54.172.167.67

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
45 reports
42 reporters · latest 24 minutes ago
ISP
Amazon Technologies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-54-172-167-67.compute-1.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
45 from 42 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇳🇱 Netherlands 6 🇫🇷 France 5
Most common categories Port Scan 32 Hacking 10 Brute-Force 6 DDoS Attack 4 SSH 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 Choice Tech LLC
Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=7443
Port Scan Hacking
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/1245 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇳🇱 nandadytm
[2026-11-08 16:23:36] Banned 54.172.167.67 after 3 attempts: Portscan probe on TCP port 21
Port Scan
🇹🇷 trakyabirlik
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — Elasticsearch (59 events in 10min) at 2026-11-08 10:10
Web App Attack
🇹🇷 ugurcoskun
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — Elasticsearch (48 events in 10min) at 2026-11-08 10:09
Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 1245) Source port: 35288 TTL: 121 Packet length: 60 TOS: 0x00 This report (for 54.172.167.67) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 donarev419
Connection to port 3000 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:3000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) App
Port Scan Hacking
🇮🇩 helouism
Fail2Ban: Blocked by UFW for port scanning.
Port Scan DDoS Attack
🇩🇪 _ArminS_
SP-Scan 50116:13443 detected 2026.11.07 22:40:01 blocked until 2026.12.27 15:42:48
Port Scan
🇳🇱 larse99
Unifi IDS blocked: ET CINS Active Threat Intelligence Poor Reputation IP group 102
Port Scan Hacking
🇳🇱 StopAbuse
tcp/8443
Port Scan
🇸🇪 NordhTech
Multiple malicious connection attempts detected, trying port(s) 21/tcp, then blocked by firewall.
Port Scan Hacking
🇳🇱 VMHeaven.io
Blocked by UFW [8443/tcp] Source port: 25250 TTL: 110 Packet length: 60
Port Scan
🇺🇸 Babu Chang
sshguard
SSH
🇨🇦 Arpan Sen
Network port/address scan: probed 1 distinct port(s) across 64 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 207.46.13.151
🇺🇸 104.22.102.34
🇮🇶 91.106.42.64
🇳🇱 86.38.187.120
🇨🇳 36.132.228.219
🇺🇸 34.121.196.160
🇰🇷 218.149.235.152
🇲🇽 189.143.224.118
🇵🇱 172.69.155.36
🇺🇸 104.131.187.244
🇩🇪 95.89.208.23
🇷🇺 91.202.233.64
🇬🇧 86.7.47.72
🇺🇸 72.219.145.227
🇺🇸 71.62.64.206
🇳🇱 64.205.72.45
🇺🇸 52.179.208.167
🇮🇶 37.238.23.4
🇺🇸 205.210.31.104
🇳🇱 195.178.110.106
feedback