JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.180.79.212

54.180.79.212 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 30%: ?

30%

ISP	AWS Asia Pacific (Seoul) Region
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-180-79-212.ap-northeast-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇰🇷 Korea (the Republic of)
City	Incheon, Incheon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.180.79.212

Whois 54.180.79.212

IP Abuse Reports for 54.180.79.212:

This IP address has been reported a total of 20 times from 12 distinct sources. 54.180.79.212 was first reported on November 16th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-07-08 15:25:05 (3 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-08 14:54:50 (3 days ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2026-07-08 14:08:27 (3 days ago)	Excessive 404/403 errors	Brute-Force
Anonymous	2026-07-08 13:46:47 (3 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 TPI-Abuse	2025-11-29 18:33:37 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 54.180.79.212 (ec2-54-180-79-212.ap-northeast-2 ... show more (mod_security) mod_security (id:210492) triggered by 54.180.79.212 (ec2-54-180-79-212.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 13:33:33.619035 2025] [security2:error] [pid 16655:tid 16655] [client 54.180.79.212:40344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madisonmedia.ai"] [uri "/.env.local"] [unique_id "aSs8fUgiBKXiT_Yt38Z-TAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2025-11-29 17:50:59 (7 months ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 mnsf	2025-11-29 11:05:08 (7 months ago)	Too many Status 40X (13)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-29 11:00:01 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 54.180.79.212 (ec2-54-180-79-212.ap-northeast-2 ... show more (mod_security) mod_security (id:210492) triggered by 54.180.79.212 (ec2-54-180-79-212.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 05:59:55.809798 2025] [security2:error] [pid 10286:tid 10299] [client 54.180.79.212:33148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lucy.abney.info"] [uri "/.env.old"] [unique_id "aSrSK3sb8NmBpACUhRu9ggAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2025-11-28 23:01:35 (7 months ago)	(mod_security) mod_security triggered on hostname [redacted] 54.180.79.212 (KR/South Korea/ec2-54-18 ... show more (mod_security) mod_security triggered on hostname [redacted] 54.180.79.212 (KR/South Korea/ec2-54-180-79-212.ap-northeast-2.compute.amazonaws.com) show less	SQL Injection
🇳🇱 debestelapp	2025-11-28 23:00:13 (7 months ago)		Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 22:33:39 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 54.180.79.212 (ec2-54-180-79-212.ap-northeast-2 ... show more (mod_security) mod_security (id:210492) triggered by 54.180.79.212 (ec2-54-180-79-212.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 17:33:34.601219 2025] [security2:error] [pid 10482:tid 10482] [client 54.180.79.212:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kcdusa.com"] [uri "/.env"] [unique_id "aSojPrMm0sgoCJ0Do0hatQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2025-11-28 22:03:40 (7 months ago)	(mod_security) mod_security triggered on hostname [redacted] 54.180.79.212 (KR/South Korea/ec2-54-18 ... show more (mod_security) mod_security triggered on hostname [redacted] 54.180.79.212 (KR/South Korea/ec2-54-180-79-212.ap-northeast-2.compute.amazonaws.com): (CF_ENABLE) show less	SQL Injection
🇺🇸 TPI-Abuse	2025-11-28 20:42:45 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 54.180.79.212 (ec2-54-180-79-212.ap-northeast-2 ... show more (mod_security) mod_security (id:210492) triggered by 54.180.79.212 (ec2-54-180-79-212.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 15:42:38.541477 2025] [security2:error] [pid 6200:tid 6200] [client 54.180.79.212:59622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thebestac.com"] [uri "/.git/config"] [unique_id "aSoJPqnGeuqfs9Rs83HGowAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2025-11-28 20:37:21 (7 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 dbmwebdesign	2025-11-28 20:35:21 (7 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 182.53.182.29

🇧🇬 79.124.62.178

🇦🇺 45.132.225.156

🇳🇱 5.61.209.43

🇧🇷 177.75.199.105

🇰🇷 158.180.74.12

🇷🇴 92.118.39.49

🇳🇱 91.92.40.8

🇳🇱 46.151.178.13

🇺🇸 44.229.229.138

🇨🇳 223.155.163.38

🇮🇶 169.224.18.105

🇮🇳 103.197.113.186

🇫🇷 85.217.140.8

🇩🇪 69.5.169.117

🇺🇸 65.49.1.72

🇺🇸 47.253.156.31

🇬🇧 35.203.210.187

🇸🇬 18.143.167.231

🇩🇪 213.209.159.241