JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.234.14.37

Neutral Activity

Abuse confidence score ?

0% Low Risk

19 reports

11 reporters · latest 2 years ago

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-234-14-37.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.234.14.37 has been reported 19 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 54.234.14.37

Export CSV

This IP address has been reported a total of 19 times from 11 distinct sources. 54.234.14.37 was first reported on September 21st 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-09-30 18:03:34 (2 years ago)	Malicious activity detected	Hacking Web App Attack
🇦🇺 MAGIC	2024-09-30 15:03:49 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇪🇸 seoxan.es	2024-09-27 23:39:27 (2 years ago)	SQL Injection attempt detected Type Footer	SQL Injection
🇺🇸 TPI-Abuse	2024-09-26 16:27:51 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 54.234.14.37 (ec2-54-234-14-37.compute-1.amazon ... show more (mod_security) mod_security (id:210730) triggered by 54.234.14.37 (ec2-54-234-14-37.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 26 12:27:47.295584 2024] [security2:error] [pid 27624:tid 27653] [client 54.234.14.37:55200] [client 54.234.14.37] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.kerrfamilyassociation.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kerrfamilyassociation.com"] [uri "/[email protected]"] [unique_id "ZvWLg1ak_6XgYCfE12gm7wAAAVU"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 fbarbosa	2024-09-26 07:06:00 (2 years ago)	Abusive scrapping, Accessing pages in multiple languages rapidly, indicating non-human browsing beha ... show more Abusive scrapping, Accessing pages in multiple languages rapidly, indicating non-human browsing behavior show less	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2024-09-25 23:03:11 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 54.234.14.37 (ec2-54-234-14-37.compute-1.amazon ... show more (mod_security) mod_security (id:210730) triggered by 54.234.14.37 (ec2-54-234-14-37.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 25 19:03:03.720495 2024] [security2:error] [pid 10123:tid 10123] [client 54.234.14.37:34862] [client 54.234.14.37] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.backstore.com\|F\|2"] [data ".losangelesseating.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.backstore.com"] [uri "/www.losangelesseating.com"] [unique_id "ZvSWp4ZKthFJynMuCWgnmgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-25 16:35:07 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 54.234.14.37 (ec2-54-234-14-37.compute-1.amazon ... show more (mod_security) mod_security (id:210730) triggered by 54.234.14.37 (ec2-54-234-14-37.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 25 12:35:02.308197 2024] [security2:error] [pid 18725:tid 18725] [client 54.234.14.37:57956] [client 54.234.14.37] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.newisci.org\|F\|2"] [data ".safari-eha.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.newisci.org"] [uri "/expo_2025/www.safari-eha.com"] [unique_id "ZvQ7tqRVfWAsdEyg7e05BQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-25 08:51:55 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 54.234.14.37 (ec2-54-234-14-37.compute-1.amazon ... show more (mod_security) mod_security (id:210730) triggered by 54.234.14.37 (ec2-54-234-14-37.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 25 04:51:47.816282 2024] [security2:error] [pid 12793:tid 12861] [client 54.234.14.37:50176] [client 54.234.14.37] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.munatseng.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.munatseng.org"] [uri "/stories/tsengkwongchi.com"] [unique_id "ZvPPIzXajxueuqs58Ozl0wAAAMI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 valeon	2024-09-24 17:52:45 (2 years ago)		Bad Web Bot Web App Attack
🇬🇧 my.wildye.com	2024-09-24 12:49:27 (2 years ago)	AUTOMATED REPORT: Trying to spam. Automated form submission	Web Spam
🇫🇷 COMAITE	2024-09-23 01:40:47 (2 years ago)	Multiple web server 400 error codes from same source ip 54.234.14.37.	Web App Attack
🇺🇸 TPI-Abuse	2024-09-22 18:58:06 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 54.234.14.37 (ec2-54-234-14-37.compute-1.amazon ... show more (mod_security) mod_security (id:210730) triggered by 54.234.14.37 (ec2-54-234-14-37.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 22 14:57:59.076145 2024] [security2:error] [pid 4188:tid 4188] [client 54.234.14.37:59338] [client 54.234.14.37] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.thequietplacemassage.net\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.thequietplacemassage.net"] [uri "/[email protected]"] [unique_id "ZvBot2e5qZtshQJaco7QxQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 Michael McCarthy	2024-09-22 18:27:00 (2 years ago)		Web Spam
🇺🇸 TPI-Abuse	2024-09-22 15:40:57 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 54.234.14.37 (ec2-54-234-14-37.compute-1.amazon ... show more (mod_security) mod_security (id:210730) triggered by 54.234.14.37 (ec2-54-234-14-37.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 22 11:40:53.098248 2024] [security2:error] [pid 18891:tid 18891] [client 54.234.14.37:41378] [client 54.234.14.37] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|climasyequipos.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "climasyequipos.com"] [uri "/[email protected]"] [unique_id "ZvA6hbTvAf6p9Tn8PAqH8wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 strzonnek	2024-09-22 13:17:14 (2 years ago)	attack on webform	Brute-Force Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.37.233.3

🇰🇭 120.136.25.236

🇩🇿 41.100.78.187

🇧🇪 35.241.186.88

🇺🇦 213.5.195.5

🇻🇳 160.30.112.134

🇭🇰 156.225.1.10

🇻🇪 154.27.136.116

🇮🇷 152.89.12.101

🇫🇷 89.93.99.211

🇪🇸 37.134.222.4

🇧🇪 34.34.128.134

🇦🇺 20.5.85.204

🇻🇳 14.181.151.27

🇻🇳 1.55.201.148

🇻🇳 2405:4802:1f07:6f0:8c03:a8f5:f853:b509

🇧🇷 201.77.171.87

🇬🇲 197.255.207.190

🇺🇸 173.254.193.98

🇧🇷 160.20.204.133