AbuseIPDB » 54.169.173.198

54.169.173.198 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 97%: ?

97%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-169-173-198.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 54.169.173.198

Whois 54.169.173.198

IP Abuse Reports for 54.169.173.198:

This IP address has been reported a total of 53 times from 40 distinct sources. 54.169.173.198 was first reported on May 25th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-05-27 20:08:25 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-05-26 20:08:23 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-05-26 00:08:22 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
SpaceHost-Server	2025-05-25 22:32:27 (3 weeks ago)		Brute-Force Web App Attack
Site.eu	2025-05-25 20:58:00 (3 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Penny Packer	2025-05-25 20:51:54 (3 weeks ago)	Fail2Ban apache-tripwires	Web App Attack
BlueWire Hosting	2025-05-25 20:10:14 (3 weeks ago)	Probing for application vulnerabilities	Brute-Force Web App Attack
rtbh.com.tr	2025-05-25 20:08:23 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
updown.io	2025-05-25 18:16:43 (3 weeks ago)	{"level":"info","ts":1748196849.8005617,"logger":"http.log.access.log1","msg":"handled request","req ... show more{"level":"info","ts":1748196849.8005617,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"54.169.173.198","remote_port":"64198","client_ip":"54.169.173.198","proto":"HTTP/1.1","method":"GET","host":"statistics.status.digitalphotogallery.com","uri":"/","headers":{"Keep-Alive":["300"],"Connection":["keep-alive"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"],"Accept-Language":["en-US,en;q=0.5"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"]}},"bytes_read":0,"user_id":"","duration":0.000073009,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://statistics.status.digitalphotogallery.com/"],"Content-Type":[]}} {"level":"info","ts":1748196850.3051627,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"54.169.173.198","remote_port":"64239","client_ip":"54.169.173.198","prot ... show less	DDoS Attack Web App Attack
TPI-Abuse	2025-05-25 17:05:26 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 54.169.173.198 (ec2-54-169-173-198.ap-southeast ... show more(mod_security) mod_security (id:225170) triggered by 54.169.173.198 (ec2-54-169-173-198.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 25 13:05:20.732326 2025] [security2:error] [pid 14107:tid 14107] [client 54.169.173.198:50651] [client 54.169.173.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||srsrestoration.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "srsrestoration.net"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "aDNN0JMeko8lDPaaUtNZhwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-05-25 16:12:43 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 54.169.173.198 (ec2-54-169-173-198.ap-southeast ... show more(mod_security) mod_security (id:225170) triggered by 54.169.173.198 (ec2-54-169-173-198.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 25 12:12:38.514709 2025] [security2:error] [pid 2272734:tid 2272734] [client 54.169.173.198:51395] [client 54.169.173.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sp.cloudex.link|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sp.cloudex.link"] [uri "/wp-json/wp/v2/users/"] [unique_id "aDNBdj1ftPfqj8_A-6F9YQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-05-25 15:58:11 (3 weeks ago)	Bot / seems abusive / Apache connections: 32	DDoS Attack Web Spam Bad Web Bot Web App Attack
thetomtaylor.co.uk	2025-05-25 15:55:49 (3 weeks ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [wa02]	Bad Web Bot Web App Attack
TPI-Abuse	2025-05-25 15:49:10 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 54.169.173.198 (ec2-54-169-173-198.ap-southeast ... show more(mod_security) mod_security (id:225170) triggered by 54.169.173.198 (ec2-54-169-173-198.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 25 11:49:07.637158 2025] [security2:error] [pid 1534378:tid 1534378] [client 54.169.173.198:56688] [client 54.169.173.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.soundtrax.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.soundtrax.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aDM78zcHW44oIvzvr5ptKgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
mawan	2025-05-25 14:27:20 (3 weeks ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩