JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.241.184.13

Neutral Activity

Abuse confidence score ?

0% Low Risk

56 reports

46 reporters · latest 2 years ago

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-241-184-13.us-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	San Jose, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.241.184.13 has been reported 56 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 54.241.184.13

This IP address has been reported a total of 56 times from 46 distinct sources. 54.241.184.13 was first reported on October 31st 2023, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ALSCO®️	2023-11-02 22:03:01 (2 years ago)	Report By ALSCO Security Team: Brute Force Login Attempt	Hacking
🇺🇸 Secure Gateway®️	2023-11-02 22:03:01 (2 years ago)	Report By Secure Gateway Security Team: Unauthorized Connection Attempt	SQL Injection
🇺🇸 ALSCO®️	2023-11-01 22:03:32 (2 years ago)	Report By ALSCO Security Team: Unauthorized Connection Attempt	Hacking
🇺🇸 Secure Gateway®️	2023-11-01 22:03:31 (2 years ago)	Report By Secure Gateway Security Team: Potential CSRF Attack Detected	Web App Attack
🇺🇸 FloydianSlip	2023-11-01 20:17:41 (2 years ago)	Hitting non-existent URLs	Hacking
🇵🇱 strefapi_com	2023-11-01 16:09:11 (2 years ago)	54.241.184.13 - - [01/Nov/2023:16:09:09 +0000] "GET /.aws/config HTTP/2.0" 404 10714 "-" "Mozilla/5. ... show more 54.241.184.13 - - [01/Nov/2023:16:09:09 +0000] "GET /.aws/config HTTP/2.0" 404 10714 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.36" 54.241.184.13 - - [01/Nov/2023:16:09:10 +0000] "GET /.aws/credentials HTTP/2.0" 404 10714 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 54.241.184.13 - - [01/Nov/2023:16:09:10 +0000] "GET /docker-compose.yml HTTP/2.0" 404 10714 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" ... show less	Hacking Brute-Force Web App Attack
🇳🇴 tmiland	2023-11-01 15:53:34 (2 years ago)	(nginx_404) Dot directory Honeypot Trap 54.241.184.13 (US/United States/ec2-54-241-184-13.us-west-1. ... show more (nginx_404) Dot directory Honeypot Trap 54.241.184.13 (US/United States/ec2-54-241-184-13.us-west-1.compute.amazonaws.com): 2 in the last 3600 secs show less	Brute-Force Bad Web Bot
Anonymous	2023-11-01 15:53:08 (2 years ago)	(mod_security) mod_security triggered on hostname [redacted] 54.241.184.13 (US/United States/ec2-54- ... show more (mod_security) mod_security triggered on hostname [redacted] 54.241.184.13 (US/United States/ec2-54-241-184-13.us-west-1.compute.amazonaws.com) show less	SQL Injection
🇩🇪 nextweb	2023-11-01 12:20:43 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 54.241.184.13 (US/United States/California/San ... show more (mod_security) mod_security (id:210492) triggered by 54.241.184.13 (US/United States/California/San Jose/ec2-54-241-184-13.us-west-1.compute.amazonaws.com/[AS16509 AMAZON-02]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
Anonymous	2023-11-01 10:55:01 (2 years ago)	\| Suspicious URL access.	Hacking SQL Injection Web App Attack
🇫🇷 conseilgouz	2023-11-01 10:49:49 (2 years ago)	sae-Direct access to plugin not allowed	Hacking
Anonymous	2023-11-01 10:46:34 (2 years ago)	<comment>	Brute-Force Web App Attack
Anonymous	2023-11-01 10:43:10 (2 years ago)	(mod_security) mod_security triggered on hostname [redacted] 54.241.184.13 (US/United States/ec2-54- ... show more (mod_security) mod_security triggered on hostname [redacted] 54.241.184.13 (US/United States/ec2-54-241-184-13.us-west-1.compute.amazonaws.com) show less	SQL Injection
🇬🇧 yvoictra	2023-11-01 10:37:06 (2 years ago)	54.241.184.13 - - [01/Nov/2023:11:36:48 +0100] "GET /.aws/config HTTP/1.1" 404 32312 "-" "Mozilla/5. ... show more 54.241.184.13 - - [01/Nov/2023:11:36:48 +0100] "GET /.aws/config HTTP/1.1" 404 32312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" 54.241.184.13 - - [01/Nov/2023:11:36:49 +0100] "GET /.aws/credentials HTTP/1.1" 404 32317 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36" 54.241.184.13 - - [01/Nov/2023:11:36:50 +0100] "GET /docker-compose.yml HTTP/1.1" 404 32318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 54.241.184.13 - - [01/Nov/2023:11:36:52 +0100] "GET /docker-compose.prod.yml HTTP/1.1" 404 32322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36" 54.241.184.13 - - [01/Nov/2023:11:36:53 +0100] "GET /docker-compose.production.yml HTTP/1.1" 404 32322 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 ... show less	Brute-Force Web App Attack
🇩🇪 ut-addicted.com	2023-11-01 08:30:45 (2 years ago)	\[Wed Nov 01 09:30:43.931522 2023\] \[:error\] \[pid 3818:tid 139711186286336\] \[client 54.241.184. ... show more \[Wed Nov 01 09:30:43.931522 2023\] \[:error\] \[pid 3818:tid 139711186286336\] \[client 54.241.184.13:51864\] \[client 54.241.184.13\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "www.ut-addicted.com"\] \[uri "/sftp-config.json"\] \[unique_id "ZUIMs8fbcUrOCKr2kFzqiAAAAMA"\] show less	Brute-Force Web App Attack

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇺 193.201.190.106

🇬🇧 161.35.34.21

🇺🇸 147.90.234.13

🇮🇳 117.204.197.227

🇳🇱 104.23.170.11

🇭🇰 95.182.95.43

🇨🇦 85.217.149.2

🇮🇱 62.90.188.247

🇮🇳 52.172.226.14

🇻🇳 14.224.253.94

🇳🇱 193.47.62.69

🇧🇷 192.145.221.216

🇺🇸 185.223.152.217

🇧🇩 182.48.80.240

🇨🇱 181.43.35.165

🇺🇸 158.94.187.184

🇺🇸 144.225.187.68

🇳🇱 138.226.239.34

🇰🇷 121.131.220.143

🇮🇳 103.206.227.122