JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.208.48.93

Neutral Activity

Abuse Confidence Score

0% Low Risk

29 reports

14 reporters · latest 1 year ago

ISP: Amazon.com, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14618
Hostname(s): ec2-54-208-48-93.compute-1.amazonaws.com
Domain Name: amazon.com
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.208.48.93 has been reported 29 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

29 from 14 distinct reporters

First reported

May 1st 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 rsa	2025-06-02 16:24:00 UTC · (1 year ago)	excessive crawling	Hacking Brute-Force Exploited Host Web App Attack
🇨🇭 backslash	2025-05-20 04:27:08 UTC · (1 year ago)	honeypot	Bad Web Bot
🇳🇱 Roderic	2025-05-12 22:57:32 UTC · (1 year ago)	(PERMBLOCK) 54.208.48.93 (US/United States/Virginia/Ashburn/ec2-54-208-48-93.compute-1.amazonaws.com/[redacted]) has had more than 4 temp blocks	Hacking
🇳🇱 Roderic	2025-05-12 05:36:43 UTC · (1 year ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇺🇸 TPI-Abuse	2025-05-07 18:10:34 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 54.208.48.93 (ec2-54-208-48-93.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 14:10:31.647422 2025] [security2:error] [pid 3498807:t ... show more (mod_security) mod_security (id:210730) triggered by 54.208.48.93 (ec2-54-208-48-93.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 14:10:31.647422 2025] [security2:error] [pid 3498807:tid 3498834] [client 54.208.48.93:35850] [client 54.208.48.93] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.munatseng.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.munatseng.org"] [uri "/stories/tsengkwongchi.com"] [unique_id "aBuiF3x-nQugi3KxagRvBAAAAVQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 valeon	2025-05-07 11:07:57 UTC · (1 year ago)		Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-07 06:33:51 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 54.208.48.93 (ec2-54-208-48-93.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 02:33:44.842166 2025] [security2:error] [pid 1494639:t ... show more (mod_security) mod_security (id:210730) triggered by 54.208.48.93 (ec2-54-208-48-93.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 02:33:44.842166 2025] [security2:error] [pid 1494639:tid 1494639] [client 54.208.48.93:57306] [client 54.208.48.93] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.newisci.org\|F\|2"] [data ".safari-eha.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.newisci.org"] [uri "/expo_2025/www.safari-eha.com"] [unique_id "aBr-yCY3HmMGm15bOf-7XgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-05-06 18:08:56 UTC · (1 year ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-05-06 07:56:02 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 54.208.48.93 (ec2-54-208-48-93.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 03:55:56.682311 2025] [security2:error] [pid 1717689:t ... show more (mod_security) mod_security (id:210730) triggered by 54.208.48.93 (ec2-54-208-48-93.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 03:55:56.682311 2025] [security2:error] [pid 1717689:tid 1717689] [client 54.208.48.93:48680] [client 54.208.48.93] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.raintechgutters.com\|F\|2"] [data ".raintechgutters.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.raintechgutters.com"] [uri "/professional-rain-gutters-orlando/www.raintechgutters.com"] [unique_id "aBnAjP0lMjAxPBHAU3KctAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-05 15:38:40 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 54.208.48.93 (ec2-54-208-48-93.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 05 11:38:33.796029 2025] [security2:error] [pid 4150439:t ... show more (mod_security) mod_security (id:210730) triggered by 54.208.48.93 (ec2-54-208-48-93.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 05 11:38:33.796029 2025] [security2:error] [pid 4150439:tid 4150439] [client 54.208.48.93:51918] [client 54.208.48.93] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.backstore.com\|F\|2"] [data ".losangelesseating.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.backstore.com"] [uri "/www.losangelesseating.com"] [unique_id "aBjbeREFa4s7ALzMUJt8DgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-05-05 15:24:03 UTC · (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 SCHAPPY	2025-05-05 04:30:03 UTC · (1 year ago)	Excessive crawling, scraping, request limit exceeded, HTTP code 429.	Web App Attack
🇺🇸 mnsf	2025-05-05 03:05:17 UTC · (1 year ago)	Request Overload (101)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-05-04 19:15:45 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 54.208.48.93 (ec2-54-208-48-93.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 04 15:15:40.482704 2025] [security2:error] [pid 675700:ti ... show more (mod_security) mod_security (id:210730) triggered by 54.208.48.93 (ec2-54-208-48-93.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 04 15:15:40.482704 2025] [security2:error] [pid 675700:tid 675807] [client 54.208.48.93:50380] [client 54.208.48.93] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.kerrfamilyassociation.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kerrfamilyassociation.com"] [uri "/[email protected]"] [unique_id "aBe83BEoIUizLEfBiyM-nAAAAI4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2025-05-04 09:00:52 UTC · (1 year ago)	cow-Joomla User : try to access forms...	Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 192.253.248.229

🇺🇸 157.22.73.85

🇮🇳 152.58.183.1

🇳🇱 109.160.32.133

🇳🇱 109.160.32.70

🇺🇸 109.105.209.77

🇸🇮 102.220.161.119

🇳🇱 93.123.109.4

🇳🇱 77.91.71.36

🇨🇳 60.173.168.3

🇳🇱 45.156.87.146

🇬🇧 31.14.254.114

🇮🇹 2.233.75.53

🇧🇪 198.235.24.156

🇫🇮 193.142.36.35

🇨🇦 192.226.131.54

🇸🇬 188.166.227.39

🇺🇸 185.149.24.154

🇫🇷 172.225.116.179

🇩🇪 109.160.32.39