JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.161.130.54

54.161.130.54 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-161-130-54.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.161.130.54

Whois 54.161.130.54

IP Abuse Reports for 54.161.130.54:

This IP address has been reported a total of 74 times from 50 distinct sources. 54.161.130.54 was first reported on May 27th 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 René Hickersberger	2025-06-08 12:31:45 (1 year ago)	[2025-05-28T19:30:29Z] Malicious request to /.git/config	Hacking Bad Web Bot Web App Attack
🇦🇹 René Hickersberger	2025-06-03 00:47:03 (1 year ago)	[2025-05-28T19:30:29Z] Malicious request to /.git/config	Hacking Bad Web Bot Web App Attack
Anonymous	2025-05-31 09:56:14 (1 year ago)	[31/May/2025:19:56:13 +1000] "GET /.git/config HTTP/1.1" 301 252 "Mozilla/5.0 (Macintosh; Intel Mac ... show more [31/May/2025:19:56:13 +1000] "GET /.git/config HTTP/1.1" 301 252 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36" show less	Hacking Web App Attack
🇩🇪 mxinfra	2025-05-31 09:32:17 (1 year ago)	Blocked by Fail2Ban (plesk-modsecurity)	Hacking Brute-Force Web App Attack
🇫🇮 oh.mg	2025-05-31 09:32:00 (1 year ago)	[Sat May 31 11:30:31.059701 2025] [security2:error] [pid 3265481:tid 3265496] [client 54.161.130.54: ... show more [Sat May 31 11:30:31.059701 2025] [security2:error] [pid 3265481:tid 3265496] [client 54.161.130.54:54436] [client 54.161.130.54] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "vms.mrman.net"] [uri "/.git/config"] [unique_id "aDrMN1umJlGtq1fmdXSncgAAAEk"] [Sat May 31 11:31:59.511536 2025] [security2:error] [pid 1716707:tid 1716733] [client 54.161.130.54:0] [client 54.161.130.54] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [ta ... show less	Bad Web Bot Web App Attack
🇺🇸 Charlesiv	2025-05-31 07:40:29 (1 year ago)	Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE ASN: 14618 (AMAZON-AES) ... show more Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE ASN: 14618 (AMAZON-AES) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config Timestamp: 2025-05-31T06:14:08Z Ray ID: 9484544c19868233 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36 show less	Bad Web Bot
🇺🇸 MogBox	2025-05-31 06:56:21 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 54.161.130.54 (US/United States/ec2-54-161-130- ... show more (mod_security) mod_security (id:210492) triggered by 54.161.130.54 (US/United States/ec2-54-161-130-54.compute-1.amazonaws.com): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat May 31 02:56:12.658998 2025] [security2:error] [pid 1198320:tid 1198342] [remote 54.161.130.54:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mogbox.net"] [uri "/.git/config"] [unique_id "aDqoDF5sPZhF-s4j1cT3FwAAFBM"] show less	Hacking
🇦🇹 Markus Woegerbauer	2025-05-31 06:53:36 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 54.161.130.54 (US/United States/ec2-54- ... show more (mod_security) mod_security triggered on hostname [redacted] 54.161.130.54 (US/United States/ec2-54-161-130-54.compute-1.amazonaws.com) show less	SQL Injection
🇺🇸 Rip	2025-05-31 06:13:09 (1 year ago)	Automated reconnaissance attempt targeting restricted or sensitive paths. ...	Brute-Force Web App Attack
🇺🇸 MogBox	2025-05-31 05:52:58 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 54.161.130.54 (US/United States/ec2-54-161-130- ... show more (mod_security) mod_security (id:210492) triggered by 54.161.130.54 (US/United States/ec2-54-161-130-54.compute-1.amazonaws.com): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat May 31 01:52:44.854653 2025] [security2:error] [pid 1339449:tid 1339490] [client 54.161.130.54:57430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "srv.mogbox.net"] [uri "/.git/config"] [unique_id "aDqZLB1-XM2md6YxMM5hXQAAAE4"] show less	Hacking
🇺🇸 MogBox	2025-05-31 04:44:57 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 54.161.130.54 (US/United States/ec2-54-161-130- ... show more (mod_security) mod_security (id:210492) triggered by 54.161.130.54 (US/United States/ec2-54-161-130-54.compute-1.amazonaws.com): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat May 31 00:44:46.069848 2025] [security2:error] [pid 1339449:tid 1339491] [client 54.161.130.54:38986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mogbox.net"] [uri "/.git/config"] [unique_id "aDqJPh1-XM2md6YxMM5f_gAAAE8"] show less	Hacking
🇺🇸 MogBox	2025-05-31 01:34:17 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 54.161.130.54 (US/United States/ec2-54-161-130- ... show more (mod_security) mod_security (id:210492) triggered by 54.161.130.54 (US/United States/ec2-54-161-130-54.compute-1.amazonaws.com): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri May 30 21:34:08.108815 2025] [security2:error] [pid 1199194:tid 1199199] [remote 54.161.130.54:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mogbox.net"] [uri "/.git/config"] [unique_id "aDpckOLxnqejahEucfSRHwAARAQ"] show less	Hacking
🇺🇸 Charlesiv	2025-05-31 01:26:23 (1 year ago)	Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE ASN: 14618 (AMAZON-AES) ... show more Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE ASN: 14618 (AMAZON-AES) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config Timestamp: 2025-05-31T00:17:36Z Ray ID: 94824a0cd897082d UA: Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.7.3) Gecko/20040924 Epiphany/1.4.4 (Ubuntu) show less	Bad Web Bot
Anonymous	2025-05-30 18:00:41 (1 year ago)	54.161.130.54 - - [30/May/2025:18:00:41 +0000] "GET /.git/config HTTP/1.1" 403 2406 "-" "Mozilla/5.0 ... show more 54.161.130.54 - - [30/May/2025:18:00:41 +0000] "GET /.git/config HTTP/1.1" 403 2406 "-" "Mozilla/5.0 (Linux; Android 9; Mi A2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇬🇧 Interceptor_HQ	2025-05-30 17:57:37 (1 year ago)	request_uri: /.git/config -- automatic report --	Hacking Brute-Force

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69

🇨🇱 190.164.6.62

🇲🇲 103.154.241.61

🇩🇪 89.1.210.198

🇨🇦 85.217.149.53

🇹🇼 61.220.235.10

🇹🇼 60.199.224.2

🇺🇸 52.248.43.172

🇺🇸 216.180.246.204

🇪🇸 146.158.242.232

🇵🇭 115.85.61.229

🇧🇬 109.160.32.14

🇧🇩 103.139.236.70

🇮🇳 103.89.136.111

🇺🇦 95.46.140.14

🇺🇸 64.121.66.69

🇸🇬 52.237.80.79

🇸🇬 43.156.33.17

🇬🇧 35.203.211.243

🇬🇧 35.203.210.79