JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 15.152.154.106

15.152.154.106 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 0%: ?

ISP	Amazon Data Services Osaka
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-15-152-154-106.ap-northeast-3.compute.amazonaws.com
Domain Name	amazon.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 15.152.154.106

Whois 15.152.154.106

IP Abuse Reports for 15.152.154.106:

This IP address has been reported a total of 12 times from 7 distinct sources. 15.152.154.106 was first reported on November 19th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 steveoriol	2023-11-19 20:13:19 (2 years ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-config.php	Web App Attack
Anonymous	2023-11-19 20:08:58 (2 years ago)	15.152.154.106 - - [19/Nov/2023:21:08:58 +0100] "GET /.env HTTP/1.1" 301 162 "-" "curl/7.35.0"	Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 20:06:19 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 15.152.154.106 (ec2-15-152-154-106.ap-northeast ... show more (mod_security) mod_security (id:210492) triggered by 15.152.154.106 (ec2-15-152-154-106.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 15:06:14.538633 2023] [security2:error] [pid 17590] [client 15.152.154.106:45075] [client 15.152.154.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dreamingofatlantis.hal.dance"] [uri "/.env"] [unique_id "ZVpqtr35MBHHYLDX4-3egAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 19:48:04 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 15.152.154.106 (ec2-15-152-154-106.ap-northeast ... show more (mod_security) mod_security (id:210492) triggered by 15.152.154.106 (ec2-15-152-154-106.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 14:47:59.787134 2023] [security2:error] [pid 19533] [client 15.152.154.106:57048] [client 15.152.154.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dightoncentre.com"] [uri "/.env"] [unique_id "ZVpmb2JICpHJNbVhq1LcOAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 19:26:36 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 15.152.154.106 (ec2-15-152-154-106.ap-northeast ... show more (mod_security) mod_security (id:210492) triggered by 15.152.154.106 (ec2-15-152-154-106.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 14:26:30.015956 2023] [security2:error] [pid 18371:tid 47098080798464] [client 15.152.154.106:45040] [client 15.152.154.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.danandlisa.opticaldesignconcepts.com"] [uri "/.env"] [unique_id "ZVphZkMcbm3z_Mfr0bGbRAAAAFM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 niceshops.com	2023-11-19 19:21:44 (2 years ago)	Web Attack ([19/Nov/2023:20:21:41.799] GET /.env)	Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 18:51:02 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 15.152.154.106 (ec2-15-152-154-106.ap-northeast ... show more (mod_security) mod_security (id:210492) triggered by 15.152.154.106 (ec2-15-152-154-106.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 13:50:57.666741 2023] [security2:error] [pid 18204] [client 15.152.154.106:52886] [client 15.152.154.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dos2n.com"] [uri "/.env"] [unique_id "ZVpZEXKsctlw3wzUSWOLsgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Mr-Money	2023-11-19 18:37:05 (2 years ago)	15.152.154.106 - - [19/Nov/2023:19:37:05 +0100] "GET /.env HTTP/1.1" 404 4670 "-" "curl/7.35.0" ...	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 18:34:42 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 15.152.154.106 (ec2-15-152-154-106.ap-northeast ... show more (mod_security) mod_security (id:210492) triggered by 15.152.154.106 (ec2-15-152-154-106.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 13:34:35.944726 2023] [security2:error] [pid 3418] [client 15.152.154.106:52430] [client 15.152.154.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.deannesamuelskids.com"] [uri "/.env"] [unique_id "ZVpVO4cpUwO9U7HmlOGDdwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Bedios GmbH	2023-11-19 18:08:13 (2 years ago)	Login credentials theft attempt	Hacking
Anonymous	2023-11-19 18:04:28 (2 years ago)	Malicious activity detected Attempting to access restricted files	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 18:01:07 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 15.152.154.106 (ec2-15-152-154-106.ap-northeast ... show more (mod_security) mod_security (id:210492) triggered by 15.152.154.106 (ec2-15-152-154-106.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 13:01:01.544992 2023] [security2:error] [pid 26133] [client 15.152.154.106:56906] [client 15.152.154.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dossat.cl"] [uri "/.env"] [unique_id "ZVpNXcjBTOlMBUGUgNGtTQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.173

🇳🇱 193.47.62.69

🇦🇷 190.55.17.66

🇩🇪 167.94.146.57

🇨🇳 118.212.121.128

🇳🇱 45.148.10.141

🇪🇸 185.118.190.168

🇺🇸 172.190.24.225

🇺🇸 162.216.150.148

🇧🇬 158.173.89.129

🇧🇷 152.32.199.115

🇺🇸 143.198.162.57

🇮🇳 118.95.33.69

🇨🇳 117.39.45.80

🇹🇼 114.42.242.57

🇫🇷 85.217.140.53

🇺🇸 64.62.156.18

🇺🇸 20.80.93.123

🇭🇰 199.45.154.73

🇩🇪 164.90.234.144