JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.174.175.122

54.174.175.122 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 25%: ?

25%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-174-175-122.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.174.175.122

Whois 54.174.175.122

IP Abuse Reports for 54.174.175.122:

This IP address has been reported a total of 38 times from 34 distinct sources. 54.174.175.122 was first reported on November 20th 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-06-04 09:06:49 (4 weeks ago)	Abuse Detected (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 06:15:30 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 54.174.175.122 (ec2-54-174-175-122.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 54.174.175.122 (ec2-54-174-175-122.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 02:15:27.770426 2026] [security2:error] [pid 4179:tid 4179] [client 54.174.175.122:33542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "97films.media"] [uri "/.git/config"] [unique_id "aiEX_6Mk1LdoLZZyIrI83wAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 04:55:49 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 54.174.175.122 (ec2-54-174-175-122.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 54.174.175.122 (ec2-54-174-175-122.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 00:55:46.320078 2026] [security2:error] [pid 22808:tid 22808] [client 54.174.175.122:46014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "900west.com"] [uri "/.git/config"] [unique_id "aiEFUu183oaoZns9DrRp6gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 03:30:23 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 54.174.175.122 (ec2-54-174-175-122.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 54.174.175.122 (ec2-54-174-175-122.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 23:30:15.318246 2026] [security2:error] [pid 22562:tid 22562] [client 54.174.175.122:47892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "86mountaineers.net"] [uri "/.git/config"] [unique_id "aiDxR117Au3v2DDmPfFIYAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Oakley	2026-06-04 02:30:49 (4 weeks ago)	(confirmed_bot_sig) Confirmed bot	Hacking
Anonymous	2026-06-04 02:04:19 (4 weeks ago)	(caddyscan) Scanner path probe from 54.174.175.122 (US/United States/ec2-54-174-175-122.compute-1.am ... show more (caddyscan) Scanner path probe from 54.174.175.122 (US/United States/ec2-54-174-175-122.compute-1.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 54.174.175.122 - - [04/Jun/2026:02:03:58 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 54.174.175.122 - - [04/Jun/2026:02:04:02 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 54.174.175.122 - - [04/Jun/2026:02:04:06 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 54.174.175.122 - - [04/Jun/2026:02:04:09 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 54.174.175.122 - - [04/Jun/2026:02:04:13 +0000] "GET /.git/config HTTP/1.1" show less	Port Scan
🇨🇭 backslash	2026-06-04 01:21:00 (4 weeks ago)	block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0	SQL Injection
🇺🇸 mnsf	2026-06-04 00:05:37 (4 weeks ago)	Abuse Detected (10)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 23:24:55 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 54.174.175.122 (ec2-54-174-175-122.compute-1.am ... show more (mod_security) mod_security (id:210492) triggered by 54.174.175.122 (ec2-54-174-175-122.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 19:24:50.910792 2026] [security2:error] [pid 30965:tid 30965] [client 54.174.175.122:34122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "72blues.com"] [uri "/.git/config"] [unique_id "aiC3wikR10qnwPl8t0hHIQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WellSpring	2026-06-03 23:11:58 (4 weeks ago)	git exposure on 707.today/.git/config — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇺🇸 BSG Webmaster	2025-11-21 08:35:31 (7 months ago)	Port scanning (Port 8090)	Port Scan Hacking
🇨🇿 0x44	2025-11-21 04:48:52 (7 months ago)	54.174.175.122 [ 20/Nov/2025 Connection attempt blocked ]	Port Scan
🇳🇱 ATV	2025-11-21 03:06:22 (7 months ago)	Unsolicited connection attempts to port 8090	Port Scan
🇬🇧 [email protected]	2025-11-21 00:55:03 (7 months ago)	...	Brute-Force SSH
Anonymous	2025-11-20 18:20:20 (7 months ago)	Portscan: TCP/8090 (38x)	Port Scan

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.10

🇧🇴 181.115.147.5

🇺🇸 172.214.209.153

🇩🇪 162.120.3.104

🇩🇪 157.230.18.133

🇭🇰 156.245.246.50

🇮🇩 118.99.84.58

🇺🇸 66.132.224.22

🇮🇳 49.207.40.162

🇧🇪 34.156.142.135

🇯🇵 2404:6800:400b:c005::12e

🇧🇷 205.210.31.165

🇪🇨 190.63.112.165

🇬🇧 165.227.232.1

🇺🇸 162.144.213.198

🇬🇧 161.35.45.184

🇺🇸 154.90.139.185

🇺🇸 147.182.246.240

🇨🇳 121.36.45.116

🇨🇦 104.255.152.18