JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.255.192.86

54.255.192.86 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 45%: ?

45%

ISP	Amazon Data Services Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-255-192-86.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.255.192.86

Whois 54.255.192.86

IP Abuse Reports for 54.255.192.86:

This IP address has been reported a total of 8 times from 7 distinct sources. 54.255.192.86 was first reported on August 21st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-08-23 20:11:27 (1 day ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.env (Match: /.env) show less	Hacking Brute-Force Web App Attack
🇳🇱 middelkoopcc	2026-08-22 04:12:00 (3 days ago)	2026-08-22 06:09:05 GET /.git/config [301] && 2026-08-22 06:09:07 GET /.env [301] && 2026-08-22 06:0 ... show more 2026-08-22 06:09:05 GET /.git/config [301] && 2026-08-22 06:09:07 GET /.env [301] && 2026-08-22 06:09:26 GET /app/.env [301] && 163 more within 20 minutes show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 04:05:46 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 54.255.192.86 (ec2-54-255-192-86.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 54.255.192.86 (ec2-54-255-192-86.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 00:05:42.353370 2026] [security2:error] [pid 31574:tid 31574] [client 54.255.192.86:59616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "modeltdr.com"] [uri "/.git/config"] [unique_id "aokgFugMof9ij347SAD_sAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 02:02:54 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 54.255.192.86 (ec2-54-255-192-86.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 54.255.192.86 (ec2-54-255-192-86.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 22:02:50.479304 2026] [security2:error] [pid 1480:tid 1480] [client 54.255.192.86:47762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "modele18.com"] [uri "/.git/config"] [unique_id "aokDSolXKngZPV6J1D4ffgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-08-21 23:50:56 (3 days ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇮🇹 CoreTech srl	2026-08-21 23:33:56 (3 days ago)	cloudlinux2 fail2ban: 2026-08-22 01:29:27,775 fail2ban.filter [1480]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-22 01:29:27,775 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 182.91.103.70 - 2026-08-22 01:29:27cloudlinux2 fail2ban: 2026-08-22 01:30:36,119 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 54.255.192.86 - 2026-08-22 01:30:36cloudlinux2 fail2ban: 2026-08-22 01:30:39,322 fail2ban.actions [1480]: NOTICE [plesk-modsecurity] Ban 54.255.192.86cloudlinux2 fail2ban: 2026-08-22 01:30:38,838 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 54.255.192.86 - 2026-08-22 01:30:38cloudlinux2 fail2ban: 2026-08-22 01:30:39,108 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 54.255.192.86 - 2026-08-22 01:30:39cloudlinux2 fail2ban: 2026-08-22 01:30:38,857 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 54.255.192.86 - 2026-08-22 01:30:38cloudlinux2 fail2ban: 2026-08-22 01:30:38,847 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 54.255.192.86 - 2026-08-22 01:30:38cloudlinux2 fail2ba show less	Brute-Force
🇨🇭 zynex	2026-08-21 16:42:00 (3 days ago)	URL Probing: /server/.env	Web App Attack
Anonymous	2026-08-21 12:16:02 (3 days ago)	(caddyscan) Scanner path probe from 54.255.192.86 (SG/Singapore/ec2-54-255-192-86.ap-southeast-1.com ... show more (caddyscan) Scanner path probe from 54.255.192.86 (SG/Singapore/ec2-54-255-192-86.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 54.255.192.86 - - [21/Aug/2026:12:15:55 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 54.255.192.86 - - [21/Aug/2026:12:15:56 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 54.255.192.86 - - [21/Aug/2026:12:15:56 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 54.255.192.86 - - [21/Aug/2026:12:15:56 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 54.255.192.86 - - [21/Aug/2026:12:15:57 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.28

🇺🇸 195.184.76.170

🇲🇽 189.219.122.236

🇨🇴 181.129.41.162

🇸🇪 171.25.158.47

🇩🇪 167.94.146.36

🇭🇰 165.154.23.187

🇺🇸 154.16.112.12

🇵🇰 119.152.192.60

🇺🇸 104.23.203.130

🇦🇺 103.208.219.38

🇻🇳 103.142.26.97

🇫🇷 85.217.140.37

🇺🇸 65.49.20.119

🇫🇷 64.31.63.100

🇫🇷 51.38.195.48

🇺🇸 20.169.48.140

🇵🇰 14.1.105.116

🇵🇱 2001:41d0:602:2e48::1

🇳🇱 195.178.110.105