JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.83.149.0

Neutral Activity

Abuse Confidence Score

0% Low Risk

36 reports

26 reporters · latest 8 months ago

ISP: Amazon Technologies Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14618
Hostname(s): ec2-54-83-149-0.compute-1.amazonaws.com
Domain Name: amazon.com
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.83.149.0 has been reported 36 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

36 from 26 distinct reporters

First reported

March 4th 2026

Most recent report

8 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-06 03:01:12 UTC · (8 months ago)	Auto-reported by Fail2Ban (NPM-Auth)	Web App Attack
🇳🇱 homeshowdomain.nl	2026-03-05 22:59:27 UTC · (8 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-03-04.	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-03-04 22:59:43 UTC · (8 months ago)	Auto-ban: >3000 req/min op 2026-03-04	Web App Attack SSH Hacking
Anonymous	2026-03-04 16:31:41 UTC · (8 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 TPI-Abuse	2026-03-04 11:56:32 UTC · (8 months ago)	(mod_security) mod_security (id:210492) triggered by 54.83.149.0 (ec2-54-83-149-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 06:56:25.015287 2026] [security2:error] [pid 7470:tid 74 ... show more (mod_security) mod_security (id:210492) triggered by 54.83.149.0 (ec2-54-83-149-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 06:56:25.015287 2026] [security2:error] [pid 7470:tid 7470] [client 54.83.149.0:60238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pembrokefinance.com"] [uri "/.git/config"] [unique_id "aagd6SPjJrUVqejLbPnDtgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-04 10:44:20 UTC · (8 months ago)	(mod_security) mod_security (id:210492) triggered by 54.83.149.0 (ec2-54-83-149-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 05:44:15.869277 2026] [security2:error] [pid 6684:tid 66 ... show more (mod_security) mod_security (id:210492) triggered by 54.83.149.0 (ec2-54-83-149-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 05:44:15.869277 2026] [security2:error] [pid 6684:tid 6684] [client 54.83.149.0:47820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dovka.com"] [uri "/.git/config"] [unique_id "aagM_9CvYtEAKGrJTxZGmgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-04 10:28:57 UTC · (8 months ago)	(mod_security) mod_security (id:210492) triggered by 54.83.149.0 (ec2-54-83-149-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 05:28:50.830111 2026] [security2:error] [pid 30300:tid 3 ... show more (mod_security) mod_security (id:210492) triggered by 54.83.149.0 (ec2-54-83-149-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 05:28:50.830111 2026] [security2:error] [pid 30300:tid 30300] [client 54.83.149.0:32986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hilltopfound.com"] [uri "/.git/config"] [unique_id "aagJYm0P2ie12m95YXqZrgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 sernate	2026-03-04 10:13:57 UTC · (8 months ago)	(mod_security) mod_security (id:210492) triggered by 54.83.149.0 (US/United States/ec2-54-83-149-0.compute-1.amazonaws.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC	Brute-Force
🇩🇪 Mr-Money	2026-03-04 09:51:51 UTC · (8 months ago)	scenario: crowdsecurity/modsecurity - events: 1 - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-03-04 09:35:35 UTC · (8 months ago)	(mod_security) mod_security (id:210492) triggered by 54.83.149.0 (ec2-54-83-149-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 04:35:31.153537 2026] [security2:error] [pid 25386:tid 2 ... show more (mod_security) mod_security (id:210492) triggered by 54.83.149.0 (ec2-54-83-149-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 04:35:31.153537 2026] [security2:error] [pid 25386:tid 25386] [client 54.83.149.0:33940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.serviciosjireh.cl.tecnoconce.com"] [uri "/.git/config"] [unique_id "aaf846FlHS83_b30mcdDNwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-04 09:14:27 UTC · (8 months ago)	Auto-reported by Fail2Ban (NPM-Auth)	Web App Attack
🇺🇸 TPI-Abuse	2026-03-04 09:09:23 UTC · (8 months ago)	(mod_security) mod_security (id:210492) triggered by 54.83.149.0 (ec2-54-83-149-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 04:09:18.394358 2026] [security2:error] [pid 19429:tid 1 ... show more (mod_security) mod_security (id:210492) triggered by 54.83.149.0 (ec2-54-83-149-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 04:09:18.394358 2026] [security2:error] [pid 19429:tid 19429] [client 54.83.149.0:38898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kruizekontrhl.com"] [uri "/.git/config"] [unique_id "aaf2vnfQIYibjOa49-Q8gAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-03-04 09:05:50 UTC · (8 months ago)	Too many Status 40X (12) Scanning/Probing (12)	Brute-Force Web App Attack
Anonymous	2026-03-04 09:05:05 UTC · (8 months ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack
Anonymous	2026-03-04 08:46:23 UTC · (8 months ago)	54.83.149.0 - - [04/Mar/2026:09:46:23 +0100] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15"	Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 154.16.44.101

🇿🇦 20.164.213.82

🇳🇱 213.177.179.12

🇦🇿 212.47.149.135

🇩🇪 209.101.14.209

🇺🇸 205.210.31.101

🇳🇱 188.42.73.1

🇨🇭 179.43.153.18

🇲🇾 175.144.60.118

🇧🇪 158.173.67.1

🇿🇦 156.155.55.50

🇵🇰 153.117.50.56

🇮🇳 152.59.78.15

🇳🇱 45.148.10.157

🇬🇧 35.203.211.123

🇯🇵 34.97.253.162

🇮🇳 152.58.57.146

🇹🇭 152.32.245.44

🇺🇸 152.32.235.36

🇳🇬 105.118.6.47