AbuseIPDB » 54.254.139.179

54.254.139.179 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 69%: ?

69%

ISP	Amazon Data Services Japan
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	ec2-54-254-139-179.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	Singapore
City	Singapore, Singapore

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 54.254.139.179

Whois 54.254.139.179

IP Abuse Reports for 54.254.139.179:

This IP address has been reported a total of 33 times from 23 distinct sources. 54.254.139.179 was first reported on September 9th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Incidents Response Neptus Team	2024-09-15 14:26:00 (2 weeks ago)	Report Abuse IP	Hacking Exploited Host Web App Attack
Anonymous	2024-09-15 02:13:44 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
sid3windr	2024-09-11 21:38:22 (3 weeks ago)	GET /.git/HEAD (Tarpitted for , wasted 0B)	Web App Attack
rdpguard.com	2024-09-11 20:55:31 (3 weeks ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
Hydra-Shield.fr	2024-09-11 20:30:14 (3 weeks ago)	Directory Traversal on: /.git/HEAD	Web App Attack
billyw0nka	2024-09-11 20:23:26 (3 weeks ago)	pattern: .git	Hacking
Incidents Response Neptus Team	2024-09-10 07:46:00 (3 weeks ago)	Report Abuse IP	Hacking Exploited Host Web App Attack
juutis	2024-09-10 05:57:15 (3 weeks ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
Incidents Response Neptus Team	2024-09-10 04:13:00 (3 weeks ago)	Report Abuse IP	Hacking Exploited Host Web App Attack
BlueWire Hosting	2024-09-10 04:10:13 (3 weeks ago)	Scanning for Laravel vulnerabilities	Web App Attack
rdpguard.com	2024-09-10 03:08:08 (3 weeks ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
Anonymous	2024-09-10 02:40:03 (3 weeks ago)	Bot / scanning and/or hacking attempts: [1/1] done, RANDOM / HTTP/2.0, GET /.env HTTP/2.0, GET /info ... show moreBot / scanning and/or hacking attempts: [1/1] done, RANDOM / HTTP/2.0, GET /.env HTTP/2.0, GET /info.php HTTP/2.0, POST / HTTP/2.0, GET /core/.env HTTP/2.0, GET /phpinfo.php HTTP/2.0 show less	Hacking Web App Attack
Not Fake	2024-09-10 01:48:08 (3 weeks ago)	$f2bV_matches	Web App Attack
nationaleventpros.com	2024-09-10 01:30:12 (3 weeks ago)	vulnerability scan	Web App Attack
TPI-Abuse	2024-09-10 01:27:05 (3 weeks ago)	(mod_security) mod_security (id:217200) triggered by 54.254.139.179 (ec2-54-254-139-179.ap-southeast ... show more(mod_security) mod_security (id:217200) triggered by 54.254.139.179 (ec2-54-254-139-179.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 09 21:26:59.215891 2024] [security2:error] [pid 6255:tid 6255] [client 54.254.139.179:60544] [client 54.254.139.179] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|n3fjp.com\|F\|2"] [data "/"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "n3fjp.com"] [uri "/"] [unique_id "Zt-gY0YmXwp_3l0p8mb_3gAAABE"] show less	Brute-Force Bad Web Bot Web App Attack