JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.216.169.158

54.216.169.158 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-216-169-158.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.216.169.158

Whois 54.216.169.158

IP Abuse Reports for 54.216.169.158:

This IP address has been reported a total of 32 times from 30 distinct sources. 54.216.169.158 was first reported on August 27th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-29 00:00:42 (2 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-08-28 14:16:30 (3 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IE, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IE, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
Anonymous	2026-08-28 04:35:36 (3 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇮🇩 securejdprop	2026-08-27 22:38:02 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing.	Hacking Web App Attack
🇩🇪 webko.si	2026-08-27 21:30:21 (3 days ago)	DKK: Bruteforce web app access, URI detail: '/.git/config'.	Web App Attack
🇫🇷 Baking333	2026-08-27 21:02:16 (3 days ago)	[redacted] 54.216.169.158 - - [27/Aug/2026:22:02:14 +0100] "GET /.openclaw/.env HTTP/1.1" 302 1519 0 ... show more [redacted] 54.216.169.158 - - [27/Aug/2026:22:02:14 +0100] "GET /.openclaw/.env HTTP/1.1" 302 1519 0/130799 "-" "Mozilla/5.0 (compatible; Bytespider; spider-feedback@[redacted])" [redacted] 54.216.169.158 - - [27/Aug/2026:22:02:14 +0100] "GET / HTTP/1.1" 200 10688 0/110016 "https://[redacted]/.openclaw/.env" "Mozilla/5.0 (compatible; Bytespider; spider-feedback@[redacted])" show less	Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-08-27 20:02:16 (3 days ago)	Site scraper	Web App Attack
🇩🇪 LRob	2026-08-27 18:06:38 (4 days ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /rclone.conf (+3 more) \| 2026-08-27 18:06 UTC show less	Hacking Web App Attack
🇬🇧 Swiptly	2026-08-27 17:29:12 (4 days ago)	Excessive 403/404/405 PHP/CMS errors from scanning or broken bots ...	Web App Attack
🇫🇷 Baking333	2026-08-27 16:06:44 (4 days ago)	[redacted] 54.216.169.158 - - [27/Aug/2026:17:06:42 +0100] "GET /.[redacted] HTTP/1.1" 302 6742 0/83 ... show more [redacted] 54.216.169.158 - - [27/Aug/2026:17:06:42 +0100] "GET /.[redacted] HTTP/1.1" 302 6742 0/83491 "-" "Mozilla/5.0 (compatible; Bytespider; spider-feedback@[redacted])" [redacted] 54.216.169.158 - - [27/Aug/2026:17:06:42 +0100] "GET /.[redacted] HTTP/1.1" 302 6742 0/103729 "-" "Mozilla/5.0 (compatible; Bytespider; spider-feedback@[redacted])" show less	Bad Web Bot Web App Attack
Anonymous	2026-08-27 15:37:02 (4 days ago)	Bot / scanning and/or hacking attempts: GET /.gitlab-ci.yml HTTP/2.0, GET /.gitconfig HTTP/2.0, GET ... show more Bot / scanning and/or hacking attempts: GET /.gitlab-ci.yml HTTP/2.0, GET /.gitconfig HTTP/2.0, GET /.env.old HTTP/2.0, GET /.git/HEAD HTTP/2.0, GET / HTTP/2.0, GET /.env.local HTTP/2.0, [0/0] init show less	Hacking Web App Attack
🇩🇪 Vegascosmetics	2026-08-27 13:24:49 (4 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (50, Abuse: 100) show less	Hacking Exploited Host Web App Attack
Anonymous	2026-08-27 13:14:52 (4 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IE, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IE, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 12:24:00 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 54.216.169.158 (ec2-54-216-169-158.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 54.216.169.158 (ec2-54-216-169-158.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 08:23:54.035970 2026] [security2:error] [pid 4141:tid 4141] [client 54.216.169.158:58418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ptr.dutchlake.com"] [uri "/.git/config"] [unique_id "apAsWhb0E_5FjipAW5gsgQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 arnisolutions	2026-08-27 11:42:05 (4 days ago)	Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production s ... show more Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 1 day(s) between 2026-08-27 and 2026-08-27 (UTC). Sample request: GET /wp-admin/ HTTP/2.0 show less	Web App Attack Hacking

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:239:260:a300::1

🇦🇷 181.23.204.148

🇩🇪 139.19.117.129

🇫🇷 85.217.140.6

🇳🇱 45.148.10.152

🇨🇦 20.220.211.172

🇹🇼 198.235.24.55

🇹🇼 198.235.24.50

🇦🇷 181.209.109.118

🇺🇸 147.185.132.23

🇸🇮 102.220.160.191

🇺🇸 100.28.153.226

🇩🇪 91.107.251.117

🇮🇳 66.116.241.89

🇨🇳 58.220.39.200

🇨🇳 58.54.108.248

🇮🇩 36.64.68.99

🇺🇸 35.253.230.173

🇹🇼 198.235.24.46

🇹🇼 198.235.24.36