JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.85.87.44

54.85.87.44 was found in our database!

This IP was reported 61 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-85-87-44.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.85.87.44

Whois 54.85.87.44

IP Abuse Reports for 54.85.87.44:

This IP address has been reported a total of 61 times from 57 distinct sources. 54.85.87.44 was first reported on August 21st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-08-22 21:58:14 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 craudiovizai	2026-08-21 12:30:23 (2 days ago)	Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-login.php. Blocked ... show more Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-login.php. Blocked at the edge. show less	Web App Attack Bad Web Bot
🇭🇺 miszterx.hu	2026-08-21 11:53:14 (2 days ago)	XORP (haproxy): 2x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ipt ... show more XORP (haproxy): 2x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu) show less	Web App Attack
🇺🇸 Charlesiv	2026-08-21 08:02:11 (3 days ago)	Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE ASN: 14618 (Amazon.com, ... show more Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE ASN: 14618 (Amazon.com, Inc.) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-08-21T07:16:31Z Ray ID: a2e7da4fdd8ffbdd UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 MyGlobalFlowers	2026-08-21 07:14:19 (3 days ago)	Multiple WAF Violations	Web App Attack
🇺🇦 Olexiy Backend	2026-08-21 06:55:46 (3 days ago)	54.85.87.44 ...	Bad Web Bot Web App Attack
Anonymous	2026-08-21 06:55:00 (3 days ago)	Web application attack detected.	Web App Attack
🇺🇸 lavnet.net	2026-08-21 06:18:44 (3 days ago)	[Fri Aug 21 06:18:43.225584 2026] [authz_core:error] [pid 3093312:tid 3093357] [client 54.85.87.44:5 ... show more [Fri Aug 21 06:18:43.225584 2026] [authz_core:error] [pid 3093312:tid 3093357] [client 54.85.87.44:52116] AH01630: client denied by server configuration: /var/www/thejunkymonkey.com/web/index.php [Fri Aug 21 06:18:43.225860 2026] [authz_core:error] [pid 3093312:tid 3093357] [client 54.85.87.44:52116] AH01630: client denied by server configuration: /var/www/thejunkymonkey.com/web/index.php [Fri Aug 21 06:18:43.767577 2026] [authz_core:error] [pid 3093311:tid 3093413] [client 54.85.87.44:52130] AH01630: client denied by server configuration: /var/www/thejunkymonkey.com/web/wp-login.php ... show less	Brute-Force
Anonymous	2026-08-21 06:13:30 (3 days ago)	Attack detected: 54.85.87.44 [2026-08-21] Categories: 21 --- wp2shell/batch exploit (3 hits) --- 54. ... show more Attack detected: 54.85.87.44 [2026-08-21] Categories: 21 --- wp2shell/batch exploit (3 hits) --- 54.85.87.44 - - [21/Aug/2026:05:30:16 +0000] "GET /wp-json/batch/v1 HTTP/1.1" 404 5072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 54.85.87.44 - - [21/Aug/2026:05:30:20 +0000] "GET /?rest_route=/batch/v1 HTTP/1.1" 404 5073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 54.85.87.44 - - [21/Aug/2026:05:30:25 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 5381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Web App Attack
🇵🇱 Budyn	2026-08-21 06:07:38 (3 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: www.definitelynotahoneypot.online \| URI: /wp-json/batch/v1 \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 conrad10781	2026-08-21 06:03:53 (3 days ago)	nginx-wordpress	Web App Attack
🇬🇧 cybersteve99	2026-08-21 06:02:04 (3 days ago)	Too many 4xx Requests -	Brute-Force Web App Attack
🇳🇱 Joop	2026-08-21 05:55:40 (3 days ago)	2026-08-21 07:55:37 +0200 s40 /wp-login.php	Web App Attack
🇩🇪 findlab	2026-08-21 05:25:01 (3 days ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇺🇸 maza	2026-08-21 05:17:57 (3 days ago)	Malicious activity detected from 14618 Amazon.com, Inc. towards host alterminds.xyz (POST HTTP/1.1) ... show more Malicious activity detected from 14618 Amazon.com, Inc. towards host alterminds.xyz (POST HTTP/1.1) @ 2026-08-21T05:17:57Z show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.85.115.38

🇷🇺 176.99.130.169

🇩🇪 168.119.48.179

🇺🇸 162.216.149.77

🇰🇷 122.0.52.190

🇺🇸 104.23.160.39

🇫🇷 91.231.89.4

🇫🇷 91.196.152.33

🇳🇱 31.14.32.8

🇨🇳 223.109.252.235

🇨🇳 223.76.225.18

🇸🇬 207.148.71.42

🇺🇸 166.62.41.190

🇯🇵 153.151.103.6

🇨🇳 112.86.225.236

🇲🇾 49.125.201.80

🇳🇱 45.148.10.157

🇪🇬 41.33.209.188

🇺🇸 20.168.122.18

🇬🇧 5.252.83.24