JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.198.82.117

54.198.82.117 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 72%: ?

72%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-198-82-117.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.198.82.117

Whois 54.198.82.117

IP Abuse Reports for 54.198.82.117:

This IP address has been reported a total of 24 times from 13 distinct sources. 54.198.82.117 was first reported on October 1st 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 danskefilm.dk	2026-10-17 04:25:01 (8 minutes ago)	IMAP password guessing	Brute-Force
Anonymous	2026-10-17 00:58:53 (3 hours ago)	Authentication failure	Brute-Force
🇭🇺 Lacika555	2026-10-16 21:34:37 (6 hours ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
Anonymous	2026-10-15 22:58:52 (1 day ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇮🇪 AutosOnShow	2026-10-15 05:50:09 (1 day ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-10-15 05:49:32.511 \|	Web App Attack
🇳🇱 Site.eu	2026-10-13 17:14:41 (3 days ago)	Excessive 404/403 errors	Brute-Force
🇪🇸 robotstxt	2026-10-13 01:55:30 (4 days ago)	54.198.82.117 - - [13/Oct/2026:01:54:48 +0000] "GET /api/fetch?url=http%3A%2F%2F169.254.169.254%2Fla ... show more 54.198.82.117 - - [13/Oct/2026:01:54:48 +0000] "GET /api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 403 176 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "12.42.218.137" edge="54.198.82.117" 54.198.82.117 - - [13/Oct/2026:01:55:01 +0000] "GET /?cmd=printenv HTTP/1.1" 403 176 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "88.17.185.231" edge="54.198.82.117" 54.198.82.117 - - [13/Oct/2026:01:55:02 +0000] "GET /.git/HEAD HTTP/1.1" 403 176 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "85.13.68.167" edge="54.198.82.117" 54.198.82.117 - - [13/Oct/2026:01:54:32 +0000] "GET /script?script=println%28System.getenv%28%29%29 HTTP/1.1" 403 176 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "215.119.219.207 ... show less	Web App Attack
🇧🇪 cmbplf	2026-10-12 04:37:06 (4 days ago)	274 requests with url.path *.env	Brute-Force Bad Web Bot
🇵🇱 Budyn	2026-10-11 15:43:44 (5 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: 51.83.237.XX \| URI: /__debug__/execute?cmd=printenv \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-10-11 03:45:04 (6 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: 51.83.237.XX \| URI: /storage/logs/laravel.log \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-10-11 03:29:27 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 54.198.82.117 (ec2-54-198-82-117.compute-1.amaz ... show more (mod_security) mod_security (id:210730) triggered by 54.198.82.117 (ec2-54-198-82-117.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 23:29:23.560944 2026] [security2:error] [pid 7678:tid 7678] [client 54.198.82.117:57946] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.georgegourmet.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.georgegourmet.com"] [uri "/storage/logs/laravel.log"] [unique_id "assCk7sH9n-XpzamLRNlmwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-10 03:50:02 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: 51.83.237.XX \| URI: /phpinfo.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-10-09 20:47:18 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: 51.83.237.XX \| URI: /storage/logs/laravel.log \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-10-09 03:48:47 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: 51.83.237.XX \| URI: /script?script=println%28System.getenv%28%29%29 \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 22:45:30 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 54.198.82.117 (ec2-54-198-82-117.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.198.82.117 (ec2-54-198-82-117.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 18:45:22.969116 2026] [security2:error] [pid 24008:tid 24008] [client 54.198.82.117:40848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vccemail.net"] [uri "/.git/config"] [unique_id "asgdAgAesuisjP7ioOhYZQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 179.38.153.126

🇺🇸 161.115.239.185

🇺🇸 147.185.132.110

🇺🇸 104.243.133.18

🇺🇸 54.227.112.97

🇧🇷 45.162.52.114

🇨🇳 39.144.229.59

🇺🇸 38.141.62.31

🇰🇷 218.153.115.79

🇹🇼 198.235.24.50

🇳🇱 193.25.217.85

🇩🇪 162.159.121.28

🇺🇸 161.115.239.109

🇺🇸 161.115.235.64

🇸🇬 129.212.231.57

🇻🇳 123.21.15.38

🇲🇾 113.211.208.182

🇳🇱 109.160.32.43

🇺🇸 104.22.18.13

🇺🇸 104.22.17.7