JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.152.21.147

54.152.21.147 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-152-21-147.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.152.21.147

Whois 54.152.21.147

IP Abuse Reports for 54.152.21.147:

This IP address has been reported a total of 20 times from 16 distinct sources. 54.152.21.147 was first reported on April 27th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 screwlooseit.com.au	2025-10-03 23:17:18 (1 year ago)	Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/ec2-54-152-21-147.compute-1.amazo ... show more Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/ec2-54-152-21-147.compute-1.amazonaws.com show less	Web App Attack
🇵🇱 sefinek.net	2025-10-03 23:02:11 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 R.G.	2025-10-03 22:58:28 (1 year ago)	(ScanningForFiles) Scanning for files triggerd 54.152.21.147 (US/United States/ec2-54-152-21-147.com ... show more (ScanningForFiles) Scanning for files triggerd 54.152.21.147 (US/United States/ec2-54-152-21-147.compute-1.amazonaws.com): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 Little Iguana	2025-10-03 22:57:53 (1 year ago)	Attempt to hack Wordpress Login, XMLRPC or other login	Hacking
🇨🇿 sajmon0011	2025-10-03 22:55:10 (1 year ago)	54.152.21.147 - - [04/Oct/2025:00:55:10 +0200] "GET /dojo/dojo.xd.js HTTP/1.1" 404 196 "-" "Mozilla/ ... show more 54.152.21.147 - - [04/Oct/2025:00:55:10 +0200] "GET /dojo/dojo.xd.js HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" ... show less	Web App Attack
🇦🇺 weblite	2025-10-03 22:44:58 (1 year ago)	WP_EXPLOIT_PROBE WP_MALWARE_PROBE	Hacking Web App Attack
🇮🇩 Burayot	2025-10-03 22:44:30 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 54.152.21.147 (US/United States/ec2- ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 54.152.21.147 (US/United States/ec2-54-152-21-147.compute-1.amazonaws.com): 1 in the last 3600 secs show less	Web App Attack
🇲🇾 Rizzy	2025-10-03 22:44:28 (1 year ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-10-03 21:48:21 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 54.152.21.147 (ec2-54-152-21-147.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.152.21.147 (ec2-54-152-21-147.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 03 17:48:17.762473 2025] [security2:error] [pid 24782:tid 24782] [client 54.152.21.147:50024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sites.seobefoundlocal.com"] [uri "/.env"] [unique_id "aOBEoU-YfX2D0E_6GOMB6gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-03 21:34:17 (1 year ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 TPI-Abuse	2025-10-03 21:10:06 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 54.152.21.147 (ec2-54-152-21-147.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.152.21.147 (ec2-54-152-21-147.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 03 17:09:58.908758 2025] [security2:error] [pid 17500:tid 17500] [client 54.152.21.147:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shubil.com"] [uri "/.env"] [unique_id "aOA7psSeX97cNxzgUkYLVQAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 advena	2025-10-03 20:15:56 (1 year ago)	54.152.21.147 (AS14618 AMAZON-AES) was intercepted at 2025-10-03T20:12:48Z after violating WAF direc ... show more 54.152.21.147 (AS14618 AMAZON-AES) was intercepted at 2025-10-03T20:12:48Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-10-03 19:54:32 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 54.152.21.147 (ec2-54-152-21-147.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.152.21.147 (ec2-54-152-21-147.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 03 15:54:25.189948 2025] [security2:error] [pid 23368:tid 23368] [client 54.152.21.147:45972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sedemo.xyz"] [uri "/app/.env"] [unique_id "aOAp8cG8KbfzN99cKw32AwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ©MB©	2025-10-03 19:49:38 (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Hacking Web App Attack
🇩🇪 kjaerulff	2025-10-03 19:37:01 (1 year ago)	Probed for 6 PHP files	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.191.94.172

🇳🇱 45.148.10.64

🇨🇳 36.7.90.98

🇷🇺 195.239.40.213

🇲🇽 187.212.33.78

🇨🇳 183.56.216.153

🇺🇸 162.216.150.220

🇻🇳 125.212.244.35

🇺🇦 91.225.162.147

🇺🇸 72.14.186.195

🇺🇸 70.187.116.20

🇺🇸 52.20.198.190

🇩🇪 51.77.79.64

🇮🇩 43.157.200.91

🇧🇪 35.195.187.130

🇳🇱 34.91.13.19

🇩🇪 5.231.242.205

🇲🇽 189.206.189.150

🇮🇳 163.61.31.52

🇦🇹 152.53.46.2