JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.215.58.150

54.215.58.150 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-215-58-150.us-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.215.58.150

Whois 54.215.58.150

IP Abuse Reports for 54.215.58.150:

This IP address has been reported a total of 37 times from 23 distinct sources. 54.215.58.150 was first reported on October 12th 2026, and the most recent report was 19 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 nazemes	2026-10-16 17:10:38 (19 minutes ago)	Honeypot path probe: /.env on tasarla.ai	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 05:55:07 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.215.58.150 (ec2-54-215-58-150.us-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.215.58.150 (ec2-54-215-58-150.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:55:00.036436 2026] [security2:error] [pid 9352:tid 9352] [client 54.215.58.150:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kryptonome.com"] [uri "/.env"] [unique_id "atG8NDP67HLXoAyUX9O_nAAAAAc"], referer: https://[email protected]/.env show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Omega Threat-ID	2026-10-16 01:31:08 (15 hours ago)	Omega Point Threat ID honeypot sensor observed: abuse-reported	Port Scan
🇦🇹 René Hickersberger	2026-10-15 23:25:27 (18 hours ago)	malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; ... show more malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Web App Attack
🇩🇪 big-cloud.nl	2026-10-15 22:30:38 (18 hours ago)	Try to access /.env	Web App Attack
🇵🇱 Budyn	2026-10-15 18:08:38 (23 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.goblinpot.store \| URI: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇨🇦 Anytech	2026-10-15 11:52:04 (1 day ago)	Blocked by Conn-Monitor: env-probing	Web App Attack Hacking
🇳🇱 Alt255	2026-10-14 21:43:03 (1 day ago)	[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 54.215.58.150 - - [14/Oct/2026:23:42:48 +0200] "GET /.env HTTP/2.0" 404 1338 "https://[email protected]/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
🇬🇧 neo101	2026-10-14 17:27:18 (2 days ago)	Secret Hunting & Credential Harvesting: Automated scanner (Nuclei (Secret Hunter)) probed decoy secr ... show more Secret Hunting & Credential Harvesting: Automated scanner (Nuclei (Secret Hunter)) probed decoy secrets path '/.env'. Served AI System Override decoy payload as counter-measure. show less	Hacking Web App Attack
🇫🇷 Baking333	2026-10-14 15:28:27 (2 days ago)	[redacted] 54.215.58.150 - - [14/Oct/2026:16:28:25 +0100] "GET /.env HTTP/1.1" 302 6743 0/41288 "htt ... show more [redacted] 54.215.58.150 - - [14/Oct/2026:16:28:25 +0100] "GET /.env HTTP/1.1" 302 6743 0/41288 "https://[redacted]+login@[redacted]/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 443 [redacted] 54.215.58.150 - - [14/Oct/2026:16:28:26 +0100] "GET / HTTP/1.1" 200 12906 0/73150 "https://[redacted]+login@[redacted]/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 443 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 11:59:20 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 54.215.58.150 (ec2-54-215-58-150.us-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 54.215.58.150 (ec2-54-215-58-150.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 07:59:15.654108 2026] [security2:error] [pid 28621:tid 28621] [client 54.215.58.150:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barryherbach.com"] [uri "/.env"] [unique_id "as9ukyKZSmApvkR3RdykzwAAAEw"], referer: https://[email protected]/.env show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-10-14 10:23:37 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 Klaverstyn	2026-10-14 09:37:57 (2 days ago)	Excessive HTTP request rate	Web App Attack
🇵🇱 srebrakowski.com	2026-10-14 00:26:18 (2 days ago)	crowdsec/waf-detected-exploits	Brute-Force
🇦🇺 Klaverstyn	2026-10-13 23:41:48 (2 days ago)	Persistent attacker, repeat offender	Hacking

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 109.160.32.35

🇧🇷 190.115.84.25

🇳🇱 151.245.151.115

🇧🇩 119.148.40.136

🇺🇸 54.193.82.66

🇺🇸 216.244.66.196

🇰🇷 112.220.250.20

🇳🇱 109.160.32.134

🇳🇱 77.91.71.11

🇱🇹 62.60.130.253

🇧🇷 45.165.21.173

🇳🇱 45.148.10.240

🇮🇳 45.64.192.58

🇺🇸 8.234.28.141

🇨🇳 119.96.158.238

🇨🇳 106.59.139.167

🇮🇩 103.155.46.254

🇺🇸 72.167.53.78

🇸🇬 34.124.138.175

🇺🇸 20.46.255.57