JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.165.169.15

54.165.169.15 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 99%: ?

99%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-165-169-15.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.165.169.15

Whois 54.165.169.15

IP Abuse Reports for 54.165.169.15:

This IP address has been reported a total of 155 times from 36 distinct sources. 54.165.169.15 was first reported on July 9th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nodepile	2026-06-20 14:19:39 (5 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/ddebc89b6d27929fece7153308b6a3fc/1/_/1_2400_17.jpg ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Lanai)') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-06-18 01:18:11 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/ddebc89b6d27929fece7153308b6a3fc/1/_/1_2426_139.jpg ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Lanai)') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-06-12 10:48:53 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/ddebc89b6d27929fece7153308b6a3fc/i/k/ikone90335ism.jpg ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Lanai)') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-06-10 00:58:47 (2 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/ddebc89b6d27929fece7153308b6a3fc/1/_/1_276_1.jpg ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Lanai)') show less	Web App Attack Exploited Host
🇮🇩 hermawan	2026-06-09 14:48:25 (2 weeks ago)	[Tue Jun 09 21:48:20.603753 2026] [security2:error] [pid 68868:tid 139736014382784] [client 54.165.1 ... show more [Tue Jun 09 21:48:20.603753 2026] [security2:error] [pid 68868:tid 139736014382784] [client 54.165.169.15:4940] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.165.169.15 request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-sifat-hujan-bulanan/prakiraan-sifat-hujan-untuk-6-bulan-ke-depan/555561207-prakiraan-bulanan-sifat-hujan-di-kabupaten-trenggalek-untuk-6-bulan-ke-depan-2 HTTP/1.1 Request URI RAW = /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-sifat-hujan-bulanan/prakiraan-sifat-hujan-untuk..."] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-sifat- ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-09 08:38:10 (2 weeks ago)	[Tue Jun 09 15:38:02.453699 2026] [security2:error] [pid 368907:tid 139737675318976] [client 54.165. ... show more [Tue Jun 09 15:38:02.453699 2026] [security2:error] [pid 368907:tid 139737675318976] [client 54.165.169.15:33758] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.165.169.15 request_line = GET /robots.txt HTTP/1.1 Request URI RAW = /robots.txt Request Basename = robots.txt"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aifQ6plqdSHG5arRe_Z0qAAAAVA"] [staklim-malang.info] [staklim-malang.info] top=[368957] [n0aJCw495p0] [aifQ6plqdSHG5arRe_Z0qAAAAVA] keep_alive=[0] [2026-06-09 15:38:02.453706] [R:aifQ6plqdSHG5arRe_Z0qAAAAVA] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Ge ... show less	Email Spam Hacking
🇧🇪 cmbplf	2026-06-09 08:09:33 (2 weeks ago)	6.774 requests from abuseipdb.com blacklisted IP (1yr10mos3w)	Brute-Force Bad Web Bot
🇮🇩 hermawan	2026-06-09 06:14:05 (2 weeks ago)	[Tue Jun 09 13:14:05.406842 2026] [security2:error] [pid 275133:tid 139737876645568] [client 54.165. ... show more [Tue Jun 09 13:14:05.406842 2026] [security2:error] [pid 275133:tid 139737876645568] [client 54.165.169.15:31312] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.165.169.15 request_line = GET /index.php/prakiraan-bulanan/4094-prakiraan-curah-hujan-bulanan/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-bulanan-curah-hujan-di-propinsi-jawa-timur-tahun-2021/555559246-prakiraan-bulanan-curah-hujan-bulan-februari-tahun-2022-update-dari-analisis-bulan-desember-tahun-2021-di-provinsi-jawa-timur HTTP/1.1 Request URI ..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/4094-prakiraan-curah-huja ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-09 01:01:48 (2 weeks ago)	[Tue Jun 09 08:01:47.183559 2026] [security2:error] [pid 3182:tid 140245706204864] [client 54.165.16 ... show more [Tue Jun 09 08:01:47.183559 2026] [security2:error] [pid 3182:tid 140245706204864] [client 54.165.169.15:35237] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.165.169.15 request_line = GET /index.php/profil/meteorologi/list-all-categories/509-meteorologi/analisis-meteorologi/intensitas-curah-hujan-harian-di-wilayah-indonesia HTTP/1.1 Request URI RAW = /index.php/profil/meteorologi/list-all-categories/509-meteorologi/analisis-meteorologi/intensitas-curah-hujan-harian-di-wilayah-indonesia Request Basename = intensitas-curah..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/509-me ... show less	Email Spam Hacking
🇫🇷 Sklurk	2026-06-08 17:32:00 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇷 bigorre.org	2026-06-08 14:39:12 (2 weeks ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇮🇩 hermawan	2026-06-08 06:58:29 (2 weeks ago)	[Mon Jun 08 13:58:28.650689 2026] [security2:error] [pid 800117:tid 140662000187072] [client 54.165. ... show more [Mon Jun 08 13:58:28.650689 2026] [security2:error] [pid 800117:tid 140662000187072] [client 54.165.169.15:48855] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.165.169.15 request_line = GET /index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-artikel-perubahan-iklim HTTP/1.1 Request URI RAW = /index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-artikel-perubahan-iklim Request Basename = 126-artikel-perubahan-iklim"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-artikel-perubahan-iklim"] [unique_id "aiZoFBB_xcT ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-08 06:32:07 (2 weeks ago)	[Mon Jun 08 13:31:59.758870 2026] [security2:error] [pid 777520:tid 140662054733504] [client 54.165. ... show more [Mon Jun 08 13:31:59.758870 2026] [security2:error] [pid 777520:tid 140662054733504] [client 54.165.169.15:15565] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.165.169.15 request_line = GET /robots.txt HTTP/1.1 Request URI RAW = /robots.txt Request Basename = robots.txt"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aiZh3xCsu176UIqAWIFOTAAAAgA"] [staklim-malang.info] [staklim-malang.info] top=[777548] [t5vsKnhy25I] [aiZh3xCsu176UIqAWIFOTAAAAgA] keep_alive=[0] [2026-06-08 13:31:59.758875] [R:aiZh3xCsu176UIqAWIFOTAAAAgA] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Ge ... show less	Email Spam Hacking
🇺🇸 nodepile	2026-06-08 00:20:11 (2 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/ddebc89b6d27929fece7153308b6a3fc/i/m/img_7225_4.jpeg ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Lanai)') show less	Web App Attack Exploited Host
🇩🇪 LRob.fr	2026-06-08 00:00:12 (2 weeks ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 202.164.38.254

🇺🇸 147.185.132.127

🇺🇸 71.41.130.50

🇺🇸 35.252.64.193

🇲🇾 219.93.156.9

🇩🇪 194.187.176.90

🇩🇪 103.14.32.192

🇳🇱 77.83.39.94

🇵🇱 34.116.191.1

🇨🇳 182.43.76.81

🇮🇩 182.10.100.185

🇷🇺 178.176.229.202

🇫🇷 91.196.152.215

🇵🇱 134.112.56.47

🇩🇪 92.208.69.252

🇺🇸 20.163.39.86

🇳🇱 195.178.110.199

🇳🇱 45.148.10.141

🇺🇸 35.188.47.215

🇺🇸 23.191.200.73