JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.179.28.157

54.179.28.157

Neutral Activity

21 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Amazon Technologies Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS16509

Hostname(s)

ec2-54-179-28-157.ap-southeast-1.compute.amazonaws.com

Domain Name

amazon.com

Country

🇸🇬 Singapore

City

Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.179.28.157 has been reported 21 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 54.179.28.157:

This IP address has been reported a total of 21 times from 15 distinct sources. 54.179.28.157 was first reported on April 17th 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 cj_engineer	2026-04-29 08:53:01 (4 months ago)	54.179.28.157 critical None 81 Scanner Enumeration /admin/.env(401) 4 days ago Verify Whitelist S ... show more 54.179.28.157 critical None 81 Scanner Enumeration /admin/.env(401) 4 days ago Verify Whitelist Scoring Raw Score 54 Effective Score 81 Multiplier ×1.5 Penalty Tier perma_ban Block TTL 43200min Window 60s Trigger Event Category scanner Path /admin/.env Status 401 Method GET Category Breakdown Scanner 6 events Enumeration 2 events Context Distinct Paths 8 Reason Attack [perma_ban]: scor Above is the Data collected by MY ABUSE Detection tool on my API show less	DNS Compromise Port Scan
🇫🇷 SpaceHost-Server	2026-04-25 22:42:20 (4 months ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-25 12:09:42 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 54.179.28.157 (ec2-54-179-28-157.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 54.179.28.157 (ec2-54-179-28-157.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 08:09:37.538316 2026] [security2:error] [pid 11005:tid 11005] [client 54.179.28.157:49316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.pawzy.app"] [uri "/backend/.env"] [unique_id "aeyvAXmbx1EmMr8vHyxHKwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 macrob	2026-04-25 05:13:45 (4 months ago)	2026/04/25 05:13:43 [error] 2591631#2591631: 176657809 access forbidden by rule, client: 54.179.28. ... show more 2026/04/25 05:13:43 [error] 2591631#2591631: 176657809 access forbidden by rule, client: 54.179.28.157, server: 100fs.org, request: "GET /.env.prod HTTP/1.1", host: "100fs.org" 2026/04/25 05:13:43 [error] 2591631#2591631: 176657951 access forbidden by rule, client: 54.179.28.157, server: 100fs.org, request: "GET /.env.backup HTTP/1.1", host: "100fs.org" 2026/04/25 05:13:43 [error] 2591631#2591631: 176657952 access forbidden by rule, client: 54.179.28.157, server: 100fs.org, request: "GET /.env HTTP/1.1", host: "100fs.org" ... show less	Web App Attack
🇩🇪 betternews.app	2026-04-24 15:32:26 (4 months ago)	"a web request contained keyword ".env"; Suspicious URL: /.env.development"	Web Spam Blog Spam Brute-Force Bad Web Bot Web App Attack
🇬🇧 WebNiraj	2026-04-24 00:46:25 (4 months ago)	(mod_security) mod_security (id:949110) triggered by 54.179.28.157 (SG/Singapore/ec2-54-179-28-157.a ... show more (mod_security) mod_security (id:949110) triggered by 54.179.28.157 (SG/Singapore/ec2-54-179-28-157.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-23 04:38:21 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 54.179.28.157 (ec2-54-179-28-157.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 54.179.28.157 (ec2-54-179-28-157.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 00:38:17.239908 2026] [security2:error] [pid 26213:tid 26213] [client 54.179.28.157:55830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chicago-property-management-companies.com"] [uri "/.env.bak"] [unique_id "aemiOV9huiBkpg3CJW7XiQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 masterguru	2026-04-23 03:46:05 (4 months ago)	URL file extension is restricted by policy. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ ... show more URL file extension is restricted by policy. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. (920440-164) show less	Hacking
🇨🇭 zynex	2026-04-22 02:05:34 (4 months ago)	URL Probing: /backend/.env	Web App Attack
🇺🇸 mnsf	2026-04-22 01:05:37 (4 months ago)	Scanning/Probing (42)	Brute-Force Web App Attack
🇩🇪 LRob	2026-04-21 23:45:07 (4 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 mnsf	2026-04-21 00:12:45 (4 months ago)	Scanning/Probing (12)	Brute-Force Web App Attack
🇨🇭 zynex	2026-04-20 09:28:38 (4 months ago)	URL Probing: /private/.env	Web App Attack
🇧🇪 cmbplf	2026-04-20 06:37:07 (4 months ago)	241 requests with url.path *.env	Brute-Force Bad Web Bot
🇩🇪 MBombeck	2026-04-19 06:30:37 (4 months ago)	Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.188.73.43

🇬🇧 92.27.101.99

🇧🇪 198.235.24.217

🇺🇸 162.216.149.151

🇺🇸 136.36.189.65

🇨🇳 118.145.231.144

🇧🇬 109.160.32.213

🇧🇩 103.173.37.32

🇨🇳 39.170.108.144

🇳🇱 34.90.228.63

🇮🇹 151.59.126.54

🇲🇾 113.23.225.9

🇺🇸 104.207.95.125

🇷🇺 95.105.52.153

🇺🇦 94.131.240.137

🇺🇸 71.6.134.233

🇺🇸 63.249.65.106

🇵🇰 39.40.142.182

🇺🇸 216.25.89.128

🇧🇴 190.129.74.148