JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.147.7.104

54.147.7.104 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 74%: ?

74%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-147-7-104.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.147.7.104

Whois 54.147.7.104

IP Abuse Reports for 54.147.7.104:

This IP address has been reported a total of 17 times from 12 distinct sources. 54.147.7.104 was first reported on July 24th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-27 16:03:37 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.147.7.104 (ec2-54-147-7-104.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.147.7.104 (ec2-54-147-7-104.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 12:03:33.568298 2026] [security2:error] [pid 9886:tid 9886] [client 54.147.7.104:60254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bikelatch.com"] [uri "/.git/config"] [unique_id "ameBVY9qtHbiYV8K4l0jXAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-07-27 14:12:32 (14 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 11:29:17 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.147.7.104 (ec2-54-147-7-104.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.147.7.104 (ec2-54-147-7-104.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:29:11.605633 2026] [security2:error] [pid 3533116:tid 3533116] [client 54.147.7.104:60192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigskyprints.com"] [uri "/.git/config"] [unique_id "amdBB0d-HX18UAaQP3tZ5wAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 08:45:57 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.147.7.104 (ec2-54-147-7-104.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.147.7.104 (ec2-54-147-7-104.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:45:51.721368 2026] [security2:error] [pid 193355:tid 193355] [client 54.147.7.104:43062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigislandhawaiirealestate.com"] [uri "/.git/config"] [unique_id "amcavxo6VFuttBOGBGZVYAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 08:09:36 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.147.7.104 (ec2-54-147-7-104.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.147.7.104 (ec2-54-147-7-104.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:09:32.169426 2026] [security2:error] [pid 4171944:tid 4171944] [client 54.147.7.104:43758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigheartskitchen.com"] [uri "/.git/config"] [unique_id "amcSPJXvIL9uGvNM7EgzRAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Apache	2026-07-27 08:08:24 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.147.7.104 (US/United States/ec2-54-147-7-104 ... show more (mod_security) mod_security (id:210492) triggered by 54.147.7.104 (US/United States/ec2-54-147-7-104.compute-1.amazonaws.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇮🇩 Burayot	2026-07-27 06:19:16 (22 hours ago)	LF_APACHE_403: 54.147.7.104 (US/United States/ec2-54-147-7-104.compute-1.amazonaws.com), more than 1 ... show more LF_APACHE_403: 54.147.7.104 (US/United States/ec2-54-147-7-104.compute-1.amazonaws.com), more than 10 Apache 403 hits in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 05:30:19 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.147.7.104 (ec2-54-147-7-104.compute-1.amazon ... show more (mod_security) mod_security (id:210492) triggered by 54.147.7.104 (ec2-54-147-7-104.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 01:30:14.698234 2026] [security2:error] [pid 648716:tid 648716] [client 54.147.7.104:56502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigchus.com"] [uri "/.git/config"] [unique_id "ambs5kT4OBK4jX35-RiI8AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-27 05:05:07 (23 hours ago)	Too many Status 40X (11) Scanning/Probing (11)	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-26 21:59:17 (1 day ago)	Auto-ban: >3000 req/min op 2026-07-26	Web App Attack SSH Hacking
🇩🇪 macrob	2026-07-26 05:19:48 (1 day ago)	2026/07/26 05:19:46 [error] 2785880#2785880: 412247031 access forbidden by rule, client: 54.147.7.1 ... show more 2026/07/26 05:19:46 [error] 2785880#2785880: 412247031 access forbidden by rule, client: 54.147.7.104, server: bonocom.org, request: "GET /.git/config HTTP/2.0", host: "bonocom.org" 2026/07/26 05:19:46 [error] 2785880#2785880: 412247038 access forbidden by rule, client: 54.147.7.104, server: bonocom.org, request: "GET /.env HTTP/2.0", host: "bonocom.org" 2026/07/26 05:19:46 [error] 2785880#2785880: 412247041 access forbidden by rule, client: 54.147.7.104, server: bonocom.org, request: "GET /.env.local HTTP/2.0", host: "bonocom.org" ... show less	Web App Attack
Anonymous	2026-07-26 03:07:02 (2 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan
🇬🇧 Apache	2026-07-25 02:35:31 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 54.147.7.104 (US/United States/ec2-54-147-7-104 ... show more (mod_security) mod_security (id:210492) triggered by 54.147.7.104 (US/United States/ec2-54-147-7-104.compute-1.amazonaws.com): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-07-25 00:51:44 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇵🇱 strefapi_com	2026-07-25 00:44:35 (3 days ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 172.213.144.209

🇺🇸 162.217.100.196

🇪🇸 158.158.76.106

🇺🇸 136.119.96.30

🇩🇪 3.71.26.96

🇮🇳 203.193.137.250

🇹🇼 198.235.24.87

🇹🇼 198.235.24.39

🇹🇼 198.235.24.37

🇺🇸 173.239.240.116

🇳🇱 167.172.40.248

🇺🇸 162.216.150.170

🇺🇸 162.216.150.68

🇨🇳 111.36.112.138

🇺🇸 100.55.20.32

🇫🇷 91.231.89.15

🇺🇸 68.127.228.176

🇳🇱 64.89.162.181

🇻🇪 38.224.36.78

🇺🇸 35.91.133.236