JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 56.155.74.17

56.155.74.17 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 65%: ?

65%

ISP	Amazon Data Services Osaka
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-56-155-74-17.ap-northeast-3.compute.amazonaws.com
Domain Name	amazon.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 56.155.74.17

Whois 56.155.74.17

IP Abuse Reports for 56.155.74.17:

This IP address has been reported a total of 14 times from 13 distinct sources. 56.155.74.17 was first reported on July 14th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-16 14:56:32 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 56.155.74.17 (ec2-56-155-74-17.ap-northeast-3.c ... show more (mod_security) mod_security (id:210492) triggered by 56.155.74.17 (ec2-56-155-74-17.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 10:56:25.531979 2026] [security2:error] [pid 3005231:tid 3005231] [client 56.155.74.17:37414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mtl.microkerneltechnologies.com"] [uri "/.git/config"] [unique_id "aljxGd_woJml_M05yZQ49gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-16 13:20:08 (5 days ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 13:11:55 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 56.155.74.17 (ec2-56-155-74-17.ap-northeast-3.c ... show more (mod_security) mod_security (id:210492) triggered by 56.155.74.17 (ec2-56-155-74-17.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 09:11:50.570006 2026] [security2:error] [pid 5474:tid 5474] [client 56.155.74.17:47380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mthompson-business-services.com"] [uri "/.git/config"] [unique_id "aljYlrKrLbEsQMvg1T_GVwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-07-16 10:36:57 (6 days ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 wteiken	2026-07-16 07:31:35 (6 days ago)	mta-sts.teiken.org:443 56.155.74.17:53250 - - [16/Jul/2026:03:31:34 -0400] "GET /.git/config HTTP/1. ... show more mta-sts.teiken.org:443 56.155.74.17:53250 - - [16/Jul/2026:03:31:34 -0400] "GET /.git/config HTTP/1.1" 404 630 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mta-sts.teiken.org:443 56.155.74.17:53250 - - [16/Jul/2026:03:31:34 -0400] "GET /.env HTTP/1.1" 404 630 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mta-sts.teiken.org:443 56.155.74.17:53250 - - [16/Jul/2026:03:31:34 -0400] "GET /.env.local HTTP/1.1" 404 630 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mta-sts.teiken.org:443 56.155.74.17:53250 - - [16/Jul/2026:03:31:34 -0400] "GET /.env.production HTTP/1.1" 404 630 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mta-sts.teiken.org:443 56.155.74.17:53250 - - [16/Jul/2026:03:31 ... show less	Web App Attack
🇺🇸 kosada.com	2026-07-16 06:20:16 (6 days ago)	Web vulnerability probing: /.env.staging	Web App Attack
🇩🇪 Starburst SysOp Team	2026-07-16 04:38:16 (6 days ago)	Malware host detected by rbl.malware.expert. RBL lookup of 17.74.155.56.rbl.malware.expert succeeded ... show more Malware host detected by rbl.malware.expert. RBL lookup of 17.74.155.56.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-nue6-2) show less	Hacking
🇩🇪 NihiliousMonk	2026-07-16 02:36:23 (6 days ago)	Fail2Ban report from jail npm-scanners	Bad Web Bot Web App Attack
🇩🇪 Blexyel	2026-07-16 00:43:10 (6 days ago)	56.155.74.17 - - [16/Jul/2026:02:43:09 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ( ... show more 56.155.74.17 - - [16/Jul/2026:02:43:09 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇦🇺 Klaverstyn	2026-07-15 23:27:06 (6 days ago)	Repeated 403 Forbidden responses	Web App Attack
🇨🇭 dalslab ltd	2026-07-15 01:00:16 (1 week ago)	[15/Jul/2026:03:00:14 +0200] - 404 404 - POST https vault.dalslab.com "/" [Client 56.155.74.17] [Len ... show more [15/Jul/2026:03:00:14 +0200] - 404 404 - POST https vault.dalslab.com "/" [Client 56.155.74.17] [Length 844] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [15/Jul/2026:03:00:14 +0200] - 404 404 - POST https vault.dalslab.com "/" [Client 56.155.74.17] [Length 844] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [15/Jul/2026:03:00:15 +0200] - 404 404 - POST https vault.dalslab.com "/" [Client 56.155.74.17] [Length 844] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [15/Jul/2026:03:00:15 +0200] - 422 422 - GET https vault.dalslab.com "/.git/config" [Client 56.155.74.17] [Length 496] [Gzip -] [Sent-to 10.1.1.248] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Appl ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-14 23:06:05 (1 week ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan
🇳🇱 homeshowdomain.nl	2026-07-14 22:00:12 (1 week ago)	Auto-ban: >3000 req/min op 2026-07-14	Web App Attack SSH Hacking
🇫🇷 Octopuce	2026-07-14 17:42:01 (1 week ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.231.195.216

🇧🇷 186.226.32.211

🇻🇳 171.231.193.177

🇨🇦 104.234.135.117

🇮🇹 95.210.105.202

🇺🇿 89.126.222.163

🇨🇦 85.217.149.26

🇳🇱 45.148.10.239

🇸🇬 43.134.29.106

🇨🇳 27.156.98.194

🇮🇳 20.193.152.133

🇰🇷 222.239.251.12

🇺🇸 209.87.169.229

🇲🇳 180.149.125.216

🇵🇱 176.53.159.198

🇨🇳 115.190.166.75

🇹🇷 94.154.43.230

🇳🇱 81.19.216.117

🇺🇸 216.180.246.50

🇯🇵 203.25.124.76