AbuseIPDB » 54.165.172.115
54.165.172.115
This IP was reported 6 times. Confidence of
Abuse
is 41% : ?
ISP
Amazon Technologies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-54-165-172-115.compute-1.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸
United States of America
City
Ashburn, Virginia
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 54.165.172.115 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
54.165.172.115 was first reported on
July 29th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇸🇬
ipidentify
2026-07-29 10:17:11
(1 day ago)
2026-07-29T10:18:23Z GET /test/.env
2026-07-29T10:18:24Z GET /qa/.env
2026-07-29T10:18:24Z GET /prev ...
show more
2026-07-29T10:18:23Z GET /test/.env
2026-07-29T10:18:24Z GET /qa/.env
2026-07-29T10:18:24Z GET /preview/.env
2026-07-29T10:18:24Z GET /beta/.env
2026-07-29T10:18:25Z GET /uat/.env
2026-07-29T10:18:25Z GET /stage/.env
2026-07-29T10:18:25Z GET /development/.env
2026-07-29T10:18:26Z GET /production/.env
2026-07-29T10:18:26Z GET /config/app/.env
2026-07-29T10:18:41Z GET /wp-admin/phpinfo.php
show less
Web App Attack
🇫🇮
Kimmo Rieskaniemi
2026-07-29 06:31:56
(2 days ago)
CrowdSec triggered crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇬🇧
Axel
2026-07-29 05:38:06
(2 days ago)
Blocked by Fail2Ban. Flagged by jail plesk-modsecurity | UK-01
Exploited Host
2026-07-29 05:28:10
(2 days ago)
54.165.172.115 - - [29/Jul/2026:07:28:08 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintos ...
show more
54.165.172.115 - - [29/Jul/2026:07:28:08 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
54.165.172.115 - - [29/Jul/2026:07:28:08 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
54.165.172.115 - - [29/Jul/2026:07:28:08 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
54.165.172.115 - - [29/Jul/2026:07:28:08 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
54.165.172.115 - - [29/Jul/2026:07:28:09 +0200] "GET /.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3
...
show less
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2026-07-29 05:18:13
(2 days ago)
trolling for resource vulnerabilities
Web App Attack
🇬🇧
Smish
2026-07-29 05:14:58
(2 days ago)
HONEYPOT HIT --> Fail2ban time=1785302097 log=2026-07-29T06:14:57+01:00 ip=54.165.172.115 host=ipam. ...
show more
HONEYPOT HIT --> Fail2ban time=1785302097 log=2026-07-29T06:14:57+01:00 ip=54.165.172.115 host=ipam.as210667.net method=GET uri="/.git/config" status=404 ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ref="-" rid=b9cbafc3441370950be3412943a84b9f
show less
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: