JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.234.225.197

54.234.225.197 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 52%: ?

52%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-234-225-197.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.234.225.197

Whois 54.234.225.197

IP Abuse Reports for 54.234.225.197:

This IP address has been reported a total of 10 times from 9 distinct sources. 54.234.225.197 was first reported on May 31st 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 updown.io	2026-06-01 08:32:41 (3 days ago)	{"level":"info","ts":1780302760.821161,"logger":"http.log.access.log1","msg":"handled request","requ ... show more {"level":"info","ts":1780302760.821161,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"54.234.225.197","remote_port":"39516","client_ip":"54.234.225.197","proto":"HTTP/1.1","method":"GET","host":"status.hangfire.io","uri":"/site.zip","headers":{"Connection":["close"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"],"Range":["bytes=0-4"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.hangfire.io"}},"bytes_read":0,"user_id":"","duration":0.000083869,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1780302760.84128,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"54.234.225.197","remote_port":"39804","client_ip":"54.234.225.197","proto":"HTTP/1.1","method":"GET","host":"status.hangfire.io","uri":"/wp-config.zip","head ... show less	DDoS Attack Web App Attack
🇪🇸 pipeline.es	2026-05-31 21:40:08 (3 days ago)	Web scanning / probing for vulnerable paths \| URL: /wholesale-lead/ \| Evidence: toursedestinos.pt 54 ... show more Web scanning / probing for vulnerable paths \| URL: /wholesale-lead/ \| Evidence: toursedestinos.pt 54.234.225.197 - - [31/May/2026:23:39:08 +0200] \"GET /wholesale-lead/ HTTP/1.1\" 404 20781 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=US \| ASN: AMAZON-AES \| Country: US show less	Port Scan Web App Attack
🇫🇷 masterguru	2026-05-31 18:34:31 (3 days ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)	Hacking
🇩🇪 webanyone	2026-05-31 10:00:20 (4 days ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇮🇪 kundukundu	2026-05-31 04:42:08 (4 days ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-backup.zip	Web App Attack
🇧🇪 cmbplf	2026-05-31 03:11:25 (4 days ago)	1242 limiting connections by zone (13m59s)	DDoS Attack
Anonymous	2026-05-31 02:33:43 (4 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇮🇹 VHosting	2026-05-31 02:05:03 (4 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 Ba-Yu	2026-05-31 01:45:58 (4 days ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 updown.io	2026-05-31 01:34:15 (4 days ago)	{"level":"info","ts":1780191254.4653084,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1780191254.4653084,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"54.234.225.197","remote_port":"59560","client_ip":"54.234.225.197","proto":"HTTP/1.1","method":"GET","host":"status.finn.auto","uri":"/new.zip","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"],"Range":["bytes=0-4"],"Connection":["close"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.finn.auto"}},"bytes_read":0,"user_id":"","duration":0.000055345,"size":0,"status":429,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"],"Server":["Caddy"]}} {"level":"info","ts":1780191254.465658,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"54.234.225.197","remote_port":"59500","client_ip":"54.234.225.197","proto":"HTTP/1.1","method":"GET","host":"status.finn.auto","uri":"/version1.zip","headers":{ ... show less	DDoS Attack Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇨🇴 181.48.176.246

🇫🇮 147.185.133.114

🇸🇪 83.255.209.245

🇱🇹 77.90.185.33

🇺🇸 67.223.117.122

🇮🇶 62.3.56.187

🇬🇧 45.137.126.10

🇲🇲 37.111.53.110

🇨🇦 20.220.200.248

🇺🇸 208.88.75.246

🇻🇳 203.113.174.95

🇺🇸 172.214.209.153

🇮🇹 172.213.16.198

🇨🇳 120.26.202.34

🇧🇩 103.239.252.132

🇮🇶 65.20.204.2

🇧🇪 198.235.24.232

🇨🇮 196.47.175.50

🇧🇷 191.0.124.24