JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 16.54.230.15

16.54.230.15 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 69%: ?

69%

ISP	Amazon Data Services Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-16-54-230-15.ca-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 16.54.230.15

Whois 16.54.230.15

IP Abuse Reports for 16.54.230.15:

This IP address has been reported a total of 14 times from 12 distinct sources. 16.54.230.15 was first reported on August 21st 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 inlink.ltd	2026-08-23 22:43:53 (4 days ago)	dot file probe	Web App Attack
🇳🇱 Site.eu	2026-08-23 18:01:42 (4 days ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-08-23 13:36:12 (4 days ago)	Banned by Fail2Ban on server	Web App Attack
🇧🇪 cmbplf	2026-08-23 10:40:48 (4 days ago)	3.300 requests with url.path *.env	Brute-Force Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-08-23 09:24:44 (4 days ago)	Scanning for web/db/file exploits on www.eemoptiek.nl	SQL Injection Bad Web Bot Web App Attack
Anonymous	2026-08-23 09:05:03 (4 days ago)	Bot / scanning and/or hacking attempts: GET /bootstrap/.env HTTP/1.1, POST / HTTP/1.1, GET /src/.env ... show more Bot / scanning and/or hacking attempts: GET /bootstrap/.env HTTP/1.1, POST / HTTP/1.1, GET /src/.env HTTP/1.1, GET /current/.env HTTP/1.1, GET /backend/.env HTTP/1.1, GET /.env.development HTTP/1.1, GET /release/.env HTTP/1.1, GET /var/www/html/.env HTTP/1.1, GET /config/.env HTTP/1.1, GET /core/.env HTTP/1.1, GET /site/.env HTTP/1.1, GET /var/www/.env HTTP/1.1, GET /database/.env HTTP/1.1, GET /api/.env HTTP/1.1, GET /public/.env HTTP/1.1, GET /storage/.env HTTP/1.1, GET /server/.env HTTP/1.1, GET /application/.env HTTP/1.1, GET /.env.yaml HTTP/1.1, GET /frontend/.env HTTP/1.1, GET /admin/.env HTTP/1.1, GET /releases/.env HTTP/1.1, GET /.env.txt HTTP/1.1, GET /core/app/.env HTTP/1.1, GET /private/.env HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 filstal.org	2026-08-23 00:06:59 (5 days ago)	Web exploit or injection attempt blocked by ModSecurity WAF.	SQL Injection Web App Attack
🇫🇷 dynamix	2026-08-22 22:06:35 (5 days ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-08-22 22:05:33 (5 days ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-22 22:01:39 (5 days ago)	Auto-ban: >3000 req/min op 2026-08-22	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-08-22 12:26:36 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 16.54.230.15 (ec2-16-54-230-15.ca-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 16.54.230.15 (ec2-16-54-230-15.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 08:26:32.151839 2026] [security2:error] [pid 15562:tid 15562] [client 16.54.230.15:46222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.california6.com.glassicannex.org"] [uri "/.git/config"] [unique_id "aomVeE9G0GapzhFY6VvPLQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 10:01:34 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 16.54.230.15 (ec2-16-54-230-15.ca-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 16.54.230.15 (ec2-16-54-230-15.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 06:01:26.932138 2026] [security2:error] [pid 22218:tid 22218] [client 16.54.230.15:57162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.calendar.freedomfactoryteam.com"] [uri "/.git/config"] [unique_id "aolzdh4jgWE_xaVGFjUbjAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-21 15:40:43 (6 days ago)	Excessive 404/403 errors	Brute-Force
🇮🇹 VHosting	2026-08-21 13:05:04 (6 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.165

🇯🇵 34.85.35.66

🇩🇪 196.251.121.132

🇳🇱 185.190.25.168

🇧🇷 170.81.177.132

🇺🇸 162.216.149.82

🇮🇳 152.32.159.97

🇧🇷 131.100.242.102

🇺🇸 100.33.44.50

🇧🇬 91.92.109.126

🇺🇸 69.164.203.138

🇬🇧 5.252.78.71

🇬🇧 217.146.80.99

🇨🇴 200.119.59.90

🇬🇧 194.50.235.156

🇦🇷 190.183.254.202

🇳🇱 185.242.226.9

🇨🇳 182.138.158.217

🇰🇿 92.47.113.37

🇺🇸 64.62.156.83