JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.209.49.44

54.209.49.44 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 82%: ?

82%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-209-49-44.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.209.49.44

Whois 54.209.49.44

IP Abuse Reports for 54.209.49.44:

This IP address has been reported a total of 22 times from 13 distinct sources. 54.209.49.44 was first reported on July 25th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-27 22:02:07 (3 hours ago)	Auto-ban: >3000 req/min op 2026-07-27	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-27 18:40:35 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 14:40:28.287232 2026] [security2:error] [pid 4157534:tid 4157534] [client 54.209.49.44:41930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unitymaine.org"] [uri "/.git/config"] [unique_id "amemHEhyXyWFRdXzNU4S3wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-07-27 16:51:22 (9 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 16:27:15 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 12:27:09.015175 2026] [security2:error] [pid 3956182:tid 3956182] [client 54.209.49.44:47622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unitedwestandent.org"] [uri "/.git/config"] [unique_id "ameG3fFtPRRCxSO2NunkrwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 15:42:05 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 11:42:01.798490 2026] [security2:error] [pid 1587156:tid 1587156] [client 54.209.49.44:50500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unitedstarsaerospace.com"] [uri "/.git/config"] [unique_id "amd8SToKxdk9FYEDCMrR1gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 15:00:28 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 11:00:22.178560 2026] [security2:error] [pid 2270412:tid 2270505] [client 54.209.49.44:50718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unitedonegroup.com"] [uri "/.git/config"] [unique_id "amdyhgZ_F_MW4ja9YAsDNwAAAQk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 14:44:09 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:44:03.700215 2026] [security2:error] [pid 558938:tid 558938] [client 54.209.49.44:47566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unitedletter.com"] [uri "/.git/config"] [unique_id "amdus2-MSq9_ta_xAmtZfQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 14:12:33 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:12:28.827322 2026] [security2:error] [pid 3375638:tid 3375638] [client 54.209.49.44:46288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unitedfuturistassociation.com"] [uri "/.git/config"] [unique_id "amdnTOt3C7qsd-4hf-vt5QAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-27 13:05:46 (12 hours ago)	Scanning/Probing (39)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 13:04:00 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 09:03:54.788787 2026] [security2:error] [pid 96610:tid 96610] [client 54.209.49.44:36004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "united-kingdom-boat-registration.com"] [uri "/.git/config"] [unique_id "amdXOnMLfaxcIempEFOF6wAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Savvii	2026-07-27 12:10:08 (13 hours ago)	20 attempts against mh_ha-misbehave-ban on grass	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-27 12:06:31 (13 hours ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (123/60 min)'; Requests=123	Port Scan
🇺🇸 TPI-Abuse	2026-07-27 09:59:45 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 05:59:37.476796 2026] [security2:error] [pid 1380579:tid 1380579] [client 54.209.49.44:55602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uniquelaos.com"] [uri "/.git/config"] [unique_id "amcsCZg6EYdt5DjKfeyDJQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-07-27 07:04:01 (18 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 06:50:17 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.209.49.44 (ec2-54-209-49-44.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 02:50:10.618680 2026] [security2:error] [pid 665232:tid 665232] [client 54.209.49.44:60126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unionega.com"] [uri "/.git/config"] [unique_id "amb_osGV8KaCztvMG5svbAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.15.253.109

🇺🇸 64.62.197.91

🇳🇱 45.156.87.166

🇳🇱 45.148.10.151

🇭🇺 31.171.229.168

🇬🇧 195.96.139.70

🇳🇱 192.42.116.14

🇬🇧 185.216.145.166

🇺🇸 162.216.150.95

🇭🇰 152.32.225.99

🇫🇮 147.185.133.135

🇺🇸 147.185.132.118

🇸🇬 128.199.255.180

🇵🇭 112.208.183.242

🇹🇼 111.82.14.5

🇻🇳 103.154.62.14

🇬🇧 86.131.165.27

🇮🇹 57.131.50.86

🇺🇸 23.94.112.16

🇺🇸 20.65.195.51