JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.166.148.127

Recent Activity

Abuse confidence score ?

66% Elevated

85 reports

14 reporters · latest 2 days ago

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-166-148-127.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 54.166.148.127

Export CSV

This IP address has been reported a total of 85 times from 14 distinct sources. 54.166.148.127 was first reported on August 30th 2026, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: France with 39 reports; United States of America with 35 reports; Australia with 3 reports. The most common categories in these recent reports were: Bad Web Bot 57 times; DDoS Attack 36 times; Exploited Host 33 times; Web App Attack 28 times; Hacking 5 times; Other 11 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 bigorre.org	2026-10-12 15:09:55 (2 days ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 Sklurk	2026-10-12 08:04:57 (2 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-10-11 05:54:33 (3 days ago)	Web App Attack	Web App Attack
Anonymous	2026-10-10 06:34:42 (4 days ago)	GET / HTTP/2.0	Port Scan Hacking
🇫🇷 Sklurk	2026-10-10 05:37:26 (4 days ago)	Web App Attack	Web App Attack
🇫🇷 bigorre.org	2026-10-09 16:41:20 (5 days ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇺🇸 SX Communications	2026-10-09 14:33:49 (5 days ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 54.166.148.127: traffic from this a ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 54.166.148.127: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-10-08 09:49:26 (6 days ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 54.166.148.127: traffic from this a ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 54.166.148.127: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-10-08 01:36:30 (1 week ago)	HTTP application-layer DoS / botnet traffic from 54.166.148.127: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 54.166.148.127: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 stechusa	2026-10-07 15:53:27 (1 week ago)	[Askari] \| country=US \| Behavior: HTTP/1.1 over TLS, Targeting specific pages, Concurrent page load ... show more [Askari] \| country=US \| Behavior: HTTP/1.1 over TLS, Targeting specific pages, Concurrent page load during attack show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-10-07 15:53:27 (1 week ago)	ELEVATED_THREAT \| country=US \| ASN=Amazon.com, Inc. \| 14 IPs targeting /brand.html \| HTTP/1.1 over T ... show more ELEVATED_THREAT \| country=US \| ASN=Amazon.com, Inc. \| 14 IPs targeting /brand.html \| HTTP/1.1 over TLS (elevated=True) \| Facet request during elevated threat (facet_ratio=0.61, unique_ips=70) show less	Bad Web Bot DDoS Attack
🇫🇷 bigorre.org	2026-10-07 11:00:02 (1 week ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇩🇪 LRob	2026-10-07 05:46:52 (1 week ago)	Vulnerability scanning \| method: GET \| path: /spip.php \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X ... show more Vulnerability scanning \| method: GET \| path: /spip.php \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/605.1.15 \| 2026-10-07 05:46 UTC show less	Port Scan Web App Attack
🇺🇸 SX Communications	2026-10-07 04:54:12 (1 week ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 54.166.148.127: traffic from this a ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 54.166.148.127: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇩🇰 ScamAware	2026-10-06 10:05:38 (1 week ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Bad Web Bot

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇪 197.232.69.67

🇿🇦 196.25.22.26

🇩🇪 164.30.17.82

🇨🇳 110.179.81.187

🇳🇱 109.160.32.166

🇳🇱 109.160.32.72

🇷🇴 92.118.39.227

🇫🇷 91.231.89.114

🇬🇧 87.236.176.157

🇺🇸 64.62.156.130

🇺🇸 52.146.19.226

🇮🇩 41.216.177.55

🇻🇪 38.159.63.8

🇭🇰 35.220.239.146

🇬🇧 35.203.210.36

🇺🇸 20.169.49.246

🇺🇸 20.38.35.115

🇺🇸 20.38.35.80

🇨🇭 209.99.190.215

🇮🇳 203.192.232.180