JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.169.84.173

54.169.84.173 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 41%: ?

41%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-169-84-173.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.169.84.173

Whois 54.169.84.173

IP Abuse Reports for 54.169.84.173:

This IP address has been reported a total of 10 times from 6 distinct sources. 54.169.84.173 was first reported on July 24th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-28 06:41:41 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.169.84.173 (ec2-54-169-84-173.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 54.169.84.173 (ec2-54-169-84-173.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 02:41:37.073509 2026] [security2:error] [pid 1425033:tid 1425033] [client 54.169.84.173:50732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aspotoftea.com"] [uri "/.git/config"] [unique_id "amhPIQ1uVph10LLwSuHXWwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 15:21:39 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.169.84.173 (ec2-54-169-84-173.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 54.169.84.173 (ec2-54-169-84-173.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 11:21:32.370195 2026] [security2:error] [pid 811195:tid 811195] [client 54.169.84.173:56868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aticom.es"] [uri "/.git/config"] [unique_id "amd3fOgmXG1QAPfV_cfmsAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-27 11:58:22 (22 hours ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: /.git/config \| 5 distinct paths \| UA: Mozilla/5. ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: /.git/config \| 5 distinct paths \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Hacking
🇳🇱 e.fierstra	2026-07-26 23:02:35 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 17:14:53 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 54.169.84.173 (ec2-54-169-84-173.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 54.169.84.173 (ec2-54-169-84-173.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 13:14:46.390890 2026] [security2:error] [pid 1944756:tid 1944756] [client 54.169.84.173:39738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.formationone.com"] [uri "/.git/config"] [unique_id "amTvBq4R6stkItfQVAbIIwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 15:56:50 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 54.169.84.173 (ec2-54-169-84-173.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 54.169.84.173 (ec2-54-169-84-173.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 11:56:45.880182 2026] [security2:error] [pid 443534:tid 443534] [client 54.169.84.173:38926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.scc1.us"] [uri "/.git/config"] [unique_id "amOLPS580hB6uFYhsGjIXAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 11:16:55 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 54.169.84.173 (ec2-54-169-84-173.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 54.169.84.173 (ec2-54-169-84-173.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 07:16:49.626387 2026] [security2:error] [pid 30894:tid 30894] [client 54.169.84.173:32888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.robtown.com"] [uri "/.git/config"] [unique_id "amNJob4gkt8sNcj70smfsgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure	2026-07-24 09:24:29 (4 days ago)	csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s	Web App Attack
🇮🇹 VHosting	2026-07-24 09:05:06 (4 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-07-24 08:48:22 (4 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 20.168.123.1

🇨🇳 218.0.63.25

🇺🇸 202.8.43.168

🇦🇷 190.220.172.154

🇺🇸 165.154.206.242

🇺🇸 146.190.63.248

🇺🇸 134.209.164.12

🇺🇸 104.165.198.242

🇧🇭 87.237.198.139

🇩🇪 64.226.65.160

🇧🇪 34.62.63.58

🇮🇹 212.77.75.20

🇬🇧 206.189.19.19

🇮🇩 103.164.57.37

🇮🇳 103.147.248.23

🇬🇧 87.236.176.158

🇧🇷 45.171.154.14

🇳🇱 45.148.10.147

🇨🇦 24.78.132.138

🇫🇮 2.26.106.167