JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.117.6.168

54.117.6.168 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 37%: ?

37%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-117-6-168.ap-northeast-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇰🇷 Korea (the Republic of)
City	Incheon, Incheon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.117.6.168

Whois 54.117.6.168

IP Abuse Reports for 54.117.6.168:

This IP address has been reported a total of 10 times from 6 distinct sources. 54.117.6.168 was first reported on July 16th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-18 00:54:18 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.c ... show more (mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 20:54:13.509320 2026] [security2:error] [pid 4376:tid 4376] [client 54.117.6.168:48732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allmyartprojects.com"] [uri "/.git/config"] [unique_id "alrOtWFSXYstw2x3twqZ3AAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure	2026-07-17 12:10:24 (3 days ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 10:29:58 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.c ... show more (mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 06:29:51.875084 2026] [security2:error] [pid 4149:tid 4149] [client 54.117.6.168:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ndanetworks.com"] [uri "/.git/config"] [unique_id "aloEH6-uJltNtuiYJV2XswAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 07:10:46 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.c ... show more (mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 03:10:39.038260 2026] [security2:error] [pid 375487:tid 375487] [client 54.117.6.168:35710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mumawvickers.com"] [uri "/.git/config"] [unique_id "alnVb6QPsTvn5hQyMZ-qlAAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 03:25:10 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.c ... show more (mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:25:06.007139 2026] [security2:error] [pid 12096:tid 12102] [client 54.117.6.168:57182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mjkotob.com"] [uri "/.git/config"] [unique_id "almgkgX_xR9UM3jg2Og6OwAAAEI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 900cm	2026-07-16 23:23:03 (3 days ago)	[Fri Jul 17 01:23:01.815953 2026] [access_compat:error] [pid 242699:tid 242699] [client 54.117.6.168 ... show more [Fri Jul 17 01:23:01.815953 2026] [access_compat:error] [pid 242699:tid 242699] [client 54.117.6.168:44012] AH01797: client denied by server configuration: /var/www/darkintruder/.git [Fri Jul 17 01:23:02.249655 2026] [access_compat:error] [pid 242699:tid 242699] [client 54.117.6.168:44012] AH01797: client denied by server configuration: /var/www/darkintruder/.env [Fri Jul 17 01:23:02.465788 2026] [access_compat:error] [pid 242699:tid 242699] [client 54.117.6.168:44012] AH01797: client denied by server configuration: /var/www/darkintruder/.env.local ... show less	Port Scan Brute-Force SSH
Anonymous	2026-07-16 22:15:04 (3 days ago)	54.117.6.168 - - [17/Jul/2026:00:14:50 +0200] "GET /info.php HTTP/1.1" 404 29222 54.117.6.168 - - [1 ... show more 54.117.6.168 - - [17/Jul/2026:00:14:50 +0200] "GET /info.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:14:51 +0200] "GET /php.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:14:53 +0200] "GET /i.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:14:54 +0200] "GET /pi.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:14:55 +0200] "GET /pinfo.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:14:56 +0200] "GET /test.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:14:57 +0200] "GET /phpinfo HTTP/1.1" 404 29861 54.117.6.168 - - [17/Jul/2026:00:14:58 +0200] "GET /p.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:14:59 +0200] "GET /debug.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:15:00 +0200] "GET /info HTTP/1.1" 404 29861 ... show less	Web Spam Web App Attack
🇿🇦 conure	2026-07-16 20:52:59 (3 days ago)	csagent: score 20.5: 404 noise floor x2, secrets grab x2; 1 domain(s) in 0s	Web App Attack
🇺🇸 nyt	2026-07-16 19:12:33 (3 days ago)	Sensitive File Probe	Web App Attack
🇮🇹 VHosting	2026-07-16 12:30:03 (3 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 179.60.77.89

🇩🇪 172.111.80.30

🇨🇳 120.194.220.230

🇻🇳 116.99.173.120

🇺🇸 103.203.57.13

🇷🇺 51.250.53.66

🇺🇸 20.65.202.2

🇬🇧 217.155.75.149

🇧🇷 200.150.74.254

🇳🇱 195.178.110.217

🇩🇪 193.124.20.245

🇩🇪 162.158.110.241

🇺🇸 136.144.43.148

🇮🇳 122.168.197.138

🇺🇸 107.173.255.111

🇧🇩 103.85.192.100

🇳🇱 193.176.31.247

🇺🇸 172.245.11.105

🇺🇸 172.236.228.224

🇭🇰 155.117.123.168