JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.229.200.149

54.229.200.149 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 34%: ?

34%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-229-200-149.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.229.200.149

Whois 54.229.200.149

IP Abuse Reports for 54.229.200.149:

This IP address has been reported a total of 7 times from 5 distinct sources. 54.229.200.149 was first reported on June 17th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-24 22:02:33 (2 hours ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-24 10:08:22 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.229.200.149 (ec2-54-229-200-149.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 54.229.200.149 (ec2-54-229-200-149.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:08:18.563102 2026] [security2:error] [pid 3725528:tid 3725528] [client 54.229.200.149:33398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "steamboatrowena.com"] [uri "/.git/config"] [unique_id "amM5kj8v7JX1Dk1seIKNvgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 07:01:38 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.229.200.149 (ec2-54-229-200-149.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 54.229.200.149 (ec2-54-229-200-149.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:01:31.980200 2026] [security2:error] [pid 1829472:tid 1829472] [client 54.229.200.149:46860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stbms.com"] [uri "/.git/config"] [unique_id "amMNy35c69eF6x5ABIK9cgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 04:16:12 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.229.200.149 (ec2-54-229-200-149.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 54.229.200.149 (ec2-54-229-200-149.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 00:16:06.371304 2026] [security2:error] [pid 1863513:tid 1863513] [client 54.229.200.149:49136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staugustineflyfishing.net"] [uri "/.git/config"] [unique_id "amLnBkPV8fsrZTWjiOjgcgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-07-24 04:13:44 (20 hours ago)	http-sensitive-files - IP: 54.229.200.149 - time="2026-07-24T06:13:44+02:00" level=info msg="(555f6 ... show more http-sensitive-files - IP: 54.229.200.149 - time="2026-07-24T06:13:44+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 54.229.200.149 (IE/16509) : 4h ban on Ip 54.229.200.149" module=db show less	Web App Attack
🇩🇪 updown.io	2026-07-24 03:29:26 (21 hours ago)	{"level":"info","ts":1784863688.6540086,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1784863688.6540086,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"54.229.200.149","remote_port":"42386","client_ip":"54.229.200.149","proto":"HTTP/1.1","method":"GET","host":"status.vouchery.io","uri":"/.env.development","headers":{"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, deflate"],"Accept":["/"],"Connection":["keep-alive"],"Next-Action":["x"],"X-Nextjs-Request-Id":["24390e59"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"status.vouchery.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.00013614,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1784863688.6787262,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"54.229.200.149","remote_port": ... show less	DDoS Attack Web App Attack
🇱🇻 garmtech.com	2026-06-17 03:15:59 (1 month ago)	Attempted access to sensitive endpoint (/wp-content/plugins/backuply/readme.txt) detected. Automated ... show more Attempted access to sensitive endpoint (/wp-content/plugins/backuply/readme.txt) detected. Automated scan or unauthorized probing. show less	Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.219.121.44

🇺🇸 154.92.23.155

🇨🇳 117.149.196.213

🇮🇳 66.116.233.50

🇯🇲 63.143.95.174

🇨🇳 60.16.194.3

🇧🇪 34.62.168.168

🇬🇧 2a03:b0c0:1:e0:0:1:8911:8001

🇺🇸 2600:3c01::2000:45ff:feb5:f9b7

🇸🇬 217.216.109.237

🇳🇱 195.178.110.30

🇸🇻 190.53.189.27

🇲🇽 187.245.231.228

🇧🇷 179.49.183.183

🇸🇪 162.158.182.64

🇲🇲 136.228.161.66

🇹🇭 122.154.0.170

🇨🇳 117.173.101.132

🇩🇪 84.182.56.223

🇺🇸 71.6.237.54