:27 (10 months ago)	Mutliple rate-limit violations...	Bad Web Bot Web App Attack
🇺🇸 mnsf	2025-11-03 02:05:10 (10 months ago)	Too many Status 40X (12)	Brute-Force Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.58.133.88

🇷🇺 77.91.65.97

🇳🇱 62.164.177.54

🇨🇳 223.101.89.56

🇳🇿 202.180.71.165

🇹🇼 198.235.24.56

🇸🇬 172.255.209.23

🇺🇸 172.239.62.109

🇺🇸 144.31.35.177

🇰🇷 106.244.120.37

🇮🇩 103.152.235.19

🇲🇾 103.91.64.38

🇧🇩 103.69.160.125

🇹🇼 101.13.5.28

🇷🇺 77.91.65.155

🇷🇺 77.91.65.150

🇷🇺 77.91.65.85

🇷🇺 77.91.65.79

🇷🇺 77.91.65.77

🇸🇬 47.128.39.196