JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 15.164.48.253

15.164.48.253 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 0%: ?

ISP	AWS Asia Pacific (Seoul) Region
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-15-164-48-253.ap-northeast-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇰🇷 Korea (the Republic of)
City	Incheon, Incheon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 15.164.48.253

Whois 15.164.48.253

IP Abuse Reports for 15.164.48.253:

This IP address has been reported a total of 34 times from 8 distinct sources. 15.164.48.253 was first reported on April 26th 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 nomzamo	2025-01-21 04:10:02 (1 year ago)	Fail2Ban reported: nginx-noscript	Brute-Force Bad Web Bot SSH
🇫🇷 John	2023-12-19 08:48:45 (2 years ago)	attempting to access /.env	Hacking Bad Web Bot
🇫🇷 geot	2023-11-20 15:21:08 (2 years ago)	GET /.env HTTP/1.1 GET /wp-config.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 23:00:26 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 15.164.48.253 (ec2-15-164-48-253.ap-northeast-2 ... show more (mod_security) mod_security (id:210492) triggered by 15.164.48.253 (ec2-15-164-48-253.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 18:00:19.782807 2023] [security2:error] [pid 23520] [client 15.164.48.253:44642] [client 15.164.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "normsrotorservice.com.rotorservice.com"] [uri "/.env"] [unique_id "ZVqTg8DfuCcvJAkPycKBfAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 21:43:02 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 15.164.48.253 (ec2-15-164-48-253.ap-northeast-2 ... show more (mod_security) mod_security (id:210492) triggered by 15.164.48.253 (ec2-15-164-48-253.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 16:43:00.327471 2023] [security2:error] [pid 26536] [client 15.164.48.253:43643] [client 15.164.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northfultonneurology.com"] [uri "/.env"] [unique_id "ZVqBZI6mlOigQff1-8zxIQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 21:11:57 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 15.164.48.253 (ec2-15-164-48-253.ap-northeast-2 ... show more (mod_security) mod_security (id:210492) triggered by 15.164.48.253 (ec2-15-164-48-253.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 16:11:54.093242 2023] [security2:error] [pid 9982] [client 15.164.48.253:58126] [client 15.164.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nolaanime.com"] [uri "/.env"] [unique_id "ZVp6Gk0vvxCxES7zq1IU2gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 20:39:37 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 15.164.48.253 (ec2-15-164-48-253.ap-northeast-2 ... show more (mod_security) mod_security (id:210492) triggered by 15.164.48.253 (ec2-15-164-48-253.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 15:39:34.630147 2023] [security2:error] [pid 17542] [client 15.164.48.253:53806] [client 15.164.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nrvoutdoors.com"] [uri "/.env"] [unique_id "ZVpyhrxXqhxuxz6Ia-APswAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 20:08:53 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 15.164.48.253 (ec2-15-164-48-253.ap-northeast-2 ... show more (mod_security) mod_security (id:210492) triggered by 15.164.48.253 (ec2-15-164-48-253.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 15:08:48.075596 2023] [security2:error] [pid 4511] [client 15.164.48.253:58955] [client 15.164.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "notariapenco.tecnoconce.com"] [uri "/.env"] [unique_id "ZVprUMTJfBLMBuBN8Y-4gwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇸 Smel	2023-11-19 20:07:02 (2 years ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 19:06:13 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 15.164.48.253 (ec2-15-164-48-253.ap-northeast-2 ... show more (mod_security) mod_security (id:210492) triggered by 15.164.48.253 (ec2-15-164-48-253.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 14:06:09.214700 2023] [security2:error] [pid 7408] [client 15.164.48.253:47310] [client 15.164.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "njskidrow.com"] [uri "/.env"] [unique_id "ZVpcoeRssx95VTjV5mzf-QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 18:39:37 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 15.164.48.253 (ec2-15-164-48-253.ap-northeast-2 ... show more (mod_security) mod_security (id:210492) triggered by 15.164.48.253 (ec2-15-164-48-253.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 13:39:31.665478 2023] [security2:error] [pid 496] [client 15.164.48.253:56251] [client 15.164.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nothotmail.org"] [uri "/.env"] [unique_id "ZVpWY1dWLu_ZycImaQRdmgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 Emeraude Queen	2023-05-24 11:11:34 (3 years ago)	ping attacking 16 times between May 23 07:12:18 (JPN) to May 23 22:46:06 (JPN)	Ping of Death
🇯🇵 Emeraude Queen	2023-05-23 11:12:27 (3 years ago)	ping attacking 14 times between May 22 11:15:26 (JPN) to May 23 03:09:05 (JPN)	Ping of Death
🇯🇵 Emeraude Queen	2023-05-21 11:13:21 (3 years ago)	ping attacking 25 times between May 20 06:36:06 (JPN) to May 21 01:48:21 (JPN)	Ping of Death
🇯🇵 Emeraude Queen	2023-05-20 11:08:32 (3 years ago)	ping attacking 17 times between May 19 12:37:05 (JPN) to May 20 02:06:10 (JPN)	Ping of Death

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 190.60.37.146

🇬🇧 185.192.71.61

🇨🇳 175.30.48.116

🇮🇹 172.213.208.20

🇨🇳 106.75.16.140

🇦🇺 103.214.20.100

🇬🇧 35.203.211.168

🇺🇸 24.119.52.56

🇹🇳 197.1.42.145

🇳🇱 192.142.28.77

🇺🇸 168.220.206.101

🇨🇳 106.12.34.116

🇺🇸 91.230.168.169

🇫🇷 85.217.140.18

🇯🇵 43.130.249.176

🇺🇸 43.110.37.217

🇮🇩 36.93.249.106

🇫🇮 2a0b:4143:0:235::2

🇺🇸 192.178.119.146

🇺🇸 172.234.25.187