JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.169.254.117

54.169.254.117 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 61%: ?

61%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-169-254-117.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.169.254.117

Whois 54.169.254.117

IP Abuse Reports for 54.169.254.117:

This IP address has been reported a total of 11 times from 11 distinct sources. 54.169.254.117 was first reported on August 21st 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Octopuce	2026-08-23 08:22:57 (3 days ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇮🇹 madaello	2026-08-23 01:24:42 (3 days ago)	54.169.254.117 - - [23/Aug/2026:03:24:40 +0200] "GET /.git/config HTTP/1.1" 404 558 "-" "Mozilla/5.0 ... show more 54.169.254.117 - - [23/Aug/2026:03:24:40 +0200] "GET /.git/config HTTP/1.1" 404 558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.169.254.117 - - [23/Aug/2026:03:24:41 +0200] "GET /.env HTTP/1.1" 404 558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.169.254.117 - - [23/Aug/2026:03:24:41 +0200] "GET /.env.local HTTP/1.1" 404 558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.169.254.117 - - [23/Aug/2026:03:24:41 +0200] "GET /.env.production HTTP/1.1" 404 558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.169.254.117 - - [23/Aug/2026:03:24:41 +0200] "GET /.env.staging HTTP/1.1" 404 558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/5 ... show less	Port Scan
Anonymous	2026-08-22 21:35:02 (3 days ago)	suspicious request in access.log	Web App Attack
🇩🇪 hmt	2026-08-22 17:34:51 (4 days ago)	54.169.254.117 - - [22/Aug/2026:19:34:48 +0200] "GET /.git/config HTTP/1.1" 404 181 "-" "Mozilla/5.0 ... show more 54.169.254.117 - - [22/Aug/2026:19:34:48 +0200] "GET /.git/config HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host="immo.hmt.ovh" 54.169.254.117 - - [22/Aug/2026:19:34:48 +0200] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host="immo.hmt.ovh" 54.169.254.117 - - [22/Aug/2026:19:34:49 +0200] "GET /.env.local HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host="immo.hmt.ovh" 54.169.254.117 - - [22/Aug/2026:19:34:49 +0200] "GET /.env.production HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host="immo.hmt.ovh" 54.169.254.117 - - [22/Aug/2026:19:34:49 +0200] "GET /.env.staging HTTP/1.1" 404 181 "-" "Mo ... show less	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-22 17:04:50 (4 days ago)	Multiple WAF Violations	Web App Attack
🇮🇹 VHosting	2026-08-22 16:10:05 (4 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 Thermogenic	2026-08-22 13:22:50 (4 days ago)	Fail2Ban nginx-scanners: automated vulnerability scanning detected	Web App Attack
🇨🇭 dalslab ltd	2026-08-22 13:02:35 (4 days ago)	[22/Aug/2026:15:02:27 +0200] - 404 404 - POST https immich.dalslab.com "/" [Client 54.169.254.117] [ ... show more [22/Aug/2026:15:02:27 +0200] - 404 404 - POST https immich.dalslab.com "/" [Client 54.169.254.117] [Length 27] [Gzip -] [Sent-to 10.1.1.241] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [22/Aug/2026:15:02:27 +0200] - 404 404 - POST https immich.dalslab.com "/" [Client 54.169.254.117] [Length 27] [Gzip -] [Sent-to 10.1.1.241] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [22/Aug/2026:15:02:27 +0200] - 404 404 - POST https immich.dalslab.com "/" [Client 54.169.254.117] [Length 27] [Gzip -] [Sent-to 10.1.1.241] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [22/Aug/2026:15:02:27 +0200] - 404 404 - POST https immich.dalslab.com "/" [Client 54.169.254.117] [Length 27] [Gzip -] [Sent-to 10.1.1.241] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537 ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-08-22 05:51:49 (4 days ago)	[redacted] 54.169.254.117 - - [22/Aug/2026:06:51:46 +0100] "GET /.git/config HTTP/1.1" 302 1554 0/10 ... show more [redacted] 54.169.254.117 - - [22/Aug/2026:06:51:46 +0100] "GET /.git/config HTTP/1.1" 302 1554 0/107909 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" [redacted] 54.169.254.117 - - [22/Aug/2026:06:51:47 +0100] "GET /.env HTTP/1.1" 302 1554 0/91551 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 05:40:15 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 54.169.254.117 (ec2-54-169-254-117.ap-southeast ... show more (mod_security) mod_security (id:210492) triggered by 54.169.254.117 (ec2-54-169-254-117.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 01:40:07.445640 2026] [security2:error] [pid 14102:tid 14102] [client 54.169.254.117:41152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "healthycaregiving.com"] [uri "/.git/config"] [unique_id "aok2N0Vr4Fwa85IxNz3_hAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-21 09:00:32 (5 days ago)	\| [Dangerous/Singapore] Aggressive IP 54.169.254.117 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Singapore] Aggressive IP 54.169.254.117 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.241.29.37

🇺🇸 159.65.65.224

🇳🇱 45.156.128.167

🇯🇴 188.247.90.83

🇦🇷 170.80.95.11

🇺🇸 147.90.235.15

🇳🇴 87.120.104.79

🇺🇸 2400:cb00:988:1000:e83c:7277:279b:1ec9

🇦🇷 216.244.214.96

🇳🇱 213.165.244.122

🇳🇱 193.176.31.239

🇻🇪 190.97.238.237

🇨🇳 112.103.60.158

🇳🇱 89.21.67.134

🇺🇸 66.132.172.178

🇺🇸 50.84.55.2

🇮🇳 42.105.172.88

🇹🇼 198.235.24.49

🇳🇱 193.176.31.254

🇬🇧 185.247.137.169