JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.185.160.71

54.185.160.71 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 46%: ?

46%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-185-160-71.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.185.160.71

Whois 54.185.160.71

IP Abuse Reports for 54.185.160.71:

This IP address has been reported a total of 13 times from 7 distinct sources. 54.185.160.71 was first reported on July 24th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-24 22:04:13 (6 hours ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
🇫🇷 dynamix	2026-07-24 16:07:57 (12 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 15:34:34 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.185.160.71 (ec2-54-185-160-71.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.185.160.71 (ec2-54-185-160-71.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 11:34:28.859967 2026] [security2:error] [pid 4192234:tid 4192234] [client 54.185.160.71:56866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.musicfreakcentral.jamworldmovements.com"] [uri "/.git/config"] [unique_id "amOGBACrBSQQBuu9YJuh6gAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 15:14:05 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.185.160.71 (ec2-54-185-160-71.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.185.160.71 (ec2-54-185-160-71.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 11:14:00.200162 2026] [security2:error] [pid 1210421:tid 1210421] [client 54.185.160.71:44428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.music.garretthillary.com"] [uri "/.git/config"] [unique_id "amOBOPeJc17-ww1w7BQrUAAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 12:42:30 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.185.160.71 (ec2-54-185-160-71.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.185.160.71 (ec2-54-185-160-71.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 08:42:24.015047 2026] [security2:error] [pid 4035172:tid 4035172] [client 54.185.160.71:35040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.munchiwrapcom.lasertherapyoc.com"] [uri "/.git/config"] [unique_id "amNdsC_GV6Z5UOGZ3FGZcgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 09:28:42 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.185.160.71 (ec2-54-185-160-71.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.185.160.71 (ec2-54-185-160-71.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 05:28:34.057766 2026] [security2:error] [pid 18678:tid 18678] [client 54.185.160.71:59182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.muddybuddypals.com.halotoys.com"] [uri "/.git/config"] [unique_id "amMwQsO_PtjglMDasp3LggAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hero2026	2026-07-24 09:16:31 (19 hours ago)	Blocked by Fail2ban	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 07:55:21 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.185.160.71 (ec2-54-185-160-71.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.185.160.71 (ec2-54-185-160-71.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:55:14.803159 2026] [security2:error] [pid 3939479:tid 3939479] [client 54.185.160.71:38020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mthoodmuseum.midwayisland.com"] [uri "/.git/config"] [unique_id "amMaYoW7Ttid9wTY3RN-SgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-24 07:19:29 (21 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇱🇻 garmtech.com	2026-07-24 06:31:22 (22 hours ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 06:11:19 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.185.160.71 (ec2-54-185-160-71.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.185.160.71 (ec2-54-185-160-71.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 02:11:12.848799 2026] [security2:error] [pid 3281476:tid 3281476] [client 54.185.160.71:60612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mskimberleesspace.achildsspace.com"] [uri "/.git/config"] [unique_id "amMCAFdGsAQl1r63k3rNTAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 05:25:39 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.185.160.71 (ec2-54-185-160-71.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.185.160.71 (ec2-54-185-160-71.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 01:25:34.649941 2026] [security2:error] [pid 3444154:tid 3444154] [client 54.185.160.71:43198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mscpc.seizetheseason.com"] [uri "/.git/config"] [unique_id "amL3ToYkYD_17jC44qQEaQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-24 04:05:15 (1 day ago)	Scanning/Probing (21)	Brute-Force Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 193.24.211.76

🇺🇸 209.133.206.142

🇧🇷 205.210.31.223

🇬🇧 193.46.0.70

🇨🇳 183.151.76.56

🇫🇷 178.20.215.222

🇺🇸 162.216.150.46

🇺🇸 162.216.150.40

🇫🇷 146.70.194.230

🇫🇷 144.91.70.140

🇸🇬 139.59.99.66

🇵🇱 81.18.221.21

🇺🇦 77.52.25.27

🇺🇸 70.183.232.207

🇺🇸 216.25.89.145

🇧🇪 198.235.24.253

🇧🇪 198.235.24.235

🇬🇧 193.46.0.243

🇬🇧 192.248.150.180

🇺🇸 162.216.150.3