AbuseIPDB » 3.101.54.52
3.101.54.52
This IP was reported 8 times. Confidence of
Abuse
is 24% : ?
ISP
Amazon.com, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-3-101-54-52.us-west-1.compute.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸
United States of America
City
San Jose, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 3.101.54.52 :
This IP address has been reported a total of
8
times from
6 distinct
sources.
3.101.54.52 was first reported on
January 23rd 2021 , and the most recent report was
10 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
masterguru
2026-06-24 02:07:41
(10 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇵🇱
Niko's Stuff
2026-06-24 00:42:21
(12 hours ago)
Triggered crowdsecurity/http-sensitive-files. More information at: https://app.crowdsec.net/cti/3.10 ...
show more
Triggered crowdsecurity/http-sensitive-files. More information at: https://app.crowdsec.net/cti/3.101.54.52
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-24 00:33:49
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 3.101.54.52 (ec2-3-101-54-52.us-west-1.compute. ...
show more
(mod_security) mod_security (id:210492) triggered by 3.101.54.52 (ec2-3-101-54-52.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 20:33:44.704640 2026] [security2:error] [pid 11933:tid 11933] [client 3.101.54.52:47792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dragonfly.garden"] [uri "/.git/config"] [unique_id "ajsl6IsaMKCfgZAO0uWGFAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jaapeldoorn
2025-11-16 12:28:47
(7 months ago)
[Sun Nov 16 13:28:45.520838 2025] [access_compat:error] [pid 2599194:tid 2599204] [client 3.101.54.5 ...
show more
[Sun Nov 16 13:28:45.520838 2025] [access_compat:error] [pid 2599194:tid 2599204] [client 3.101.54.52:37716] AH01797: client denied by server configuration: /mnt/myNAS/var/www/nextcloud/config/.env
[Sun Nov 16 13:28:45.579869 2025] [access_compat:error] [pid 2599194:tid 2599241] [client 3.101.54.52:37746] AH01797: client denied by server configuration: /mnt/myNAS/var/www/nextcloud/config/.env.old
[Sun Nov 16 13:28:45.593118 2025] [access_compat:error] [pid 2599195:tid 2599220] [client 3.101.54.52:37768] AH01797: client denied by server configuration: /mnt/myNAS/var/www/nextcloud/config/.env.save
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2025-11-16 04:08:08
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 3.101.54.52 (ec2-3-101-54-52.us-west-1.compute. ...
show more
(mod_security) mod_security (id:210492) triggered by 3.101.54.52 (ec2-3-101-54-52.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 23:08:04.945889 2025] [security2:error] [pid 16226:tid 16226] [client 3.101.54.52:59764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nmposters.com"] [uri "/.env"] [unique_id "aRlOJE40sTIB3NAK7MLNPwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-15 03:40:13
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 3.101.54.52 (ec2-3-101-54-52.us-west-1.compute. ...
show more
(mod_security) mod_security (id:210492) triggered by 3.101.54.52 (ec2-3-101-54-52.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 22:40:08.865764 2025] [security2:error] [pid 30614:tid 30681] [client 3.101.54.52:49428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seattlefamilydoula.com"] [uri "/.git/config"] [unique_id "aRf2GEY2d-VYuFdJyLX29gAAAcs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-11-14 23:03:31
(7 months ago)
Auto-ban: >3000 req/min op 2025-11-14
Hacking
Web App Attack
SSH
🇨🇦
nextoo.de
2021-01-23 16:12:44
(5 years ago)
Chat Spam
Web Spam
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: