JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.167.7.167

54.167.7.167 was found in our database!

This IP was reported 524 times. Confidence of Abuse is 36%: ?

36%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-167-7-167.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.167.7.167

Whois 54.167.7.167

IP Abuse Reports for 54.167.7.167:

This IP address has been reported a total of 524 times from 218 distinct sources. 54.167.7.167 was first reported on March 12th 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 Threat.live	2026-03-19 21:25:38 (4 months ago)	Brute Force, tcp/22	Brute-Force
🇬🇧 Stuart Reid	2026-03-19 19:15:17 (4 months ago)	...	SSH
Anonymous	2026-03-19 18:52:06 (4 months ago)	Drop from IP address 54.167.7.167 to tcp-port 3232	Port Scan
🇳🇱 StopAbuse	2026-03-19 18:14:07 (4 months ago)	tcp/56001	Port Scan
🇬🇧 gbzret4d	2026-03-19 02:04:34 (4 months ago)	Honeypot [uk-production01]: Unauthorized traffic (243 bytes of payload); 3232 [1] TCP	Port Scan
Anonymous	2026-03-18 18:51:05 (4 months ago)	Drop from IP address 54.167.7.167 to tcp-port 50050	Port Scan
🇩🇪 Axel	2026-03-18 14:15:04 (4 months ago)	[2026-03-18 14:15:03 UTC] Honeypot Elite (Backdoor) connection attempt \| AXFRA HONEYPOT	Exploited Host
🇺🇦 Luk	2026-03-18 02:35:44 (4 months ago)	Mar 18 04:35:43 box sshd-session[33188]: Connection closed by 54.167.7.167 port 12642 [preauth] Mar ... show more Mar 18 04:35:43 box sshd-session[33188]: Connection closed by 54.167.7.167 port 12642 [preauth] Mar 18 04:35:43 box sshd-session[33187]: Connection closed by 54.167.7.167 port 60360 [preauth] Mar 18 04:35:43 box sshd-session[33189]: Connection closed by 54.167.7.167 port 53580 [preauth] Mar 18 04:35:43 box sshd-session[33191]: Connection closed by 54.167.7.167 port 18918 [preauth] Mar 18 04:35:43 box sshd-session[33190]: Connection closed by 54.167.7.167 port 36818 [preauth] ... show less	Brute-Force SSH
🇬🇧 gbzret4d	2026-03-18 01:57:37 (4 months ago)	Honeypot [uk-production01]: HTTP/1.1 request on 1245 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0 ... show more Honeypot [uk-production01]: HTTP/1.1 request on 1245 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 1245 [1] TCP show less	Hacking Bad Web Bot
🇩🇪 bontekoe.technology	2026-03-18 01:56:53 (4 months ago)	Port scan or Brute-Force detected. (src_port=53196, dst_port=1224)	Brute-Force
🇺🇸 sefinek.net	2026-03-18 00:43:45 (4 months ago)	Blocked by UFW on NY01 [56001/tcp] \| SPT: 29174 \| TTL: 118 \| LEN: 60 \| TOS: 0x08 • Reported by: gith ... show more Blocked by UFW on NY01 [56001/tcp] \| SPT: 29174 \| TTL: 118 \| LEN: 60 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 Pingger Shikkoken	2026-03-17 23:24:25 (4 months ago)	2026-03-17T23:24:25+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-03-17T23:24:25+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=54.167.7.167 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=118 ID=60086 DF PROTO=TCP SPT=36046 DPT=21 WINDOW=62727 RES=0x00 SYN URGP=0 2026-03-17T23:24:26+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=54.167.7.167 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=118 ID=60087 DF PROTO=TCP SPT=36046 DPT=21 WINDOW=62727 RES=0x00 SYN URGP=0 2026-03-17T23:24:28+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=54.167.7.167 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=118 ID=60088 DF PROTO=TCP SPT=36046 DPT=21 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	FTP Brute-Force Hacking
🇹🇼 taiwanfrp.me	2026-03-17 23:20:31 (4 months ago)	taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, targ ... show more taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, target=proxy:kiwicanary.MinecraftJwfewfewfewfewava62o\|port:- show less	Port Scan Hacking
Anonymous	2026-03-17 22:52:49 (4 months ago)	Reported from Nginx log analysis 16. Log: 54.167.7.167 - - [17/Mar/2026:xx:xx:xx 0100] "GET /robots ... show more Reported from Nginx log analysis 16. Log: 54.167.7.167 - - [17/Mar/2026:xx:xx:xx 0100] "GET /robots.txt HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" "-" "US United States Ashburn" "AS14618" "Amazon.com, Inc." show less	Port Scan Brute-Force SSH
🇩🇪 shr4pnel	2026-03-17 21:53:35 (4 months ago)	SSH login attempts (endlessh): 2026-03-17T21:41:22.625Z ACCEPT host=::ffff:54.167.7.167 port=43908 f ... show more SSH login attempts (endlessh): 2026-03-17T21:41:22.625Z ACCEPT host=::ffff:54.167.7.167 port=43908 fd=6 n=3/4096 show less	Brute-Force SSH

Showing 466 to 480 of 524 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 2402:800:620c:1488:3617:36ff:fe12:7ec4

🇺🇸 205.210.31.68

🇺🇸 205.210.31.67

🇨🇳 180.76.236.214

🇺🇸 173.239.211.206

🇺🇸 162.217.100.36

🇭🇰 152.32.135.48

🇰🇷 114.203.87.250

🇨🇭 107.189.2.131

🇺🇸 91.230.168.93

🇲🇾 49.124.151.28

🇭🇰 45.207.196.123

🇳🇱 45.142.193.161

🇺🇸 216.73.216.231

🇫🇷 213.136.81.58

🇺🇸 209.87.164.222

🇺🇦 194.44.213.98

🇷🇴 193.46.255.86

🇲🇽 187.244.115.90

🇲🇽 187.189.90.81