AbuseIPDB » 54.255.165.79
54.255.165.79
This IP was reported 8 times. Confidence of
Abuse
is 50% : ?
ISP
Amazon Data Services Japan
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-54-255-165-79.ap-southeast-1.compute.amazonaws.com
Domain Name
amazon.com
Country
🇸🇬
Singapore
City
Singapore
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 54.255.165.79 :
This IP address has been reported a total of
8
times from
8 distinct
sources.
54.255.165.79 was first reported on
August 27th 2026 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇳🇱
e.fierstra
2026-08-28 01:25:26
(3 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-08-28 00:28:22
(3 days ago)
Multiple WAF Violations
Web App Attack
🇫🇷
Octopuce
2026-08-28 00:27:58
(3 days ago)
Aggressive web search of vulnerable pages: / /.env /.env.local /app/.env /apps/.env ...
Web App Attack
🇩🇪
hchristo
2026-08-27 23:37:23
(3 days ago)
[Fri Aug 28 01:37:19.102502 2026] [authz_core:error] [pid 56331:tid 56387] [client 54.255.165.79:530 ...
show more
[Fri Aug 28 01:37:19.102502 2026] [authz_core:error] [pid 56331:tid 56387] [client 54.255.165.79:53026] AH01630: client denied by server configuration: /var/www/kd1150/htdocs/.env.bak
[Fri Aug 28 01:37:19.592649 2026] [authz_core:error] [pid 56331:tid 56416] [client 54.255.165.79:53026] AH01630: client denied by server configuration: /var/www/kd1150/htdocs/.env.save
[Fri Aug 28 01:37:19.839662 2026] [authz_core:error] [pid 56331:tid 56390] [client 54.255.165.79:53026] AH01630: client denied by server configuration: /var/www/kd1150/htdocs/.env.old
[Fri Aug 28 01:37:22.932509 2026] [authz_core:error] [pid 56331:tid 56387] [client 54.255.165.79:53026] AH01630: client denied by server configuration: /var/www/kd1150/htdocs/.env.swp
[Fri Aug 28 01:37:23.178193 2026] [authz_core:error] [pid 56331:tid 56392] [client 54.255.165.79:53026] AH01630: client denied by server configuration: /var/www/kd1150/htdocs/.env~
...
show less
Brute-Force
🇳🇱
homeshowdomain.nl
2026-08-27 21:59:36
(3 days ago)
Auto-ban: >3000 req/min op 2026-08-27
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-27 21:04:41
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 54.255.165.79 (ec2-54-255-165-79.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210492) triggered by 54.255.165.79 (ec2-54-255-165-79.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 17:04:35.633767 2026] [security2:error] [pid 22197:tid 22197] [client 54.255.165.79:39398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.joqlawn.com"] [uri "/.git/config"] [unique_id "apCmYwgUk9gAkQubuHx8IgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-08-27 21:00:09
(3 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-08-27 20:26:16
(3 days ago)
Excessive 404/403 errors
Brute-Force
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: