JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.246.56.231

54.246.56.231 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 63%: ?

63%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-246-56-231.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.246.56.231

Whois 54.246.56.231

IP Abuse Reports for 54.246.56.231:

This IP address has been reported a total of 13 times from 12 distinct sources. 54.246.56.231 was first reported on July 24th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 07:00:00 (2 days ago)	Automated Apache web application probing in selected 24h window; attempts=211, unique_paths=211, err ... show more Automated Apache web application probing in selected 24h window; attempts=211, unique_paths=211, error_responses=211; targets include WordPress, .env/.git, phpMyAdmin, autodiscover, wpad.dat and related probe paths. show less	Web App Attack
Anonymous	2026-07-29 07:00:00 (2 days ago)	Apache probe; attempts=211; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.en ... show more Apache probe; attempts=211; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.env.bak \| /.env.ci \| /.env.dev \| /.env.development \| /.env.dist \| /.env.docker \| /.env.example \| /.env.fly \| /.env.json \| /.env.live \| /.env.local \| /.env.neon \| /.env.old \| /.env.preprod \| /.env.prod \| /.env.production \| /.env.railway \| /.env.remote \| /.env.render \| /.env.sample \| /.env.save \| /.env.stage \| /.env.staging \| /.env.supabase \| /.env.swp \| /.env.test \| /.env.txt \| /.env.uat \| /.env.vault \| /.env.vercel \| /.env.yaml \| /.env.yml \| /.env~ \| /.git/.env \| /.git/config \| /actions/.env \| /admin-panel/.env \| /admin/.env \| /administrator/.env \| /angular/.env \| /ansible/.env \| /api/.env \| /api/dev/.env \| /api/staging/.env \| /api/v1/.env \| /api/v2/.env \| /api/v3/.env \| /app/.env \| /application/.env \| /apps/.env \| /assets/.env \| /aws/.env \| /azure/.env \| /backend/.env \| /backup/.env \| /backups/.env \| /beta/.env \| ... [211 exact paths total] show less	Web App Attack
🇫🇷 Zundapper	2026-07-28 04:39:26 (3 days ago)	54.246.56.231 - - [28/Jul/2026:06:39:24 +0200] "GET /phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Mac ... show more 54.246.56.231 - - [28/Jul/2026:06:39:24 +0200] "GET /phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.246.56.231 - - [28/Jul/2026:06:39:24 +0200] "GET /info HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.246.56.231 - - [28/Jul/2026:06:39:25 +0200] "GET /_profiler/phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.246.56.231 - - [28/Jul/2026:06:39:25 +0200] "GET /_environment HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.246.56.231 - - [28/Jul/2026:06:39:25 +0200] "GET /webroot/index.php/_environment HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (K ... show less	Web App Attack Port Scan
🇦🇺 screwlooseit.com.au	2026-07-28 03:08:36 (3 days ago)	Blocked by CSF 13 firewall - Rule: config-dotfile IE/Ireland/ec2-54-246-56-231.eu-west-1.compute.ama ... show more Blocked by CSF 13 firewall - Rule: config-dotfile IE/Ireland/ec2-54-246-56-231.eu-west-1.compute.amazonaws.com show less	Web App Attack
🇩🇪 tg_de	2026-07-26 02:01:27 (5 days ago)	264 attempts since 26.07.2026 04:01:17 CEST - last search for: /includes/phpinfo.php	Web App Attack
🇫🇷 dynamix	2026-07-25 17:16:24 (5 days ago)	Multiple WAF Violations	Web App Attack
🇩🇪 gadix	2026-07-25 14:36:45 (5 days ago)	[25/Jul/2026:16:36:42.335367 +0200] amTJ-tP5LS4y11D-WNmhkwAAAAQ 54.246.56.231 37732 127.0.0.1 7081 [ ... show more [25/Jul/2026:16:36:42.335367 +0200] amTJ-tP5LS4y11D-WNmhkwAAAAQ 54.246.56.231 37732 127.0.0.1 7081 [25/Jul/2026:16:36:42.402008 +0200] amTJ-gHWmvPFDmZYLgwTCwAAAAI 54.246.56.231 37750 127.0.0.1 7081 [25/Jul/2026:16:36:42.431005 +0200] amTJ-nRIlKYb_pCt7SUlfgAAAAc 54.246.56.231 37760 127.0.0.1 7081 ... show less	Web App Attack
Anonymous	2026-07-25 12:04:03 (5 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 07:56:17 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 54.246.56.231 (ec2-54-246-56-231.eu-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.246.56.231 (ec2-54-246-56-231.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:56:10.941117 2026] [security2:error] [pid 3718566:tid 3718673] [client 54.246.56.231:44124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.blipdecor.com"] [uri "/.git/config"] [unique_id "amMamh7jUrPwu5PQ2y1n9wAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-24 05:39:08 (1 week ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: /.git/config \| 5 distinct paths \| UA: Mozilla/5. ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: /.git/config \| 5 distinct paths \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Hacking
🇩🇪 grassau.com	2026-07-24 04:57:58 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 54.246.56.231 (IE/Ireland/Leinster/Dubl ... show more (mod_security) mod_security triggered on hostname [redacted] 54.246.56.231 (IE/Ireland/Leinster/Dublin/ec2-54-246-56-231.eu-west-1.compute.amazonaws.com) show less	SQL Injection
Anonymous	2026-07-24 04:57:46 (1 week ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-07-24 04:40:05 (1 week ago)		Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.152.201.166

🇮🇷 185.116.161.214

🇸🇬 172.70.208.85

🇺🇸 162.216.149.140

🇫🇮 147.185.133.19

🇺🇸 129.121.115.193

🇨🇳 120.48.54.170

🇸🇪 51.12.221.15

🇳🇱 45.148.10.67

🇮🇳 2401:4900:88de:a064:f81d:704d:ee8c:66ac

🇺🇸 172.232.3.17

🇸🇬 172.70.208.124

🇩🇪 167.94.146.43

🇵🇭 163.227.87.127

🇹🇼 111.253.144.25

🇹🇷 94.154.43.91

🇺🇸 57.154.167.208

🇬🇧 35.203.211.176

🇺🇸 20.65.194.108

🇻🇳 14.176.219.68