JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.95.105.91

54.95.105.91 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 57%: ?

57%

ISP	Amazon Data Services Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-95-105-91.ap-northeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.95.105.91

Whois 54.95.105.91

IP Abuse Reports for 54.95.105.91:

This IP address has been reported a total of 10 times from 9 distinct sources. 54.95.105.91 was first reported on July 14th 2026, and the most recent report was 31 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-16 17:11:33 (31 minutes ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 mnsf	2026-07-16 08:05:29 (9 hours ago)	Scanning/Probing (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 07:05:35 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.95.105.91 (ec2-54-95-105-91.ap-northeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 54.95.105.91 (ec2-54-95-105-91.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 03:05:28.980728 2026] [security2:error] [pid 27071:tid 27091] [client 54.95.105.91:46334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bluetigertees.com"] [uri "/.git/config"] [unique_id "aliCuPTfC2rNM5I6_ER2_gAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 06:21:39 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.95.105.91 (ec2-54-95-105-91.ap-northeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 54.95.105.91 (ec2-54-95-105-91.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 02:21:31.430975 2026] [security2:error] [pid 6477:tid 6477] [client 54.95.105.91:47652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bluestarplumberseasttexas.com"] [uri "/.git/config"] [unique_id "alh4a1se_MZ4_o9uPGBS0QAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 oisecnet	2026-07-15 21:02:08 (20 hours ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-07-15. 10 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-07-15. 10 requests from this IP. show less	Brute-Force Web App Attack SSH
🇫🇷 solution.it	2026-07-15 03:06:52 (1 day ago)	[Wed Jul 15 05:06:51.567206 2026] [authz_core:error] [pid 78001] [client 54.95.105.91:48880] AH01630 ... show more [Wed Jul 15 05:06:51.567206 2026] [authz_core:error] [pid 78001] [client 54.95.105.91:48880] AH01630: client denied by server configuration: /var/www/html/.git [Wed Jul 15 05:06:52.051947 2026] [authz_core:error] [pid 78001] [client 54.95.105.91:48880] AH01630: client denied by server configuration: /var/www/html/.env [Wed Jul 15 05:06:52.294320 2026] [authz_core:error] [pid 78001] [client 54.95.105.91:48880] AH01630: client denied by server configuration: /var/www/html/.env.local ... show less	Brute-Force
🇺🇸 Mundo Bueno	2026-07-15 02:40:06 (1 day ago)	[ISILIA Protection v2.1] Tentative d'accès: /.git/config \| Pays: JP \| UA: Mozilla/5.0 (Macintosh; In ... show more [ISILIA Protection v2.1] Tentative d'accès: /.git/config \| Pays: JP \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0. show less	Hacking Web App Attack
🇺🇸 ALSCO®️	2026-07-14 22:00:42 (1 day ago)	Report By ALSCO Security Team: Potential CSRF Attack Detected	SQL Injection
🇺🇸 Secure Gateway®️	2026-07-14 22:00:41 (1 day ago)	Report By Secure Gateway Security Team: Suspicious File Upload Attempt	Web App Attack
🇬🇧 poundawebsiteltd	2026-07-14 14:08:32 (2 days ago)	Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 54.95.105. ... show more Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 54.95.105.91 (JP/Japan/[REDACTED_DOMAIN]): 20 in the last 3600 secs \| UA: (apache_probe) Failed Access (403/404) 54.95.105.91 (JP/Japan/ec2-54-95-105-91.ap-northeast-1.compute.amazonaws.com): 20 in the last 3600 secs show less	Brute-Force Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇭 210.5.117.238

🇺🇸 205.210.31.71

🇮🇩 202.56.167.30

🇷🇴 193.32.162.84

🇦🇪 152.32.181.210

🇹🇭 101.108.220.91

🇮🇩 69.5.23.222

🇨🇳 59.82.83.5

🇺🇸 45.194.67.26

🇻🇳 27.79.5.119

🇺🇸 2607:f8b0:4001:c76::12b

🇺🇸 143.198.25.99

🇷🇴 92.118.39.171

🇧🇬 79.124.62.230

🇦🇺 45.134.20.124

🇧🇷 189.50.196.205

🇨🇳 183.151.228.242

🇹🇷 94.154.43.192

🇳🇱 91.92.42.168

🇺🇸 81.30.98.193