JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.167.58.202

54.167.58.202 was found in our database!

This IP was reported 104 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-167-58-202.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.167.58.202

Whois 54.167.58.202

IP Abuse Reports for 54.167.58.202:

This IP address has been reported a total of 104 times from 81 distinct sources. 54.167.58.202 was first reported on August 30th 2021, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 TheHoneyPotter	2026-06-09 10:26:01 (6 hours ago)	Honeypot [fc-honeypot]: Unauthorized traffic (243 bytes of payload); 3232 [1] TCP Reported by: https ... show more Honeypot [fc-honeypot]: Unauthorized traffic (243 bytes of payload); 3232 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 MPL	2026-06-09 10:23:55 (6 hours ago)	tcp/443 (141 or more attempts)	Port Scan
🇨🇦 dpinse	2026-06-09 04:12:06 (12 hours ago)	Honeypot [honeypot-ca-sensor1]: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0 ... show more Honeypot [honeypot-ca-sensor1]: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-Go show less	SSH Port Scan
🇺🇸 Starburst SysOp Team	2026-06-09 03:28:42 (13 hours ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-1)	Hacking Bad Web Bot
🇺🇸 itsnixk	2026-06-08 08:33:30 (1 day ago)	(mod_security) mod_security (id:920350) triggered by 54.167.58.202 (US/United States/ec2-54-167-58-2 ... show more (mod_security) mod_security (id:920350) triggered by 54.167.58.202 (US/United States/ec2-54-167-58-202.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 08 04:33:25.159256 2026] [security2:error] [pid 26848:tid 26957] [client 54.167.58.202:61148] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+\|\\\\[[\\\\da-f:]+\\\\]\|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aiZ-VXjjIn0fnOUQ6vsjLgAAABo"] show less	Port Scan
🇩🇪 ISPLtd	2026-06-08 03:57:50 (1 day ago)	Jun 8 00:57:47 54.167.58.202 TCP SPT=57904 DPT=50050 SYN Jun 8 00:57:48 54.167.58.202 TCP SPT=5790 ... show more Jun 8 00:57:47 54.167.58.202 TCP SPT=57904 DPT=50050 SYN Jun 8 00:57:48 54.167.58.202 TCP SPT=57904 DPT=50050 SYN Jun 8 00:57:50 54.167.58.202 TCP SPT=57904 DPT=50050 ... show less	Port Scan
🇨🇭 pingusurmars	2026-06-08 03:34:50 (1 day ago)	Blocked by UFW on ampereone [1244/tcp] Source port: 51660 TTL: 118 Packet length: 60 TOS: 0x00 This ... show more Blocked by UFW on ampereone [1244/tcp] Source port: 51660 TTL: 118 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 iNetWorker	2026-06-08 02:15:39 (1 day ago)	trying to access non-authorized port	Port Scan
🇭🇰 mutebot.net	2026-06-07 23:43:29 (1 day ago)	SRC=54.167.58.202, PROTO=TCP, SPT=20026, DPT=8080	Port Scan
Anonymous	2026-06-07 22:03:39 (1 day ago)	IP & Port Scan.	SSH Port Scan Brute-Force
🇬🇧 ISPLtd	2026-06-07 20:05:08 (1 day ago)	Jun 7 17:05:04 54.167.58.202 TCP SPT=31628 DPT=50050 SYN Jun 7 17:05:05 54.167.58.202 TCP SPT=3162 ... show more Jun 7 17:05:04 54.167.58.202 TCP SPT=31628 DPT=50050 SYN Jun 7 17:05:05 54.167.58.202 TCP SPT=31628 DPT=50050 SYN Jun 7 17:05:07 54.167.58.202 TCP SPT=31628 DPT=50050 ... show less	Port Scan
🇩🇪 Justin F. \| AS204464	2026-06-07 12:34:40 (2 days ago)	Honeypot [nx-infrastructure]: HTTP/1.1 request on 1244 GET / User-Agent: Mozilla/5.0 (Windows NT 10 ... show more Honeypot [nx-infrastructure]: HTTP/1.1 request on 1244 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 1244 [1], 3232 [1] TCP Reported by: Justin F. show less	Hacking Bad Web Bot
🇩🇪 celestialcity	2026-06-07 12:29:14 (2 days ago)	Blocked by UFW on celestialcityeu [1244/tcp] \| SPT: 58894 \| TTL: 117 \| LEN: 60 \| TOS: 0x00 • Reporte ... show more Blocked by UFW on celestialcityeu [1244/tcp] \| SPT: 58894 \| TTL: 117 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Robbie	2026-06-07 12:25:32 (2 days ago)	Jun 7 12:25:31 Ubuntu-2204-jammy-amd64-base sshd[80321]: Connection closed by 54.167.58.202 port 54 ... show more Jun 7 12:25:31 Ubuntu-2204-jammy-amd64-base sshd[80321]: Connection closed by 54.167.58.202 port 54016 [preauth] ... show less	Brute-Force SSH
🇺🇸 [email protected]	2026-06-07 10:12:00 (2 days ago)	Ports: 12443. Proto: TCP. Observations: 3	Port Scan

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 160.30.142.216

🇺🇦 194.242.103.87

🇲🇽 187.228.239.97

🇫🇷 185.91.220.194

🇫🇷 173.249.63.80

🇺🇸 172.185.24.228

🇧🇩 118.179.29.133

🇳🇱 87.121.69.138

🇳🇱 45.156.87.254

🇳🇱 45.148.10.157

🇮🇳 2409:40e4:1304:4c8c:5945:d5fd:32c7:d748

🇧🇷 205.210.31.216

🇩🇪 176.65.132.24

🇺🇸 107.0.200.227

🇮🇳 103.170.85.83

🇨🇳 101.96.202.228

🇺🇸 20.81.47.186

🇺🇸 20.15.201.64

🇮🇹 5.89.75.194

🇺🇸 162.217.167.57