JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.90.93.193

Neutral Activity

Abuse confidence score ?

0% Low Risk

62 reports

47 reporters · latest 1 year ago

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-90-93-193.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.90.93.193 has been reported 62 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 54.90.93.193

Export CSV

This IP address has been reported a total of 62 times from 47 distinct sources. 54.90.93.193 was first reported on September 24th 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-09-26 20:09:01 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-26 00:08:59 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-25 20:09:00 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 octageeks.com	2025-09-25 04:06:55 (1 year ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇩🇪 SpaceHost-Server	2025-09-24 22:31:09 (1 year ago)		Brute-Force Web App Attack
🇺🇸 Charlesiv	2025-09-24 19:36:08 (1 year ago)	Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE ASN: 14618 (AMAZON-AES) ... show more Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE ASN: 14618 (AMAZON-AES) Protocol: HTTP/1.1 (GET method) Endpoint: //site/wp-includes/wlwmanifest.xml Timestamp: 2025-09-24T19:01:48Z Ray ID: 9844884f4c703450 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-09-24 19:31:15 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 54.90.93.193 (ec2-54-90-93-193.compute-1.amazon ... show more (mod_security) mod_security (id:225170) triggered by 54.90.93.193 (ec2-54-90-93-193.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 15:31:08.058166 2025] [security2:error] [pid 13810:tid 13810] [client 54.90.93.193:62308] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.bernsteinip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bernsteinip.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNRG_OPKdC3_0dKz4OpUhwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 applemooz	2025-09-24 19:19:01 (1 year ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-09-24 17:44:26 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 54.90.93.193 (ec2-54-90-93-193.compute-1.amazon ... show more (mod_security) mod_security (id:225170) triggered by 54.90.93.193 (ec2-54-90-93-193.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 13:44:19.808176 2025] [security2:error] [pid 2585999:tid 2586024] [client 54.90.93.193:59381] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.ccgparquitectos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ccgparquitectos.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNQt866WKTzVDzjQKzjb0QAAAVQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 KitsuneTech	2025-09-24 17:30:17 (1 year ago)	54.90.93.193 - - [24/Sep/2025:12:30:17 -0500] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 259 " ... show more 54.90.93.193 - - [24/Sep/2025:12:30:17 -0500] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-09-24 17:28:10 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 54.90.93.193 (ec2-54-90-93-193.compute-1.amazon ... show more (mod_security) mod_security (id:225170) triggered by 54.90.93.193 (ec2-54-90-93-193.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 13:28:05.531217 2025] [security2:error] [pid 3628:tid 3628] [client 54.90.93.193:60856] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cathybermanmft.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cathybermanmft.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNQqJTQO4f8DCvHFim8qewAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2025-09-24 17:06:15 (1 year ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 iNetWorker	2025-09-24 17:06:14 (1 year ago)	trolling for resource vulnerabilities	Web App Attack
🇨🇦 polycoda	2025-09-24 16:58:11 (1 year ago)	⌨️ Probes for wlwmanifest.xml everywhere	Hacking Web App Attack
🇺🇸 myagent.site	2025-09-24 16:48:20 (1 year ago)	Blocked user enumeration attempt	Hacking

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2400:cb00:555:1000:ff1:729e:2547:a559

🇨🇳 220.167.233.123

🇨🇳 218.94.4.146

🇺🇸 205.188.180.183

🇨🇳 203.212.9.248

🇲🇲 203.9.219.198

🇬🇧 200.138.46.173

🇵🇱 194.180.49.77

🇨🇳 183.252.199.17

🇬🇧 35.203.211.202

🇷🇴 2.57.121.25

🇳🇱 2400:cb00:555:1000:cd84:3339:a92e:607e

🇰🇷 180.182.228.203

🇷🇸 158.173.240.236

🇩🇪 109.160.32.147

🇳🇱 109.160.32.127

🇮🇳 103.177.16.97

🇧🇩 103.23.95.99

🇬🇧 87.236.176.78

🇩🇪 83.135.191.130