AbuseIPDB » 54.91.119.195

54.91.119.195 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services NoVa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-91-119-195.compute-1.amazonaws.com
Domain Name	amazon.com
Country	United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 54.91.119.195

Whois 54.91.119.195

IP Abuse Reports for 54.91.119.195:

This IP address has been reported a total of 139 times from 82 distinct sources. 54.91.119.195 was first reported on March 24th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Sipo Chutão	2025-04-12 03:00:01 (1 week ago)	ModSecurity: Access denied with code 403 (phase 2). Pattern match ^(?:web(?:(?:st(?:ripp)?| download ... show moreModSecurity: Access denied with code 403 (phase 2). Pattern match ^(?:web(?:(?:st(?:ripp)?| download|copi)er|zip)|(?:prowebwalk|sitesnagg)er|c(?:heesebot|ombine)|teleport pro|black hole|chinaclaw)" show less	Hacking
AvonleaConsulting	2025-04-03 22:58:55 (2 weeks ago)	Brute force attack stopped by firewall	Web Spam Brute-Force Web App Attack
LRob.fr	2025-04-03 22:04:02 (2 weeks ago)	Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail	Bad Web Bot
Anonymous	2025-04-03 03:54:03 (3 weeks ago)	Malicious activity detected	Hacking Web App Attack
Mendip_Defender	2025-04-03 00:02:38 (3 weeks ago)	54.91.119.195 - - [03/Apr/2025:01:02:31 +0100] "GET //blog.jackstringer.co.uk/wp-content/themes/twen ... show more54.91.119.195 - - [03/Apr/2025:01:02:31 +0100] "GET //blog.jackstringer.co.uk/wp-content/themes/twentyseventeen/assets/js/jquery.scrollTo.js HTTP/1.0" 301 1000 "-" "Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_2_1 like Mac OS X; da-dk) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8C148 Safari/6533.18.5" 54.91.119.195 - - [03/Apr/2025:01:02:31 +0100] "GET //blog.jackstringer.co.uk/wp-content/plugins/simple-lightbox/themes/default/js/prod/client.js HTTP/1.0" 301 1005 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G925F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" ... show less	Hacking Web App Attack
Christopher Hughes	2025-04-02 23:31:18 (3 weeks ago)	54.91.119.195 - - [03/Apr/2025:00:31:18 +0100] "GET /dist/js/bootstrap.bundle.min.js HTTP/1.1" 404 3 ... show more54.91.119.195 - - [03/Apr/2025:00:31:18 +0100] "GET /dist/js/bootstrap.bundle.min.js HTTP/1.1" 404 3751 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; http://www.google.com/bot.html)" ... show less	Web App Attack
AvonleaConsulting	2025-04-02 22:50:54 (3 weeks ago)	Brute force attack stopped by firewall	Web Spam Brute-Force Web App Attack
S.O.B.A. Dev.	2025-04-02 22:19:21 (3 weeks ago)	Threat Blocked by BeeHive from (ASN:14618) (Network:AMAZON-AES) (Host:soba.dev) (Method:GET) (Protoc ... show moreThreat Blocked by BeeHive from (ASN:14618) (Network:AMAZON-AES) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2025-04-02T22:19:21Z) show less	Web Spam Brute-Force Web App Attack
ozisp.com.au	2025-04-02 21:24:00 (3 weeks ago)	US_Amazon Amazon_<33>1743629039 [1:2033166:2] ET SCAN AOL Webcrawler User-Agent [Classificatio ... show moreUS_Amazon Amazon_<33>1743629039 [1:2033166:2] ET SCAN AOL Webcrawler User-Agent [Classification: Not Suspicious Traffic] [Priority: 3] {TCP} 54.91.119.195:44910 show less	Hacking
dzpk	2025-04-02 21:20:39 (3 weeks ago)	[02/Apr/2025:23:19:28 +0200] 17436287682.428808 54.91.119.195 39390 HOST 443 [02/Apr/2025:23:20:38 + ... show more[02/Apr/2025:23:19:28 +0200] 17436287682.428808 54.91.119.195 39390 HOST 443 [02/Apr/2025:23:20:38 +0200] 174362883878.588238 54.91.119.195 53690 HOST 443 [02/Apr/2025:23:20:38 +0200] 174362883862.147251 54.91.119.195 53710 HOST 443 show less	Web App Attack
sefinek.net	2025-04-02 18:01:06 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: ... show moreTriggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: 14618 (AMAZON-AES) Protocol: HTTP/1.1 (GET method) Timestamp: 2025-04-02T15:15:11Z UA: SonyEricssonK810i/R1KG Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
CryptoYakari	2025-04-02 17:53:12 (3 weeks ago)	54.91.119.195 - - [02/Apr/2025:20:53:10 +0300] "GET //ajax.googleapis.com/ajax/libs/jquery/1.4.2/jqu ... show more54.91.119.195 - - [02/Apr/2025:20:53:10 +0300] "GET //ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.0" 404 3184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" 54.91.119.195 - - [02/Apr/2025:20:53:10 +0300] "GET //feed.mikle.com/js/fw-loader.js HTTP/1.0" 404 3184 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 54.91.119.195 - - [02/Apr/2025:20:53:10 +0300] "GET //ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.0" 404 3510 "-" "Mozilla/5.0 (Linux; Android 9; G8343 Build/47.2.A.10.107; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/76.0.3809.111 Mobile Safari/537.36 [FB_IAB/Orca-Android;FBAV/229.1.0.17.118;]" 54.91.119.195 - - [02/Apr/2025:20:53:10 +0300] "GET //s7.addthis.com/js/300/addthis_widget.js HTTP/1.0" 404 3510 "-" "Mozilla/5.0 (Linux; Android 9; POCOPHONE F1) AppleWebKit/537.36 (KHTML, like ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
tentwentyfour	2025-04-02 16:34:07 (3 weeks ago)	Blocked for probing for web application vulnerabilities	Brute-Force Web App Attack
LRob.fr	2025-04-02 15:45:24 (3 weeks ago)	Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail	Bad Web Bot
geot	2025-04-02 15:28:30 (3 weeks ago)	JavaScript scanning bot	Bad Web Bot Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩