JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.90.220.0

54.90.220.0 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 24%: ?

24%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-90-220-0.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.90.220.0

Whois 54.90.220.0

IP Abuse Reports for 54.90.220.0:

This IP address has been reported a total of 17 times from 11 distinct sources. 54.90.220.0 was first reported on July 24th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 07:00:00 (1 month ago)	Apache probe; attempts=1049; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.e ... show more Apache probe; attempts=1049; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.env.bak \| /.env.ci \| /.env.dev \| /.env.development \| /.env.dist \| /.env.docker \| /.env.example \| /.env.json \| /.env.live \| /.env.local \| /.env.old \| /.env.preprod \| /.env.prod \| /.env.production \| /.env.remote \| /.env.sample \| /.env.save \| /.env.stage \| /.env.staging \| /.env.swp \| /.env.test \| /.env.txt \| /.env.uat \| /.env.yaml \| /.env.yml \| /.env~ \| /.git/.env \| /.git/config \| /actions/.env \| /admin-panel/.env \| /admin/.env \| /administrator/.env \| /angular/.env \| /ansible/.env \| /api/.env \| /api/dev/.env \| /api/staging/.env \| /api/v1/.env \| /api/v2/.env \| /api/v3/.env \| /app/.env \| /application/.env \| /apps/.env \| /assets/.env \| /aws/.env \| /azure/.env \| /backend/.env \| /backup/.env \| /backups/.env \| /beta/.env \| /bin/.env \| /bootstrap/.env \| /brevo/.env \| /build/.env \| /buildkite/.env \| /bulk/.env \| /cache/.en \| ... [204 exact paths total] show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 18:08:04 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 54.90.220.0 (ec2-54-90-220-0.compute-1.amazonaw ... show more (mod_security) mod_security (id:210492) triggered by 54.90.220.0 (ec2-54-90-220-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 14:07:57.381283 2026] [security2:error] [pid 502237:tid 502237] [client 54.90.220.0:52466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kv-10.com"] [uri "/.git/config"] [unique_id "ameefSVbbDRF8Id5NU5sQQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 smallhost_helsinki	2026-07-27 16:01:52 (1 month ago)	Tried to access non existent path: /.env	Web App Attack
🇩🇪 FeG Deutschland	2026-07-27 13:03:06 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇷🇺 DZBOT	2026-07-27 12:35:07 (1 month ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-07-27 07:15:24 (1 month ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 mnsf	2026-07-27 07:05:15 (1 month ago)	Scanning/Probing (61)	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-07-27 05:30:18 (1 month ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 homeshowdomain.nl	2026-07-26 21:59:48 (1 month ago)	Auto-ban: >3000 req/min op 2026-07-26	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-26 04:27:17 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 54.90.220.0 (ec2-54-90-220-0.compute-1.amazonaw ... show more (mod_security) mod_security (id:210492) triggered by 54.90.220.0 (ec2-54-90-220-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 00:27:10.392660 2026] [security2:error] [pid 2577423:tid 2577423] [client 54.90.220.0:39388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "levijoneslegal.com"] [uri "/.git/config"] [unique_id "amWMng-BOUYw96lZumlRIwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-25 22:06:22 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-24. show less	Web App Attack SSH Hacking
Anonymous	2026-07-24 09:06:21 (1 month ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan
🇺🇸 TPI-Abuse	2026-07-24 08:09:34 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 54.90.220.0 (ec2-54-90-220-0.compute-1.amazonaw ... show more (mod_security) mod_security (id:210492) triggered by 54.90.220.0 (ec2-54-90-220-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 04:09:30.848384 2026] [security2:error] [pid 539282:tid 539282] [client 54.90.220.0:41236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ironheadsofseo.com"] [uri "/.git/config"] [unique_id "amMdukSJX8G9XxVuz_mTFgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 03:48:40 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 54.90.220.0 (ec2-54-90-220-0.compute-1.amazonaw ... show more (mod_security) mod_security (id:210492) triggered by 54.90.220.0 (ec2-54-90-220-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 23:48:35.657851 2026] [security2:error] [pid 3117698:tid 3117698] [client 54.90.220.0:41252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.sunsettrailsardmore.com"] [uri "/.git/config"] [unique_id "amLgkzUQglddJ5G7X1fhFAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 03:27:47 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 54.90.220.0 (ec2-54-90-220-0.compute-1.amazonaw ... show more (mod_security) mod_security (id:210492) triggered by 54.90.220.0 (ec2-54-90-220-0.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 23:27:42.262576 2026] [security2:error] [pid 3198064:tid 3198064] [client 54.90.220.0:42512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.iconbizpromo.com"] [uri "/.git/config"] [unique_id "amLbrp_dgp_OiLUWL7x2-AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 198.163.192.186

🇮🇶 169.224.116.202

🇩🇪 118.193.59.10

🇨🇳 118.145.155.165

🇮🇩 114.5.89.183

🇸🇪 83.209.249.224

🇩🇪 69.5.169.52

🇺🇸 68.10.53.111

🇮🇩 36.70.235.29

🇺🇸 2604:a880:400:d1:0:5:29f:e001

🇪🇹 213.55.96.151

🇹🇭 180.180.99.241

🇫🇷 162.159.124.32

🇦🇴 154.116.254.157

🇺🇸 136.69.219.163

🇵🇱 109.205.211.29

🇺🇸 34.145.132.142

🇩🇪 34.107.10.191

🇧🇾 31.148.250.103

🇷🇺 5.165.19.3