JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.165.99.198

54.165.99.198 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 39%: ?

39%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-165-99-198.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.165.99.198

Whois 54.165.99.198

IP Abuse Reports for 54.165.99.198:

This IP address has been reported a total of 7 times from 6 distinct sources. 54.165.99.198 was first reported on July 17th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-07-18 02:18:24 (1 day ago)	[SatJul1804:18:19.4661572026][security2:error][pid2314252:tid2314274][client54.165.99.198:0]ModSecur ... show more [SatJul1804:18:19.4661572026][security2:error][pid2314252:tid2314274][client54.165.99.198:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"gmint.ch\"][uri\"/.git/config\"][unique_id\"alria3g8-O7cO1z-MC6q8QAAANM\"] show less	Port Scan Brute-Force Web App Attack
🇮🇹 VHosting	2026-07-17 21:15:03 (2 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-17 07:30:07 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇦🇺 Klaverstyn	2026-07-17 04:51:05 (2 days ago)	Excessive HTTP request rate	Web App Attack
🇳🇱 e.fierstra	2026-07-17 02:59:42 (2 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 02:20:53 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 54.165.99.198 (ec2-54-165-99-198.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.165.99.198 (ec2-54-165-99-198.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 22:20:50.483478 2026] [security2:error] [pid 23379:tid 23379] [client 54.165.99.198:57182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.accbasilseeds.com"] [uri "/.git/config"] [unique_id "almRgj-SYFSGloKA8tZ1FAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 01:49:50 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 54.165.99.198 (ec2-54-165-99-198.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.165.99.198 (ec2-54-165-99-198.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 21:49:42.562408 2026] [security2:error] [pid 27203:tid 27221] [client 54.165.99.198:54014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.abroma.com"] [uri "/.git/config"] [unique_id "almKNpms_4hUGN1IxwGlZwAAAFA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 138.0.179.249

🇫🇷 86.211.251.145

🇳🇱 45.198.224.241

🇧🇪 34.79.177.115

🇺🇸 205.210.31.100

🇺🇸 172.190.216.105

🇭🇰 154.83.14.209

🇨🇳 58.19.140.224

🇬🇪 212.58.102.6

🇺🇸 172.203.134.70

🇺🇸 162.216.149.108

🇩🇪 151.243.11.245

🇧🇷 45.186.80.65

🇳🇱 45.148.10.157

🇺🇸 162.216.150.53

🇧🇬 91.92.47.208

🇻🇳 45.117.177.47

🇮🇹 185.84.88.30

🇺🇸 172.171.198.214

🇳🇱 154.13.221.172