JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.67.59.157

54.67.59.157 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 57%: ?

57%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-67-59-157.us-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.67.59.157

Whois 54.67.59.157

IP Abuse Reports for 54.67.59.157:

This IP address has been reported a total of 14 times from 10 distinct sources. 54.67.59.157 was first reported on May 25th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 taivas.nl	2026-07-30 04:33:00 (1 hour ago)	Many_bad_calls	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-29 22:05:38 (7 hours ago)	Auto-ban: >3000 req/min op 2026-07-29	Web App Attack SSH Hacking
🇧🇪 taivas.nl	2026-07-29 11:32:12 (18 hours ago)	Bad_requests	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-29 09:33:54 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.67.59.157 (ec2-54-67-59-157.us-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 54.67.59.157 (ec2-54-67-59-157.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 05:33:50.269570 2026] [security2:error] [pid 3500695:tid 3500695] [client 54.67.59.157:34118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "holisticbuildingexperience.com"] [uri "/.git/config"] [unique_id "amnI_iNVvy5AE9NIeHlG-AAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-29 09:13:15 (20 hours ago)	Automated Apache suspicious-path probe detected in last 15m: hits=204; wp-login_hits=0; url=/.git/co ... show more Automated Apache suspicious-path probe detected in last 15m: hits=204; wp-login_hits=0; url=/.git/config\|/.env\|/.env.local\|/.env.staging\|/.env.production\|/.env.development\|/.env.test\|/.env.remote\|(+196 more) show less	Web App Attack
🇬🇧 rakkor	2026-07-29 08:15:04 (21 hours ago)	2026-07-29T09:15:03+01:00 NAS [Wed Jul 29 09:15:03.516023 2026] [proxy_fcgi:error] [pid 12363:tid 12 ... show more 2026-07-29T09:15:03+01:00 NAS [Wed Jul 29 09:15:03.516023 2026] [proxy_fcgi:error] [pid 12363:tid 12390] [client 54.67.59.157:36008] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Hacking
Anonymous	2026-07-29 07:09:35 (22 hours ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan
Anonymous	2026-07-29 07:00:00 (22 hours ago)	Automated Apache web application probing in selected 24h window; attempts=408, unique_paths=204, err ... show more Automated Apache web application probing in selected 24h window; attempts=408, unique_paths=204, error_responses=204; targets include WordPress, .env/.git, phpMyAdmin, autodiscover, wpad.dat and related probe paths. show less	Web App Attack
Anonymous	2026-07-29 07:00:00 (22 hours ago)	Apache probe; attempts=408; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.en ... show more Apache probe; attempts=408; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.env.bak \| /.env.ci \| /.env.dev \| /.env.development \| /.env.dist \| /.env.docker \| /.env.example \| /.env.json \| /.env.live \| /.env.local \| /.env.old \| /.env.preprod \| /.env.prod \| /.env.production \| /.env.remote \| /.env.sample \| /.env.save \| /.env.stage \| /.env.staging \| /.env.swp \| /.env.test \| /.env.txt \| /.env.uat \| /.env.yaml \| /.env.yml \| /.env~ \| /.git/.env \| /.git/config \| /actions/.env \| /admin-panel/.env \| /admin/.env \| /administrator/.env \| /angular/.env \| /ansible/.env \| /api/.env \| /api/dev/.env \| /api/staging/.env \| /api/v1/.env \| /api/v2/.env \| /api/v3/.env \| /app/.env \| /application/.env \| /apps/.env \| /assets/.env \| /aws/.env \| /azure/.env \| /backend/.env \| /backup/.env \| /backups/.env \| /beta/.env \| /bin/.env \| /bootstrap/.env \| /brevo/.env \| /build/.env \| /buildkite/.env \| /bulk/.env \| /cache/.en \| ... [204 exact paths total] show less	Web App Attack
🇩🇪 simsung	2026-07-29 05:17:18 (1 day ago)	54.67.59.157 - - [29/Jul/2026:05:17:18 +0000] "GET /.git/config HTTP/1.1" 403 177 "-" "Mozilla/5.0 ( ... show more 54.67.59.157 - - [29/Jul/2026:05:17:18 +0000] "GET /.git/config HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot
🇫🇷 omartin	2026-07-29 04:55:03 (1 day ago)	Critical Vulnerability Scan detected	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 04:36:28 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 54.67.59.157 (ec2-54-67-59-157.us-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 54.67.59.157 (ec2-54-67-59-157.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 00:36:22.024945 2026] [security2:error] [pid 19663:tid 19663] [client 54.67.59.157:39734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "holboxwhalesharktours.net"] [uri "/.git/config"] [unique_id "ammDRgbCilmTQNA8SEomGgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-29 04:30:50 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 54.67.59.157 (US/United States/ec2-54-6 ... show more (mod_security) mod_security triggered on hostname [redacted] 54.67.59.157 (US/United States/ec2-54-67-59-157.us-west-1.compute.amazonaws.com) show less	SQL Injection
🇫🇷 bigorre.org	2025-05-25 21:36:15 (1 year ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.186.99.209

🇻🇳 165.154.105.128

🇩🇪 154.14.139.242

🇺🇸 104.248.218.184

🇱🇹 77.90.185.10

🇺🇸 64.62.197.226

🇸🇬 47.84.115.191

🇩🇪 45.129.242.233

🇧🇪 34.34.167.255

🇨🇳 27.39.128.170

🇺🇿 213.230.99.186

🇲🇦 196.92.7.249

🇩🇪 194.88.98.122

🇦🇷 190.181.97.250

🇧🇷 177.220.182.134

🇦🇺 157.211.246.182

🇮🇷 85.204.76.139

🇺🇸 64.62.156.97

🇬🇧 35.203.210.105

🇺🇸 32.218.35.112