JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.117.6.168

54.117.6.168 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 35%: ?

35%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-117-6-168.ap-northeast-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇰🇷 Korea (the Republic of)
City	Incheon, Incheon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.117.6.168

Whois 54.117.6.168

IP Abuse Reports for 54.117.6.168:

This IP address has been reported a total of 10 times from 6 distinct sources. 54.117.6.168 was first reported on July 16th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-18 00:54:18 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.c ... show more (mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 20:54:13.509320 2026] [security2:error] [pid 4376:tid 4376] [client 54.117.6.168:48732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allmyartprojects.com"] [uri "/.git/config"] [unique_id "alrOtWFSXYstw2x3twqZ3AAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure	2026-07-17 12:10:24 (6 days ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 10:29:58 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.c ... show more (mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 06:29:51.875084 2026] [security2:error] [pid 4149:tid 4149] [client 54.117.6.168:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ndanetworks.com"] [uri "/.git/config"] [unique_id "aloEH6-uJltNtuiYJV2XswAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 07:10:46 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.c ... show more (mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 03:10:39.038260 2026] [security2:error] [pid 375487:tid 375487] [client 54.117.6.168:35710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mumawvickers.com"] [uri "/.git/config"] [unique_id "alnVb6QPsTvn5hQyMZ-qlAAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 03:25:10 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.c ... show more (mod_security) mod_security (id:210492) triggered by 54.117.6.168 (ec2-54-117-6-168.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:25:06.007139 2026] [security2:error] [pid 12096:tid 12102] [client 54.117.6.168:57182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mjkotob.com"] [uri "/.git/config"] [unique_id "almgkgX_xR9UM3jg2Og6OwAAAEI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 900cm	2026-07-16 23:23:03 (1 week ago)	[Fri Jul 17 01:23:01.815953 2026] [access_compat:error] [pid 242699:tid 242699] [client 54.117.6.168 ... show more [Fri Jul 17 01:23:01.815953 2026] [access_compat:error] [pid 242699:tid 242699] [client 54.117.6.168:44012] AH01797: client denied by server configuration: /var/www/darkintruder/.git [Fri Jul 17 01:23:02.249655 2026] [access_compat:error] [pid 242699:tid 242699] [client 54.117.6.168:44012] AH01797: client denied by server configuration: /var/www/darkintruder/.env [Fri Jul 17 01:23:02.465788 2026] [access_compat:error] [pid 242699:tid 242699] [client 54.117.6.168:44012] AH01797: client denied by server configuration: /var/www/darkintruder/.env.local ... show less	Port Scan Brute-Force SSH
Anonymous	2026-07-16 22:15:04 (1 week ago)	54.117.6.168 - - [17/Jul/2026:00:14:50 +0200] "GET /info.php HTTP/1.1" 404 29222 54.117.6.168 - - [1 ... show more 54.117.6.168 - - [17/Jul/2026:00:14:50 +0200] "GET /info.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:14:51 +0200] "GET /php.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:14:53 +0200] "GET /i.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:14:54 +0200] "GET /pi.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:14:55 +0200] "GET /pinfo.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:14:56 +0200] "GET /test.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:14:57 +0200] "GET /phpinfo HTTP/1.1" 404 29861 54.117.6.168 - - [17/Jul/2026:00:14:58 +0200] "GET /p.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:14:59 +0200] "GET /debug.php HTTP/1.1" 404 29222 54.117.6.168 - - [17/Jul/2026:00:15:00 +0200] "GET /info HTTP/1.1" 404 29861 ... show less	Web Spam Web App Attack
🇿🇦 conure	2026-07-16 20:52:59 (1 week ago)	csagent: score 20.5: 404 noise floor x2, secrets grab x2; 1 domain(s) in 0s	Web App Attack
🇺🇸 nyt	2026-07-16 19:12:33 (1 week ago)	Sensitive File Probe	Web App Attack
🇮🇹 VHosting	2026-07-16 12:30:03 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.183

🇨🇳 120.48.82.124

🇺🇸 104.164.173.211

🇮🇳 103.181.5.124

🇰🇷 61.84.4.230

🇺🇸 47.251.125.33

🇳🇱 45.153.34.112

🇧🇷 187.52.212.235

🇺🇸 162.216.150.211

🇺🇸 162.216.149.167

🇳🇱 160.119.71.92

🇺🇸 147.185.132.173

🇺🇸 147.185.132.163

🇺🇸 147.185.132.129

🇫🇷 139.28.219.68

🇺🇸 107.173.119.162

🇨🇳 106.13.48.117

🇺🇸 104.164.173.128

🇺🇸 103.196.9.228

🇺🇸 103.196.9.167