JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.252.241.110

54.252.241.110 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 46%: ?

46%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-252-241-110.ap-southeast-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.252.241.110

Whois 54.252.241.110

IP Abuse Reports for 54.252.241.110:

This IP address has been reported a total of 13 times from 7 distinct sources. 54.252.241.110 was first reported on July 24th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-27 19:03:17 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.252.241.110 (ec2-54-252-241-110.ap-southeast ... show more (mod_security) mod_security (id:210492) triggered by 54.252.241.110 (ec2-54-252-241-110.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 15:03:14.404051 2026] [security2:error] [pid 4183062:tid 4183062] [client 54.252.241.110:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.wiszen.org"] [uri "/.env.txt"] [unique_id "amercr9ybUAwr4K8lng2IwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-27 03:23:46 (1 day ago)	Try to access /.git/config	Web App Attack
Anonymous	2026-07-25 13:07:00 (2 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: AU, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: AU, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-24 22:03:41 (3 days ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
Anonymous	2026-07-24 18:28:52 (3 days ago)	(caddyscan) Scanner path probe from 54.252.241.110 (AU/Australia/ec2-54-252-241-110.ap-southeast-2.c ... show more (caddyscan) Scanner path probe from 54.252.241.110 (AU/Australia/ec2-54-252-241-110.ap-southeast-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:18:28:48 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:18:28:48 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:18:28:48 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:18:28:48 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:18:28:49 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
🇳🇱 Mangelot Hosting	2026-07-24 17:46:20 (3 days ago)	(modsecurity) srv104 ModSecurity 54.252.241.110 (AU/Australia/ec2-54-252-241-110.ap-southeast-2.comp ... show more (modsecurity) srv104 ModSecurity 54.252.241.110 (AU/Australia/ec2-54-252-241-110.ap-southeast-2.compute.amazonaws.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-07-24 17:05:40 (3 days ago)	(caddyscan) Scanner path probe from 54.252.241.110 (AU/Australia/ec2-54-252-241-110.ap-southeast-2.c ... show more (caddyscan) Scanner path probe from 54.252.241.110 (AU/Australia/ec2-54-252-241-110.ap-southeast-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:17:05:35 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:17:05:35 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:17:05:35 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:17:05:35 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:17:05:36 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
Anonymous	2026-07-24 15:41:54 (3 days ago)	(caddyscan) Scanner path probe from 54.252.241.110 (AU/Australia/ec2-54-252-241-110.ap-southeast-2.c ... show more (caddyscan) Scanner path probe from 54.252.241.110 (AU/Australia/ec2-54-252-241-110.ap-southeast-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:15:41:48 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:15:41:49 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:15:41:49 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:15:41:49 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:15:41:49 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
Anonymous	2026-07-24 14:05:14 (3 days ago)	(caddyscan) Scanner path probe from 54.252.241.110 (AU/Australia/ec2-54-252-241-110.ap-southeast-2.c ... show more (caddyscan) Scanner path probe from 54.252.241.110 (AU/Australia/ec2-54-252-241-110.ap-southeast-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:14:05:09 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:14:05:09 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:14:05:09 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:14:05:10 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 54.252.241.110 - - [24/Jul/2026:14:05:10 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-07-24 14:04:37 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 54.252.241.110 (ec2-54-252-241-110.ap-southeast ... show more (mod_security) mod_security (id:210492) triggered by 54.252.241.110 (ec2-54-252-241-110.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 10:04:32.651195 2026] [security2:error] [pid 1661560:tid 1661560] [client 54.252.241.110:55098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garantaconsulting.com"] [uri "/.git/config"] [unique_id "amNw8KhR5ngHfZy2brIPyAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 12:05:27 (3 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: AU, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: AU, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
Anonymous	2026-07-24 05:06:27 (4 days ago)	Suspicious or malicious traffic has been detected	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 04:00:25 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 54.252.241.110 (ec2-54-252-241-110.ap-southeast ... show more (mod_security) mod_security (id:210492) triggered by 54.252.241.110 (ec2-54-252-241-110.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 00:00:20.627582 2026] [security2:error] [pid 3258404:tid 3258404] [client 54.252.241.110:38574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gandmaquatics.com"] [uri "/.git/config"] [unique_id "amLjVNkQrtjiT70KxCtwqwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 189.104.129.158

🇰🇷 121.189.198.60

🇨🇳 111.32.153.180

🇺🇸 47.77.225.215

🇷🇺 37.77.150.241

🇫🇷 217.182.204.113

🇸🇬 172.217.32.152

🇸🇪 171.25.158.87

🇳🇱 5.187.35.26

🇺🇿 188.113.199.182

🇺🇸 136.111.163.141

🇹🇷 78.182.252.56

🇬🇧 35.203.210.243

🇳🇱 2620:171:f9:f0:9999::236

🇺🇸 216.25.89.128

🇨🇴 191.104.157.164

🇲🇽 189.203.89.246

🇳🇱 185.242.226.87

🇧🇷 170.247.192.9

🇺🇸 147.185.132.229