JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.237.248.80

54.237.248.80 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 50%: ?

50%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-237-248-80.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.237.248.80

Whois 54.237.248.80

IP Abuse Reports for 54.237.248.80:

This IP address has been reported a total of 11 times from 7 distinct sources. 54.237.248.80 was first reported on July 18th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-18 21:03:27 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.237.248.80 (ec2-54-237-248-80.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.237.248.80 (ec2-54-237-248-80.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 17:03:20.576844 2026] [security2:error] [pid 26144:tid 26144] [client 54.237.248.80:49512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ambarsolar.com"] [uri "/.git/config"] [unique_id "alvqGKXdw5OYEAHNAQlkrgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 20:30:59 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.237.248.80 (ec2-54-237-248-80.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.237.248.80 (ec2-54-237-248-80.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 16:30:51.521512 2026] [security2:error] [pid 19968:tid 19968] [client 54.237.248.80:52710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "evannine.com"] [uri "/.git/config"] [unique_id "alviey32DfMlrs0tdbJcHAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-18 16:03:39 (7 hours ago)	Try to access /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 15:47:55 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.237.248.80 (ec2-54-237-248-80.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.237.248.80 (ec2-54-237-248-80.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 11:47:48.227874 2026] [security2:error] [pid 8842:tid 8842] [client 54.237.248.80:48116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestattorneys.com"] [uri "/.git/config"] [unique_id "alugJFAp4f0C7WqkzRzC7QAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 15:25:47 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.237.248.80 (ec2-54-237-248-80.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.237.248.80 (ec2-54-237-248-80.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 11:25:41.423846 2026] [security2:error] [pid 9916:tid 9916] [client 54.237.248.80:35938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3n1ent.com"] [uri "/.env"] [unique_id "alua9VYqWlpkhNWhRy7_swAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 interbiznw.com	2026-07-18 12:28:01 (11 hours ago)	fail2ban-ban	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 gumbysoft	2026-07-18 11:32:13 (12 hours ago)	Unauthorized web vulnerability scan (/.env, wordpress, etc.)	Web App Attack
🇮🇹 VHosting	2026-07-18 10:40:04 (12 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 nyt	2026-07-18 10:29:54 (13 hours ago)	Sensitive File Probe	Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 10:25:56 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.237.248.80 (ec2-54-237-248-80.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.237.248.80 (ec2-54-237-248-80.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 06:25:51.408986 2026] [security2:error] [pid 541099:tid 541099] [client 54.237.248.80:52228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alafiariverrendezvous.org"] [uri "/.env"] [unique_id "altUr701Biv86dLMNwaBtgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-07-18 10:00:57 (13 hours ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 154.16.119.22

🇺🇸 147.185.132.167

🇨🇳 120.26.203.104

🇧🇷 201.158.42.101

🇩🇪 195.182.16.23

🇺🇸 146.70.10.27

🇨🇳 114.252.191.194

🇪🇸 86.127.226.10

🇺🇸 66.132.172.241

🇲🇾 49.124.153.8

🇰🇷 220.80.223.144

🇨🇳 115.211.252.51

🇸🇬 47.82.153.124

🇺🇸 20.124.84.235

🇭🇰 8.210.214.44

🇲🇩 185.32.3.56

🇺🇸 172.68.245.32

🇳🇵 118.91.161.7

🇵🇰 116.90.124.41

🇱🇹 62.60.130.219