JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.217.196.195

54.217.196.195 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 97%: ?

97%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-217-196-195.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.217.196.195

Whois 54.217.196.195

IP Abuse Reports for 54.217.196.195:

This IP address has been reported a total of 29 times from 18 distinct sources. 54.217.196.195 was first reported on July 24th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-27 14:11:36 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.217.196.195 (ec2-54-217-196-195.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 54.217.196.195 (ec2-54-217-196-195.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:11:31.823350 2026] [security2:error] [pid 3698923:tid 3698923] [client 54.217.196.195:57306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.eurosoni.emisoni.com"] [uri "/.git/config"] [unique_id "amdnE8ufreQjmvhEs-GGVQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-27 13:55:29 (4 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 LRob	2026-07-27 13:51:40 (4 hours ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: /.git/config \| 5 distinct paths \| UA: Mozilla/5. ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: /.git/config \| 5 distinct paths \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Hacking
🇳🇱 Savvii	2026-07-27 10:31:00 (7 hours ago)	20 attempts against mh-misbehave-ban on eris	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-27 09:59:26 (7 hours ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: /.env \| 5 distinct paths \| UA: Mozilla/5.0 (X11; ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: /.env \| 5 distinct paths \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Hacking
🇩🇪 Petros Stefanakis	2026-07-27 05:18:58 (12 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 54.217.196.195 (IE/Ireland/ec2-54-217-1 ... show more (mod_security) mod_security triggered on hostname [redacted] 54.217.196.195 (IE/Ireland/ec2-54-217-196-195.eu-west-1.compute.amazonaws.com) show less	SQL Injection
🇩🇪 grassau.com	2026-07-27 05:15:12 (12 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 54.217.196.195 (IE/Ireland/Leinster/Dub ... show more (mod_security) mod_security triggered on hostname [redacted] 54.217.196.195 (IE/Ireland/Leinster/Dublin/ec2-54-217-196-195.eu-west-1.compute.amazonaws.com) show less	SQL Injection
🇫🇷 dynamix	2026-07-27 05:07:55 (12 hours ago)	Multiple WAF Violations	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-26 21:59:30 (19 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-25. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-26 08:33:25 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 54.217.196.195 (ec2-54-217-196-195.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 54.217.196.195 (ec2-54-217-196-195.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 04:33:21.619043 2026] [security2:error] [pid 311687:tid 311687] [client 54.217.196.195:38892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fasllc.rooksfamily.com"] [uri "/.git/config"] [unique_id "amXGUQ4MrXajPskgFzCB5QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-07-26 05:53:38 (1 day ago)	[SunJul2607:53:36.0564582026][security2:error][pid1067496:tid1067629][client54.217.196.195:0]ModSecu ... show more [SunJul2607:53:36.0564582026][security2:error][pid1067496:tid1067629][client54.217.196.195:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.farmaciaferrari.ch.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"amWg4N2W2BA7UtYdQHBx7AAAAFc\"] show less	Port Scan Brute-Force Web App Attack
🇮🇹 mediarama.com	2026-07-26 04:35:04 (1 day ago)	Banned by Fail2Ban	Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 02:56:11 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 54.217.196.195 (ec2-54-217-196-195.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 54.217.196.195 (ec2-54-217-196-195.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 22:56:04.282039 2026] [security2:error] [pid 3214183:tid 3214204] [client 54.217.196.195:33270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fandginsurancellc.antidote-it.com"] [uri "/.git/config"] [unique_id "amV3RNnUFxn5hFl0OtfVQgAAAJE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 02:15:24 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 54.217.196.195 (ec2-54-217-196-195.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 54.217.196.195 (ec2-54-217-196-195.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 22:15:20.614363 2026] [security2:error] [pid 4106004:tid 4106072] [client 54.217.196.195:39464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.famousafricanamericanartist.com.aafm.us"] [uri "/.git/config"] [unique_id "amVtuKhW_iUamTdapneMWQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-25 22:01:07 (1 day ago)	Auto-ban: >3000 req/min op 2026-07-25	Web App Attack SSH Hacking

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 203.200.74.18

🇳🇱 188.166.71.161

🇨🇳 182.143.114.238

🇺🇸 162.216.149.3

🇹🇷 82.222.239.197

🇺🇸 74.50.65.123

🇨🇳 218.26.157.5

🇭🇰 199.45.155.103

🇫🇷 161.97.109.57

🇧🇷 152.32.199.20

🇸🇦 143.92.137.36

🇻🇳 116.99.168.91

🇰🇪 102.210.148.41

🇨🇿 85.193.35.181

🇬🇧 2a06:4880:a000::c1

🇲🇿 216.234.211.242

🇭🇰 199.45.155.107

🇵🇱 109.205.211.217

🇳🇱 91.92.40.50

🇫🇷 85.217.140.38