JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.88.244.107

54.88.244.107 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 85%: ?

85%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-88-244-107.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.88.244.107

Whois 54.88.244.107

IP Abuse Reports for 54.88.244.107:

This IP address has been reported a total of 24 times from 18 distinct sources. 54.88.244.107 was first reported on September 30th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 abuseipsrv1	2026-07-29 10:52:40 (2 days ago)	Blacklisted for CAPTCHA_DOS_ALERT after 101 captcha requests	DDoS Attack Brute-Force Web App Attack
Anonymous	2026-07-29 07:00:00 (2 days ago)	Apache probe; attempts=408; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.en ... show more Apache probe; attempts=408; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.env.bak \| /.env.ci \| /.env.dev \| /.env.development \| /.env.dist \| /.env.docker \| /.env.example \| /.env.json \| /.env.live \| /.env.local \| /.env.old \| /.env.preprod \| /.env.prod \| /.env.production \| /.env.remote \| /.env.sample \| /.env.save \| /.env.stage \| /.env.staging \| /.env.swp \| /.env.test \| /.env.txt \| /.env.uat \| /.env.yaml \| /.env.yml \| /.env~ \| /.git/.env \| /.git/config \| /actions/.env \| /admin-panel/.env \| /admin/.env \| /administrator/.env \| /angular/.env \| /ansible/.env \| /api/.env \| /api/dev/.env \| /api/staging/.env \| /api/v1/.env \| /api/v2/.env \| /api/v3/.env \| /app/.env \| /application/.env \| /apps/.env \| /assets/.env \| /aws/.env \| /azure/.env \| /backend/.env \| /backup/.env \| /backups/.env \| /beta/.env \| /bin/.env \| /bootstrap/.env \| /brevo/.env \| /build/.env \| /buildkite/.env \| /bulk/.env \| /cache/.en \| ... [204 exact paths total] show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-27 22:04:26 (3 days ago)	Auto-ban: >3000 req/min op 2026-07-27	Web App Attack SSH Hacking
🇩🇪 webanyone	2026-07-27 20:45:58 (3 days ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇸🇪 vaia.cloud	2026-07-27 20:35:01 (3 days ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 20:17:54 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 54.88.244.107 (ec2-54-88-244-107.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.88.244.107 (ec2-54-88-244-107.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 16:17:49.535568 2026] [security2:error] [pid 1345949:tid 1345949] [client 54.88.244.107:51780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "central-wi-coal-sales.com"] [uri "/.git/config"] [unique_id "ame87Zf5RZbC3HhfqVhvZgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 12:41:52 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 54.88.244.107 (ec2-54-88-244-107.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.88.244.107 (ec2-54-88-244-107.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:41:48.505229 2026] [security2:error] [pid 441615:tid 441615] [client 54.88.244.107:49208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cemesur-vision21.com"] [uri "/.git/config"] [unique_id "amdSDA4EiVOzghqfNTpECgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 09:11:48 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 54.88.244.107 (ec2-54-88-244-107.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.88.244.107 (ec2-54-88-244-107.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 05:11:43.010365 2026] [security2:error] [pid 3113938:tid 3113938] [client 54.88.244.107:42256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "celltechs.net"] [uri "/.git/config"] [unique_id "amcgzwE9SLATPFtLXC8iAAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-27 06:31:01 (4 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 04:06:34 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 54.88.244.107 (ec2-54-88-244-107.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.88.244.107 (ec2-54-88-244-107.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 00:06:26.293345 2026] [security2:error] [pid 2176:tid 2176] [client 54.88.244.107:58076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "celebritybikinigossip.com"] [uri "/.git/config"] [unique_id "ambZQgQriNkfNKU8N70wqgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-26 22:00:57 (4 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-25. show less	Web App Attack SSH Hacking
🇫🇷 dynamix	2026-07-26 07:22:51 (5 days ago)	Multiple WAF Violations	Web App Attack
🇫🇷 fabrice	2026-07-26 05:27:01 (5 days ago)	Repeated Trusted domain errors : 54.88.244.107 - - [26/Jul/2026:07:27:00 +0200] "GET /wp-admin/phpin ... show more Repeated Trusted domain errors : 54.88.244.107 - - [26/Jul/2026:07:27:00 +0200] "GET /wp-admin/phpinfo.php HTTP/1.1" 403 615 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 Octopuce	2026-07-26 03:21:20 (5 days ago)	Aggressive web search of vulnerable pages: / /.env /.env.local /app/.env /apps/.env ...	Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 04:17:02 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 54.88.244.107 (ec2-54-88-244-107.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.88.244.107 (ec2-54-88-244-107.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 00:16:54.162739 2026] [security2:error] [pid 1447398:tid 1447398] [client 54.88.244.107:47332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carolynedds.com"] [uri "/.git/config"] [unique_id "amQ4tqdQCKMSzfj43qCdZgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a02:c205:2072:7499::1

🇮🇳 223.181.84.119

🇺🇸 216.25.89.100

🇺🇸 104.139.193.49

🇺🇸 97.117.78.38

🇸🇪 192.176.173.190

🇵🇾 186.16.59.246

🇹🇷 185.233.247.245

🇲🇾 166.1.249.30

🇪🇸 158.158.32.226

🇸🇬 111.119.234.199

🇨🇳 111.15.133.216

🇺🇸 108.5.137.35

🇫🇷 90.90.89.21

🇵🇱 74.248.20.32

🇰🇷 39.115.195.164

🇺🇸 162.216.150.75

🇫🇮 147.185.133.76

🇫🇷 146.70.194.238

🇺🇸 64.62.156.84