JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.173.125.255

54.173.125.255

Activity Trending Down

88 reports found in our database

100% ▼ ▼ ▼ Critical

Abuse confidence score ?

ISP

Amazon Technologies Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS14618

Hostname(s)

ec2-54-173-125-255.compute-1.amazonaws.com

Domain Name

amazon.com

Country

🇺🇸 United States of America

City

Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 54.173.125.255:

This IP address has been reported a total of 88 times from 63 distinct sources. 54.173.125.255 was first reported on August 27th 2026, and the most recent report was 1 week ago. In the last 60 days, the top reporter locations were: Germany with 23 reports; Netherlands with 8 reports; United States of America with 7 reports. The most common categories in these recent reports were: Web App Attack 68 times; Hacking 25 times; Brute-Force 17 times; Bad Web Bot 16 times; DDoS Attack 5 times; Other 9 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gu-alvareza	2026-09-01 05:05:53 (1 week ago)	Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass	Web App Attack
🇳🇱 e.fierstra	2026-08-31 20:55:16 (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-08-31 20:41:16 (1 week ago)	54.173.125.255 - - [31/Aug/2026:22:41:15 +0200] "GET /dist/manifest.json HTTP/2.0" 404 4620 "-" "Moz ... show more 54.173.125.255 - - [31/Aug/2026:22:41:15 +0200] "GET /dist/manifest.json HTTP/2.0" 404 4620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0" 54.173.125.255 - - [31/Aug/2026:22:41:15 +0200] "GET /build/manifest.json HTTP/2.0" 404 4620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0" 54.173.125.255 - - [31/Aug/2026:22:41:15 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 4620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0" ... show less	DDoS Attack Hacking
🇧🇪 voormedia	2026-08-31 16:54:38 (1 week ago)	Accessed trap at '/.git/config'	Web App Attack
🇫🇷 Baking333	2026-08-31 10:44:07 (1 week ago)	[redacted] 54.173.125.255 - - [31/Aug/2026:11:44:06 +0100] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f% ... show more [redacted] 54.173.125.255 - - [31/Aug/2026:11:44:06 +0100] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%[redacted] HTTP/1.1" 404 463 0/129 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" [redacted] 54.173.125.255 - - [31/Aug/2026:11:44:06 +0100] "GET /resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%[redacted] HTTP/1.1" 404 463 0/211 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2026-08-31 09:41:37 (1 week ago)	FortiWeb WAF: 20 attacks detected. Threat Score: 6000. Types: Client Management(10), Block IP List(1 ... show more FortiWeb WAF: 20 attacks detected. Threat Score: 6000. Types: Client Management(10), Block IP List(10). Origin: United States. show less	Web App Attack
🇧🇪 voormedia	2026-08-31 09:34:20 (1 week ago)	Accessed trap at '/.aws/credentials'	Web App Attack
🇩🇪 netclix.gr	2026-08-31 09:23:02 (1 week ago)	(c5_sensitive_scan) Custom5 Sensitive File Exploit Blocked 54.173.125.255 (US/United States/ec2-54-1 ... show more (c5_sensitive_scan) Custom5 Sensitive File Exploit Blocked 54.173.125.255 (US/United States/ec2-54-173-125-255.compute-1.amazonaws.com): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: default:80 54.173.125.255 - - [31/Aug/2026:12:22:58 +0300] "GET /dist/manifest.json HTTP/1.1" 404 417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" show less	Port Scan
🇩🇪 raph	2026-08-31 08:35:21 (1 week ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇩🇪 yvoictra	2026-08-31 07:13:50 (1 week ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-probing	Web App Attack
🇭🇳 unph	2026-08-31 07:13:36 (1 week ago)	Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin	Brute-Force
🇧🇪 voormedia	2026-08-31 04:04:18 (1 week ago)	Accessed trap at '/.aws/config'	Web App Attack
🇮🇹 CoreTech srl	2026-08-31 02:52:39 (1 week ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇬🇧 WebNiraj	2026-08-31 01:54:42 (1 week ago)	(mod_security) mod_security (id:949110) triggered by 54.173.125.255 (US/United States/ec2-54-173-125 ... show more (mod_security) mod_security (id:949110) triggered by 54.173.125.255 (US/United States/ec2-54-173-125-255.compute-1.amazonaws.com): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇱🇻 garmtech.com	2026-08-31 01:23:57 (1 week ago)	Attempted access to sensitive endpoint (/login) detected. Automated scan or unauthorized probing.	Web App Attack

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.166.207.82

🇦🇷 200.59.72.28

🇦🇪 176.204.4.74

🇦🇺 170.64.171.176

🇺🇸 167.71.92.195

🇫🇷 85.217.140.33

🇮🇳 65.0.135.19

🇳🇱 45.148.10.141

🇨🇦 4.204.224.164

🇺🇸 195.184.76.175

🇳🇱 185.93.89.118

🇺🇦 176.120.100.205

🇭🇰 156.245.246.50

🇺🇸 45.33.89.53

🇧🇷 179.98.163.152

🇺🇸 147.185.132.255

🇱🇹 62.60.130.242

🇰🇷 222.110.147.56

🇦🇷 200.61.181.65

🇸🇪 155.4.218.159