JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.91.143.116

54.91.143.116 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 0%: ?

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-91-143-116.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.91.143.116

Whois 54.91.143.116

IP Abuse Reports for 54.91.143.116:

This IP address has been reported a total of 20 times from 5 distinct sources. 54.91.143.116 was first reported on January 15th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-02-06 23:13:39 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 06 18:13:36.442648 2024] [security2:error] [pid 11983] [client 54.91.143.116:55126] [client 54.91.143.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ubermilo.com"] [uri "/.git/config"] [unique_id "ZcK9IHEE1MSnKk8iH44G6AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-06 22:48:49 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 06 17:48:42.710788 2024] [security2:error] [pid 21529] [client 54.91.143.116:46964] [client 54.91.143.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thecrossing1.com"] [uri "/.git/config"] [unique_id "ZcK3StoZKGc-xyGRIT7GZgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2024-02-06 22:10:24 (2 years ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇺🇸 woof	2024-02-06 21:33:04 (2 years ago)	This IP accessed a banned path "/.git/config" with User Agent "Mozilla/5.0 (X11; Linux x86_64) Apple ... show more This IP accessed a banned path "/.git/config" with User Agent "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36". (ListenCaddy) show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-06 20:57:15 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 06 15:57:09.295407 2024] [security2:error] [pid 29030:tid 47763977619200] [client 54.91.143.116:55894] [client 54.91.143.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "opinioney.com"] [uri "/.git/config"] [unique_id "ZcKdJU0GzNlJogKW3tbdbQAAAQY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-06 20:12:19 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 06 15:12:14.279164 2024] [security2:error] [pid 15611] [client 54.91.143.116:50032] [client 54.91.143.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mecme.co"] [uri "/.git/config"] [unique_id "ZcKSnphepd0IJhC1k0c3NwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-06 19:48:10 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 06 14:48:02.090641 2024] [security2:error] [pid 32340] [client 54.91.143.116:49470] [client 54.91.143.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lexispeaks.com"] [uri "/.git/config"] [unique_id "ZcKM8uUfpfMQgHUJkvD2sgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-06 18:30:13 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 06 13:30:07.617737 2024] [security2:error] [pid 469] [client 54.91.143.116:52752] [client 54.91.143.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gold-au.com"] [uri "/.git/config"] [unique_id "ZcJ6r-csRfTwG_jYaSMBdAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 f-paradise.ovh	2024-02-06 18:00:05 (2 years ago)	Probe for vulnerabilities. Path attempted: /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2024-02-06 17:26:10 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 06 12:26:05.944501 2024] [security2:error] [pid 21628] [client 54.91.143.116:54796] [client 54.91.143.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "depcare.com"] [uri "/.git/config"] [unique_id "ZcJrrdi3l9mp4M1h4kJtSwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 woof	2024-02-06 17:15:50 (2 years ago)	This IP accessed a banned path "/.git/config" with User Agent "Mozilla/5.0 (iPhone; CPU iPhone OS 11 ... show more This IP accessed a banned path "/.git/config" with User Agent "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Mobile/15A5362a Safari/604.1". (ListenCaddy) show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-06 16:37:39 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 06 11:37:31.580235 2024] [security2:error] [pid 3167] [client 54.91.143.116:42280] [client 54.91.143.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brandpumice.com"] [uri "/.git/config"] [unique_id "ZcJgSyPvp1e_zOMLujxldQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-06 15:54:14 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.91.143.116 (ec2-54-91-143-116.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 06 10:54:10.734480 2024] [security2:error] [pid 14186] [client 54.91.143.116:56672] [client 54.91.143.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "algorithmichollow.art"] [uri "/.git/config"] [unique_id "ZcJWIl2wkbIidQPSEmOKQAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 IrisFlower	2023-01-15 04:02:18 (3 years ago)	Unauthorized connection attempt detected from IP address 54.91.143.116 to port 5432 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2023-01-15 03:49:50 (3 years ago)	Unauthorized connection attempt detected from IP address 54.91.143.116 to port 587 [J]	Port Scan Hacking

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 186.13.24.118

🇧🇷 170.246.211.40

🇫🇷 91.231.89.134

🇳🇱 45.148.10.141

🇳🇱 40.113.175.214

🇧🇪 35.190.214.244

🇧🇷 200.223.232.26

🇨🇴 181.129.41.162

🇺🇸 100.49.117.77

🇩🇪 64.89.163.87

🇺🇸 54.197.181.212

🇺🇸 50.185.63.158

🇿🇦 41.185.64.226

🇹🇿 41.59.42.201

🇻🇳 27.79.3.81

🇸🇪 2a04:4e40:4400:0:7f:2b2b:d9f:d5fb

🇨🇳 221.214.104.46

🇺🇸 210.16.100.120

🇨🇳 183.197.52.162

🇩🇪 130.12.180.65