JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.169.72.53

54.169.72.53 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 69%: ?

69%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-169-72-53.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.169.72.53

Whois 54.169.72.53

IP Abuse Reports for 54.169.72.53:

This IP address has been reported a total of 17 times from 11 distinct sources. 54.169.72.53 was first reported on July 24th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-28 00:58:58 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.169.72.53 (ec2-54-169-72-53.ap-southeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 54.169.72.53 (ec2-54-169-72-53.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 20:58:52.890813 2026] [security2:error] [pid 1237313:tid 1237313] [client 54.169.72.53:44098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coast22.net"] [uri "/.git/config"] [unique_id "amf-zNBeMJx2ajm96t_xBwAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-28 00:39:17 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.169.72.53 (ec2-54-169-72-53.ap-southeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 54.169.72.53 (ec2-54-169-72-53.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 20:39:13.529471 2026] [security2:error] [pid 2229833:tid 2229833] [client 54.169.72.53:44542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coalminer.com"] [uri "/.git/config"] [unique_id "amf6MS0vdLgVRMKYP10ftwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-07-27 15:06:50 (13 hours ago)	54.169.72.53 - - [27/Jul/2026:18:06:48 +0300] "GET /.git/config HTTP/1.1" 404 705 "-" "Mozilla/5.0 ( ... show more 54.169.72.53 - - [27/Jul/2026:18:06:48 +0300] "GET /.git/config HTTP/1.1" 404 705 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.169.72.53 - - [27/Jul/2026:18:06:49 +0300] "GET /.env HTTP/1.1" 404 705 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 masterguru	2026-07-27 11:27:44 (17 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 10:25:20 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.169.72.53 (ec2-54-169-72-53.ap-southeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 54.169.72.53 (ec2-54-169-72-53.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 06:25:17.419169 2026] [security2:error] [pid 1799434:tid 1799535] [client 54.169.72.53:57866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "condomanagement360.com"] [uri "/.git/config"] [unique_id "amcyDYDc_A6VIknrMcJ8ywAAAMs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-07-27 01:00:14 (1 day ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇺🇸 Dave Hansen	2026-07-26 23:49:03 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 54.169.72.53 (SG/Singapore/ec2-54-169-7 ... show more (mod_security) mod_security triggered on hostname [redacted] 54.169.72.53 (SG/Singapore/ec2-54-169-72-53.ap-southeast-1.compute.amazonaws.com) show less	SQL Injection
🇩🇪 BlueWire Hosting	2026-07-26 22:53:23 (1 day ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇳🇱 homeshowdomain.nl	2026-07-26 22:04:16 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-25. show less	Web App Attack SSH Hacking
🇦🇺 Block Rockin' Beats	2026-07-26 06:35:03 (1 day ago)	Scanning for exploitable scripts	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 03:24:09 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 54.169.72.53 (ec2-54-169-72-53.ap-southeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 54.169.72.53 (ec2-54-169-72-53.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 23:24:06.056004 2026] [security2:error] [pid 1052996:tid 1052996] [client 54.169.72.53:33046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belintxon.com"] [uri "/.git/config"] [unique_id "amV91l6n3t6_j_wH0Y898QAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-26 02:50:07 (2 days ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 Site.eu	2026-07-24 07:58:45 (3 days ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-24 07:18:45 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 54.169.72.53 (ec2-54-169-72-53.ap-southeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 54.169.72.53 (ec2-54-169-72-53.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:18:39.583664 2026] [security2:error] [pid 3341737:tid 3341737] [client 54.169.72.53:51874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "files.nautos-usa.com"] [uri "/.git/config"] [unique_id "amMRz-NfWC8_wMZwj99TLQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 06:33:14 (3 days ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.251

🇧🇷 205.210.31.244

🇧🇷 205.210.31.238

🇺🇸 205.210.31.28

🇻🇳 116.99.174.162

🇹🇼 114.34.106.146

🇺🇸 107.172.95.94

🇳🇱 45.148.10.244

🇺🇸 45.131.193.242

🇳🇱 45.94.31.102

🇺🇸 13.218.172.139

🇺🇸 13.59.229.171

🇧🇷 205.210.31.242

🇧🇷 205.210.31.237

🇧🇷 205.210.31.236

🇧🇷 205.210.31.234

🇧🇷 205.210.31.230

🇮🇩 116.197.133.25

🇮🇪 108.130.200.113

🇮🇳 103.98.85.211