JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.171.169.158

54.171.169.158 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 52%: ?

52%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-171-169-158.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.171.169.158

Whois 54.171.169.158

IP Abuse Reports for 54.171.169.158:

This IP address has been reported a total of 10 times from 8 distinct sources. 54.171.169.158 was first reported on July 24th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-27 10:51:32 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.171.169.158 (ec2-54-171-169-158.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 54.171.169.158 (ec2-54-171-169-158.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 06:51:25.052493 2026] [security2:error] [pid 17794:tid 17794] [client 54.171.169.158:54486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "w1rq.com"] [uri "/.git/config"] [unique_id "amc4La8TZd5PwK5kilZ0cQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 05:10:14 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.171.169.158 (ec2-54-171-169-158.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 54.171.169.158 (ec2-54-171-169-158.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 01:10:00.149160 2026] [security2:error] [pid 2881443:tid 2881443] [client 54.171.169.158:42308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "w0kem.com"] [uri "/.git/config"] [unique_id "amboKJSA9PSXjPBVOpjChgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-25 22:03:06 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-24. show less	Web App Attack SSH Hacking
🇩🇪 hchristo	2026-07-25 03:17:58 (2 days ago)	[Sat Jul 25 05:17:57.463799 2026] [proxy_fcgi:error] [pid 33045:tid 33140] [client 54.171.169.158:37 ... show more [Sat Jul 25 05:17:57.463799 2026] [proxy_fcgi:error] [pid 33045:tid 33140] [client 54.171.169.158:37980] AH01071: Got error 'Primary script unknown' [Sat Jul 25 05:17:57.504911 2026] [proxy_fcgi:error] [pid 33045:tid 33143] [client 54.171.169.158:37980] AH01071: Got error 'Primary script unknown' [Sat Jul 25 05:17:57.562691 2026] [proxy_fcgi:error] [pid 33045:tid 33105] [client 54.171.169.158:37980] AH01071: Got error 'Primary script unknown' [Sat Jul 25 05:17:57.674969 2026] [proxy_fcgi:error] [pid 33045:tid 33125] [client 54.171.169.158:37980] AH01071: Got error 'Primary script unknown' [Sat Jul 25 05:17:57.725224 2026] [proxy_fcgi:error] [pid 33045:tid 33114] [client 54.171.169.158:37980] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇳🇱 Mangelot Hosting	2026-07-25 01:47:41 (2 days ago)	(modsecurity) srv104 ModSecurity 54.171.169.158 (IE/Ireland/ec2-54-171-169-158.eu-west-1.compute.ama ... show more (modsecurity) srv104 ModSecurity 54.171.169.158 (IE/Ireland/ec2-54-171-169-158.eu-west-1.compute.amazonaws.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇱🇻 garmtech.com	2026-07-25 01:14:09 (2 days ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-24 22:00:46 (2 days ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
🇳🇱 GabrielJST	2026-07-24 08:26:12 (3 days ago)	(mod_security) mod_security triggered on hostname [redacted] 54.171.169.158 (IE/Ireland/ec2-54-171-1 ... show more (mod_security) mod_security triggered on hostname [redacted] 54.171.169.158 (IE/Ireland/ec2-54-171-169-158.eu-west-1.compute.amazonaws.com): (CF_ENABLE) show less	SQL Injection
🇩🇪 milcraft.nl	2026-07-24 05:34:57 (3 days ago)	Honeypot / Fake URL Access: Access to hidden and / or intentionally fake URLs designed to detect aut ... show more Honeypot / Fake URL Access: Access to hidden and / or intentionally fake URLs designed to detect automated scanners or malicious bots. .env, .env.local, .env.production, .htpasswd Related signal: Requests targeting sensitive WordPress files or com... show less	Hacking Web App Attack
🇫🇷 Octopuce	2026-07-24 05:07:14 (3 days ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.32.154

🇮🇳 183.82.111.224

🇧🇩 103.148.212.184

🇫🇷 91.196.152.34

🇫🇷 85.217.140.8

🇯🇵 27.137.233.190

🇩🇪 4.184.121.217

🇬🇧 193.32.209.242

🇸🇦 188.48.181.12

🇮🇩 160.19.226.146

🇺🇸 135.232.232.86

🇯🇴 109.107.253.142

🇲🇾 108.165.177.48

🇵🇰 103.105.208.213

🇸🇪 77.83.24.158

🇳🇱 45.148.10.152

🇸🇬 5.223.65.249

🇨🇴 2800:1e0:d40:4:9999::202

🇻🇳 2001:ee0:4a44:7af0:a118:cdc1:9371:a044

🇰🇷 222.109.73.135