54.166.149.5

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
360 reports
89 reporters · latest 8 months ago
ISP
Amazon Technologies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-54-166-149-5.compute-1.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

54.166.149.5 has been reported 360 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
360 from 89 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇷🇺 Agrohim
Gate Inet blocked for categories:
DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇷🇺 Agrohim
Gate Inet blocked for categories:
DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇪🇸 Gem
Unauthorized mail server scanning
Port Scan
🇳🇱 Cyber SOC
Peaksys - 2025-12-24 09:18:28 UTC+00
Port Scan
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/8090
Brute-Force
🇩🇪 iNetWorker
firewall-block, port(s): 8003/tcp
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 8003) Source port: 54578 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 54.166.149.5) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇹🇷 Threat.live
Suspicious activity, tcp/8003
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=45186 dstport=8003
Port Scan
🇩🇪 David Ferneding
Blocked by UFW (TCP on 8003) Source port: 36574 TTL: 57 Packet length: 52 TOS: 0x00 This report (for 54.166.149.5) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 ioexploit.
SYN -> SYN-ACK scan Source port: 48854 Destination port: 8003
Port Scan
🇺🇸 technash
Web app attack detection [ModSecurity]. Action: Drop/deny traffic.
Web App Attack
🇺🇸 MPL
tcp/8003 (142 or more attempts)
Port Scan
🇳🇱 StopAbuse
tcp/8003 tcp/8090
Port Scan
🇺🇸 MPL
tcp ports: 8090,8003 (6 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 146.70.172.210
🇺🇸 146.70.168.209
🇨🇳 101.205.122.213
🇺🇸 23.234.108.164
🇺🇸 146.70.165.16
🇧🇩 103.166.58.209
🇺🇸 85.203.54.133
🇮🇳 66.116.253.148
🇩🇪 57.129.120.143
🇺🇸 45.156.131.22
🇧🇪 35.210.200.7
🇺🇸 23.234.116.235
feedback