JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.217.48.200

54.217.48.200 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 88%: ?

88%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-217-48-200.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.217.48.200

Whois 54.217.48.200

IP Abuse Reports for 54.217.48.200:

This IP address has been reported a total of 22 times from 16 distinct sources. 54.217.48.200 was first reported on July 24th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-27 17:08:51 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.217.48.200 (ec2-54-217-48-200.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.217.48.200 (ec2-54-217-48-200.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 13:08:47.947926 2026] [security2:error] [pid 3578978:tid 3578978] [client 54.217.48.200:36278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.littlewizard.com.wizind.com"] [uri "/.git/config"] [unique_id "ameQnxUzvlUlNXweOhGrXQAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-27 17:05:13 (2 hours ago)	Abuse Detected (10)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 16:36:12 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.217.48.200 (ec2-54-217-48-200.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.217.48.200 (ec2-54-217-48-200.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 12:36:03.689322 2026] [security2:error] [pid 1894327:tid 1894327] [client 54.217.48.200:55414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.littlesicily.jbaydeliveries.com"] [uri "/.git/config"] [unique_id "ameI8zZx55fco42vyv2RWAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-07-27 16:16:22 (3 hours ago)	54.217.48.200 - - [27/Jul/2026:12:16:21 -0400] "GET /.env HTTP/1.1" 403 6293 "-" "Mozilla/5.0 (Windo ... show more 54.217.48.200 - - [27/Jul/2026:12:16:21 -0400] "GET /.env HTTP/1.1" 403 6293 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 15:16:12 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.217.48.200 (ec2-54-217-48-200.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.217.48.200 (ec2-54-217-48-200.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 11:16:04.394645 2026] [security2:error] [pid 421993:tid 421993] [client 54.217.48.200:34418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.littlehorneng.littlehorndesign.com"] [uri "/.git/config"] [unique_id "amd2NDmzFwV5g1xFIR0Q7gAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-27 13:32:56 (6 hours ago)	Multiple WAF Violations	Web App Attack
🇮🇹 Giando	2026-07-27 10:34:00 (9 hours ago)	Multiple WAF Violations	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 09:18:59 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.217.48.200 (ec2-54-217-48-200.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.217.48.200 (ec2-54-217-48-200.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 05:18:54.925807 2026] [security2:error] [pid 916137:tid 916137] [client 54.217.48.200:56770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lisarlee.com.marlinlee.com"] [uri "/.git/config"] [unique_id "amcifmGSoCtWHTnAKDPMqAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure	2026-07-27 08:25:16 (11 hours ago)	csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 07:22:47 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.217.48.200 (ec2-54-217-48-200.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.217.48.200 (ec2-54-217-48-200.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 03:22:44.149802 2026] [security2:error] [pid 1548390:tid 1548433] [client 54.217.48.200:35408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.liquido.cocoonprojects.com"] [uri "/.git/config"] [unique_id "amcHRCRlmDCIeKNhr-yPdgAAAIs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 05:02:19 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.217.48.200 (ec2-54-217-48-200.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.217.48.200 (ec2-54-217-48-200.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 01:02:11.917154 2026] [security2:error] [pid 850320:tid 850320] [client 54.217.48.200:42972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lionscb.org.ithacalions.com"] [uri "/.git/config"] [unique_id "ambmU--bsdU4hD73Iuui0QAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 penguin-solutions.at	2026-07-26 05:10:35 (1 day ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
Anonymous	2026-07-26 04:32:05 (1 day ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇫🇷 dynamix	2026-07-26 04:19:39 (1 day ago)	Multiple WAF Violations	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-25 21:59:05 (1 day ago)	Auto-ban: >3000 req/min op 2026-07-25	Web App Attack SSH Hacking

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.98

🇺🇸 195.184.76.197

🇺🇸 173.252.95.0

🇻🇪 156.247.148.214

🇺🇸 153.75.231.20

🇬🇧 35.203.211.220

🇨🇳 222.178.10.249

🇰🇷 220.85.210.200

🇳🇱 185.180.109.243

🇨🇳 182.113.214.141

🇺🇸 173.252.95.39

🇨🇦 172.96.179.9

🇺🇸 165.154.36.71

🇺🇸 147.185.132.231

🇰🇷 59.24.133.197

🇦🇷 45.178.3.7

🇭🇰 43.103.51.112

🇳🇱 5.61.209.44

🇺🇸 209.141.43.146

🇮🇹 185.15.171.79