JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.254.246.22

54.254.246.22 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-254-246-22.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.254.246.22

Whois 54.254.246.22

IP Abuse Reports for 54.254.246.22:

This IP address has been reported a total of 22 times from 22 distinct sources. 54.254.246.22 was first reported on June 13th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 sid3windr	2026-06-15 06:59:21 (1 day ago)	GET /.git/config (Tarpitted for 1d15h8m28s, wasted 8.06MB)	Web App Attack
🇳🇨 ACE-INFORMATIQUE.NC	2026-06-14 06:00:07 (2 days ago)	Malicious CGI/web attack blocked by Fail2ban	Web App Attack
🇸🇬 Cloudkul Cloudkul	2026-06-13 20:52:41 (3 days ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show more Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack
🇺🇸 jormaster3k	2026-06-13 20:49:45 (3 days ago)	Attack against Apache (too many 404s)	Web App Attack
🇩🇪 LRob.fr	2026-06-13 20:30:04 (3 days ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Anonymous	2026-06-13 20:06:00 (3 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (30/60 min)'; Requests=30	Port Scan
🇬🇧 venus.launch.bz	2026-06-13 17:32:30 (3 days ago)	(mod_security) mod_security triggered on hostname [redacted] 54.254.246.22 (SG/Singapore/ec2-54-254- ... show more (mod_security) mod_security triggered on hostname [redacted] 54.254.246.22 (SG/Singapore/ec2-54-254-246-22.ap-southeast-1.compute.amazonaws.com) show less	SQL Injection
🇺🇸 oralunal	2026-06-13 17:12:51 (3 days ago)	IP banned by Fail2Ban in jail suss access.log ah-app-1 ...	Bad Web Bot Web App Attack
Anonymous	2026-06-13 17:10:36 (3 days ago)		Web App Attack
🇫🇷 Catalin Negru	2026-06-13 17:06:02 (3 days ago)	2026-06-13 20:06:01,263 fail2ban.actions [2945670]: NOTICE [apache-404] Ban 54.254.246.22 20 ... show more 2026-06-13 20:06:01,263 fail2ban.actions [2945670]: NOTICE [apache-404] Ban 54.254.246.22 2026-06-13 20:06:01,379 fail2ban.actions [2945670]: NOTICE [apache-dirscan] Ban 54.254.246.22 2026-06-13 20:06:01,312 fail2ban.actions [2945670]: NOTICE [web-scanner] Ban 54.254.246.22 2026-06-13 20:06:01,444 fail2ban.actions [2945670]: NOTICE [apache-scan] Ban 54.254.246.22 2026-06-13 20:06:01,478 fail2ban.actions [2945670]: NOTICE [laravel-env] Ban 54.254.246.22 ... show less	Brute-Force Web App Attack
🇨🇦 1gz	2026-06-13 16:08:13 (3 days ago)	Triggered Cloudflare WAF (firewallManaged) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 reznekcs	2026-06-13 16:05:19 (3 days ago)	F2B apache-noscript ban. Logs: [Sat Jun 13 18:05:18.624688 2026] [proxy_fcgi:error] [pid 832824] [cl ... show more F2B apache-noscript ban. Logs: [Sat Jun 13 18:05:18.624688 2026] [proxy_fcgi:error] [pid 832824] [client 54.254.246.22:36044] AH01071: Got error 'Primary script unknown' [Sat Jun 13 18:05:18.689704 2026] [proxy_fcgi:error] [pid 832832] [client 54.254.246.22:36100] AH01071: Got error 'Primary script unknown' [Sat Jun 13 18:05:18.696923 2026] [proxy_fcgi:error] [pid 832836] [client 54.254.246.22:36208] AH01071: Got error 'Primary script unknown' show less	Web App Attack
🇫🇷 Octopuce	2026-06-13 15:46:58 (3 days ago)	Aggressive web search of vulnerable pages: /export/.env /database.yml /env/.env /config/.env /extlib ... show more Aggressive web search of vulnerable pages: /export/.env /database.yml /env/.env /config/.env /extlib/.env ... show less	Web App Attack
Anonymous	2026-06-13 15:42:24 (3 days ago)	suspicious behavior	Blog Spam Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 15:33:00 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 54.254.246.22 (ec2-54-254-246-22.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 54.254.246.22 (ec2-54-254-246-22.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:32:52.322465 2026] [security2:error] [pid 16381:tid 16381] [client 54.254.246.22:35792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.103"] [uri "/.env.php"] [unique_id "ai14JP8oGMVjgizdoLZGQwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.37

🇨🇳 221.228.203.3

🇨🇳 203.212.9.248

🇩🇰 181.214.32.166

🇩🇪 167.94.145.30

🇩🇪 130.61.152.179

🇮🇳 125.23.41.122

🇨🇳 121.11.239.246

🇭🇰 103.103.245.7

🇺🇸 89.208.249.208

🇨🇳 58.34.152.146

🇧🇷 20.195.176.139

🇫🇷 15.237.219.241

🇮🇳 4.247.141.61

🇺🇸 192.227.221.227

🇦🇷 186.38.26.5

🇨🇳 183.66.138.66

🇨🇲 154.70.102.114

🇬🇧 143.110.165.73

🇵🇱 45.194.66.73