AbuseIPDB » 54.179.116.122
54.179.116.122 was found in our database!
This IP was reported 8 times. Confidence of
Abuse
is 51% : ?
ISP
Amazon Technologies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-54-179-116-122.ap-southeast-1.compute.amazonaws.com
Domain Name
amazon.com
Country
๐ธ๐ฌ
Singapore
City
Singapore
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 54.179.116.122 :
This IP address has been reported a total of
8
times from
8 distinct
sources.
54.179.116.122 was first reported on
August 21st 2026 , and the most recent report was
1 day ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ณ๐ฑ
homeshowdomain.nl
2026-08-23 21:59:41
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-22.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-08-22 01:52:45
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 54.179.116.122 (ec2-54-179-116-122.ap-southeast ...
show more
(mod_security) mod_security (id:210492) triggered by 54.179.116.122 (ec2-54-179-116-122.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 21:52:41.153153 2026] [security2:error] [pid 32014:tid 32059] [client 54.179.116.122:47448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lamco.us"] [uri "/.git/config"] [unique_id "aokA6dSQx72IGa6XX9_4JgAAAM8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-08-22 01:19:52
(3 days ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
zumbo.net
2026-08-22 01:17:34
(3 days ago)
[Sat Aug 22 04:17:33.440733 2026] [proxy_fcgi:error] [pid 909652:tid 909698] [client 54.179.116.122: ...
show more
[Sat Aug 22 04:17:33.440733 2026] [proxy_fcgi:error] [pid 909652:tid 909698] [client 54.179.116.122:0] AH01071: Got error 'Primary script unknown'
[Sat Aug 22 04:17:33.611752 2026] [proxy_fcgi:error] [pid 909652:tid 909699] [client 54.179.116.122:0] AH01071: Got error 'Primary script unknown'
[Sat Aug 22 04:17:33.780426 2026] [proxy_fcgi:error] [pid 909652:tid 909701] [client 54.179.116.122:0] AH01071: Got error 'Primary script unknown'
[Sat Aug 22 04:17:33.949537 2026] [proxy_fcgi:error] [pid 909651:tid 909668] [client 54.179.116.122:0] AH01071: Got error 'Primary script unknown'
[Sat Aug 22 04:17:34.119559 2026] [proxy_fcgi:error] [pid 909652:tid 909704] [client 54.179.116.122:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
๐ง๐ช
cmbplf
2026-08-21 23:40:24
(3 days ago)
594 requests with url.path *.env
Brute-Force
Bad Web Bot
๐ฎ๐น
VHosting
2026-08-21 23:20:07
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ซ๐ท
Octopuce
2026-08-21 23:03:11
(3 days ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
๐ฉ๐ช
Vasile
2026-08-21 22:52:38
(3 days ago)
Shield Guard: RFI/LFI dans 'POST:0' | Command Injection dans 'POST:0'
SQL Injection
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: