JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.171.180.52

54.171.180.52 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 65%: ?

65%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-171-180-52.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.171.180.52

Whois 54.171.180.52

IP Abuse Reports for 54.171.180.52:

This IP address has been reported a total of 16 times from 11 distinct sources. 54.171.180.52 was first reported on July 24th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-26 04:30:42 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 54.171.180.52 (ec2-54-171-180-52.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.171.180.52 (ec2-54-171-180-52.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 00:30:37.256766 2026] [security2:error] [pid 9555:tid 9555] [client 54.171.180.52:36202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "interoperabilitysolutions.motioncontrolpartners.com"] [uri "/.git/config"] [unique_id "amWNbR7XlsFoj2LXnrXMrgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 internetworld	2026-07-26 03:50:38 (1 day ago)	internetworld-prod-01 Fail2Ban ban. Jail=nginx-web-probe-iw. Sanitized automatic report from interne ... show more internetworld-prod-01 Fail2Ban ban. Jail=nginx-web-probe-iw. Sanitized automatic report from internetworld.ca server security monitoring. show less	Brute-Force Web App Attack
🇺🇸 mnsf	2026-07-25 18:05:14 (1 day ago)	Scanning/Probing (13)	Brute-Force Web App Attack
🇳🇱 i-turnradio.nl	2026-07-25 14:14:44 (1 day ago)	2026-07-25 @ 16:14:43 (CET) ~ Blocked for trying to access: /.env.local	Web App Attack
🇫🇷 masterguru	2026-07-25 01:24:15 (2 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-24 22:02:05 (2 days ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
🇳🇱 i-turnradio.nl	2026-07-24 17:55:29 (2 days ago)	2026-07-24 @ 19:55:28 (CET) ~ Blocked for trying to access: /.env.local	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 17:22:57 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 54.171.180.52 (ec2-54-171-180-52.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.171.180.52 (ec2-54-171-180-52.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 13:22:51.305365 2026] [security2:error] [pid 3823719:tid 3823719] [client 54.171.180.52:49068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.radio.gisur.com"] [uri "/.git/config"] [unique_id "amOfazJMQMg8TAbas0kUggAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-24 16:57:33 (2 days ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-07-24 16:49:08 (2 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 13:02:00 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 54.171.180.52 (ec2-54-171-180-52.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.171.180.52 (ec2-54-171-180-52.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 09:01:54.245009 2026] [security2:error] [pid 3913375:tid 3913375] [client 54.171.180.52:51118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rachellaitman.michaelholdengc.com"] [uri "/.git/config"] [unique_id "amNiQowU4HATi1Cr1yD4VwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-07-24 12:07:40 (2 days ago)	54.171.180.52 - - [24/Jul/2026:08:07:39 -0400] "GET /.env HTTP/1.1" 403 6298 "-" "Mozilla/5.0 (X11; ... show more 54.171.180.52 - - [24/Jul/2026:08:07:39 -0400] "GET /.env HTTP/1.1" 403 6298 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 langenkamp-media	2026-07-24 11:40:06 (2 days ago)	Fail2Ban: Banned from jail nginx-scan-critical on 3dausdu.de	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 11:00:22 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 54.171.180.52 (ec2-54-171-180-52.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.171.180.52 (ec2-54-171-180-52.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 07:00:14.009491 2026] [security2:error] [pid 20455:tid 20455] [client 54.171.180.52:58174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rabbichaplain.royal-barbershop.com"] [uri "/.git/config"] [unique_id "amNFvuTpImqRya77cUkLeQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 05:20:28 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 54.171.180.52 (ec2-54-171-180-52.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.171.180.52 (ec2-54-171-180-52.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 01:20:23.197327 2026] [security2:error] [pid 3504558:tid 3504558] [client 54.171.180.52:48138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.qxoticdivas.postermodelsworldwideinc.com"] [uri "/.git/config"] [unique_id "amL2FySHWYcsRcjdKufcHAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.223.107.86

🇧🇷 205.210.31.252

🇺🇸 205.210.31.68

🇿🇦 165.73.183.176

🇬🇧 154.16.44.2

🇷🇺 151.252.84.225

🇹🇼 101.13.4.128

🇺🇸 205.210.31.23

🇨🇳 202.46.62.87

🇵🇱 194.180.48.41

🇬🇧 193.163.125.69

🇧🇷 187.85.16.75

🇻🇳 113.172.80.64

🇷🇴 92.118.39.62

🇺🇸 65.111.9.135

🇳🇴 51.120.79.193

🇬🇧 45.133.173.34

🇸🇬 2a04:c607:33:3:9999::132

🇺🇾 186.53.179.112

🇬🇧 185.216.145.169