JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.154.71.94

54.154.71.94 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 63%: ?

63%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-154-71-94.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.154.71.94

Whois 54.154.71.94

IP Abuse Reports for 54.154.71.94:

This IP address has been reported a total of 14 times from 10 distinct sources. 54.154.71.94 was first reported on July 24th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Octopuce	2026-07-26 02:05:46 (2 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-25 21:59:36 (7 hours ago)	Auto-ban: >3000 req/min op 2026-07-25	Web App Attack SSH Hacking
Anonymous	2026-07-25 05:07:49 (23 hours ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan
🇧🇪 taivas.nl	2026-07-25 04:33:23 (1 day ago)	Many_bad_calls	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 11:04:12 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 54.154.71.94 (ec2-54-154-71-94.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 54.154.71.94 (ec2-54-154-71-94.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 07:04:06.753782 2026] [security2:error] [pid 1709639:tid 1709639] [client 54.154.71.94:47908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jwilder.com"] [uri "/.git/config"] [unique_id "amNGph20oz6c3x1wy3mbfQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 Valhalla	2026-07-24 08:11:02 (1 day ago)	~ suspicious post ~	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 07:56:55 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 54.154.71.94 (ec2-54-154-71-94.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 54.154.71.94 (ec2-54-154-71-94.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:56:48.401730 2026] [security2:error] [pid 8902:tid 8902] [client 54.154.71.94:47520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justiart.com"] [uri "/.git/config"] [unique_id "amMawDC_ts6IcI3zwD_uFwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-24 06:20:26 (1 day ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇧🇪 taivas.nl	2026-07-24 05:32:02 (1 day ago)	Wordpress_Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 05:09:44 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 54.154.71.94 (ec2-54-154-71-94.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 54.154.71.94 (ec2-54-154-71-94.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 01:09:39.040688 2026] [security2:error] [pid 3865638:tid 3865638] [client 54.154.71.94:36882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "junoproperties.com"] [uri "/.git/config"] [unique_id "amLzk9Y8KtgPIrwbiRQkmAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 04:44:43 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 54.154.71.94 (ec2-54-154-71-94.eu-west-1.comput ... show more (mod_security) mod_security (id:210492) triggered by 54.154.71.94 (ec2-54-154-71-94.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 00:44:38.214912 2026] [security2:error] [pid 3042052:tid 3042052] [client 54.154.71.94:43148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "juniperhills.net"] [uri "/.git/config"] [unique_id "amLttlwF53lB_wkKhXvXWQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Tsumugi Kotobuki	2026-07-24 03:37:23 (2 days ago)	Web Scan (L7) \| Paths: /.git/config, /.env \| Codes: 444(2x) \| rDNS: ec2-54-154-71-94.eu-west-1.compu ... show more Web Scan (L7) \| Paths: /.git/config, /.env \| Codes: 444(2x) \| rDNS: ec2-54-154-71-94.eu-west-1.compute.amazonaws.com \| F2B/angie-path-trap@2026-07-24T03:37:22Z show less	Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-24 03:04:51 (2 days ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
🇫🇷 Feelautom	2026-07-24 03:03:29 (2 days ago)	[FeelAutom Auto-Ban] PathScan: /.env.backup (Score: 200)	Port Scan

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.95.186.208

🇵🇱 176.53.159.198

🇺🇸 172.236.111.197

🇺🇸 64.62.156.141

🇫🇷 15.237.62.201

🇲🇽 201.149.53.243

🇺🇿 198.163.192.133

🇧🇬 193.24.211.230

🇨🇳 182.242.169.54

🇮🇳 136.232.11.10

🇨🇳 119.97.189.120

🇨🇦 85.217.149.50

🇪🇸 68.221.130.241

🇯🇵 8.209.238.181

🇷🇴 2.57.121.25

🇺🇸 2607:f8b0:4001:c17::129

🇨🇳 180.76.202.69

🇺🇸 162.216.150.193

🇺🇸 147.185.132.158

🇺🇸 107.22.152.216