JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.172.209.207

54.172.209.207 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 64%: ?

64%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-172-209-207.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.172.209.207

Whois 54.172.209.207

IP Abuse Reports for 54.172.209.207:

This IP address has been reported a total of 56 times from 34 distinct sources. 54.172.209.207 was first reported on March 20th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 HERA - Operations	2026-09-02 01:06:34 (11 hours ago)	herrmann - searching for vulnerable scripts: robots.txt 2026/09/02 03:06:34	Web App Attack
🇩🇪 filstal.org	2026-08-28 20:27:04 (4 days ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort) show less	Bad Web Bot Web App Attack
🇩🇪 jbcrn	2026-08-28 16:44:44 (4 days ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /robots.txt. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort) show less	Bad Web Bot Web App Attack
🇫🇷 Jimbo67	2026-08-28 15:02:48 (4 days ago)	Cloudflare WAF: 1 hits in 30s \| action=block \| abuse=suspicious_probe \| categories=19 \| rule_id=3329 ... show more Cloudflare WAF: 1 hits in 30s \| action=block \| abuse=suspicious_probe \| categories=19 \| rule_id=3329c9d804134f3e89780d69bfd872dc \| URIs=/robots.txt \| confidence=0.82 show less	Bad Web Bot
🇩🇪 filstal.org	2026-08-27 13:36:18 (5 days ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort) show less	Bad Web Bot Web App Attack
🇺🇸 SX Communications	2026-08-26 18:57:52 (6 days ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 54.172.209.207: traffic from this a ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 54.172.209.207: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 cwytech	2026-08-24 16:54:20 (1 week ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.	Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-08-24 11:01:25 (1 week ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort) show less	Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-08-21 12:56:07 (1 week ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (63, Abuse: 57) show less	Hacking Exploited Host Web App Attack
🇩🇪 filstal.org	2026-08-21 03:58:23 (1 week ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort) show less	Bad Web Bot Web App Attack
🇺🇸 MPL	2026-08-17 01:20:22 (2 weeks ago)	tcp/443 (3 or more attempts)	Port Scan
🇩🇪 filstal.org	2026-08-16 13:06:58 (2 weeks ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort) show less	Bad Web Bot Web App Attack
🇩🇪 Carsten	2026-08-15 09:43:54 (2 weeks ago)	Bad web bot [Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) ... show more Bad web bot [Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)] show less	Bad Web Bot
🇺🇸 SX Communications	2026-08-11 03:26:37 (3 weeks ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 54.172.209.207: traffic from this a ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 54.172.209.207: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇨🇿 sajmon0011	2026-08-10 04:26:36 (3 weeks ago)	54.172.209.207 - - [10/Aug/2026:06:26:36 +0200] "GET /robots.txt HTTP/1.1" 404 196 "-" "Mozilla/5.0 ... show more 54.172.209.207 - - [10/Aug/2026:06:26:36 +0200] "GET /robots.txt HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" ... show less	Web App Attack

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 222.230.177.55

🇩🇪 213.209.159.208

🇬🇧 193.176.29.24

🇧🇷 187.74.191.48

🇮🇷 185.173.106.25

🇷🇺 94.102.89.144

🇷🇺 94.28.174.160

🇷🇴 92.118.39.77

🇺🇸 89.185.80.128

🇩🇪 89.163.146.197

🇫🇷 85.217.140.31

🇺🇸 2607:f8b0:400e:c0c::12c

🇦🇷 200.81.165.59

🇭🇰 199.45.155.47

🇪🇸 194.36.104.36

🇨🇳 122.114.35.35

🇺🇦 91.236.159.228

🇰🇷 58.224.62.29

🇭🇳 45.67.247.233

🇲🇽 216.28.151.129