JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.179.203.162

54.179.203.162 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 63%: ?

63%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-179-203-162.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.179.203.162

Whois 54.179.203.162

IP Abuse Reports for 54.179.203.162:

This IP address has been reported a total of 22 times from 17 distinct sources. 54.179.203.162 was first reported on July 17th 2025, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-27 22:02:41 (17 hours ago)	Auto-ban: >3000 req/min op 2026-07-27	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-27 21:49:02 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.179.203.162 (ec2-54-179-203-162.ap-southeast ... show more (mod_security) mod_security (id:210492) triggered by 54.179.203.162 (ec2-54-179-203-162.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 17:48:54.326537 2026] [security2:error] [pid 1076241:tid 1076241] [client 54.179.203.162:45234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "365m4.com"] [uri "/.git/config"] [unique_id "amfSRnwaAvnlDfZT6v_8VgAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 10:48:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 54.179.203.162 (ec2-54-179-203-162.ap-southeast ... show more (mod_security) mod_security (id:210492) triggered by 54.179.203.162 (ec2-54-179-203-162.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 06:48:39.506448 2026] [security2:error] [pid 42890:tid 42890] [client 54.179.203.162:52102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "connectigramme.com"] [uri "/.git/config"] [unique_id "amc3h_SQkjoh6DIjXXhuyAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 zynex	2026-07-27 02:51:43 (1 day ago)	URL Probing: /web/.env	Web App Attack
Anonymous	2026-07-27 01:11:05 (1 day ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇫🇷 COMAITE	2026-07-25 09:38:50 (3 days ago)	Suspicious URL access.	Web App Attack
🇺🇸 Vano Ganzzz	2026-07-25 03:02:46 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK ASN: 16509 (Amazon.com, Inc.) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK ASN: 16509 (Amazon.com, Inc.) Protocol: HTTP/1.1 (GET method) Endpoint: /.env.txt Timestamp: 2026-07-25T03:02:46Z Ray ID: a207ed798b41c6e5 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇭 4server	2026-07-24 10:21:17 (4 days ago)	[FriJul2412:21:10.7213482026][security2:error][pid2952535:tid2952810][client54.179.203.162:0]ModSecu ... show more [FriJul2412:21:10.7213482026][security2:error][pid2952535:tid2952810][client54.179.203.162:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\271$\)\\|base64-w0\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"edilmarra.ch\"][uri\"/\"][unique_id\"amM8lhbHlGEEUFdRiY-InQAAANY\"] show less	Hacking Web App Attack
🇺🇸 Vano Ganzzz	2026-07-24 06:13:29 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK ASN: 16509 (Amazon.com, Inc.) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK ASN: 16509 (Amazon.com, Inc.) Protocol: HTTP/1.1 (GET method) Endpoint: /.env.txt Timestamp: 2026-07-24T06:13:29Z Ray ID: a200c77ba893d176 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-07-24 06:06:58 (4 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (37/60 min)'; Requests=37	Port Scan
🇨🇭 Origon	2026-07-24 05:36:03 (4 days ago)	http-sensitive-files - IP: 54.179.203.162 - time="2026-07-24T07:36:03+02:00" level=info msg="(555f6 ... show more http-sensitive-files - IP: 54.179.203.162 - time="2026-07-24T07:36:03+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 54.179.203.162 (SG/16509) : 4h ban on Ip 54.179.203.162" module=db show less	Web App Attack
🇫🇷 masterguru	2026-07-24 04:17:15 (4 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2025-10-17 21:59:57 (9 months ago)	Auto-ban: 332 malicious requests on 2025-10-16 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 332 malicious requests on 2025-10-16 (e.g., env/backup probes, brute-force, or error bursts). show less	Hacking Web App Attack SSH
Anonymous	2025-10-16 10:38:58 (9 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
Anonymous	2025-10-16 07:18:07 (9 months ago)	Aggressive web scan	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 112.121.170.51

🇮🇳 103.108.5.58

🇬🇧 35.203.210.155

🇬🇧 2001:630:3c1:199:e0b0:e5c5:4bfe:4035

🇨🇳 220.181.108.81

🇩🇪 209.38.221.42

🇧🇷 170.233.248.2

🇺🇸 162.216.150.200

🇸🇬 145.223.130.221

🇨🇳 124.226.212.169

🇮🇩 103.97.101.25

🇻🇳 103.72.56.174

🇵🇱 83.168.110.23

🇺🇸 66.132.195.108

🇳🇱 45.148.10.151

🇬🇧 2a05:d01c:68f:ef01:2ce:846c:1612:9967

🇹🇷 2a02:ff0:331c:5c4e:5141:2b4d:c70c:2cb1

🇮🇹 151.83.24.219

🇫🇮 147.185.133.202

🇵🇱 145.239.91.0