JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.198.67.201

54.198.67.201 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 48%: ?

48%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-198-67-201.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.198.67.201

Whois 54.198.67.201

IP Abuse Reports for 54.198.67.201:

This IP address has been reported a total of 24 times from 17 distinct sources. 54.198.67.201 was first reported on March 24th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 David Koswari	2026-06-08 05:20:00 (8 hours ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇮🇩 hermawan	2026-06-06 12:57:05 (2 days ago)	[Sat Jun 06 19:56:59.929537 2026] [security2:error] [pid 13088:tid 140593799882432] [client 54.198.6 ... show more [Sat Jun 06 19:56:59.929537 2026] [security2:error] [pid 13088:tid 140593799882432] [client 54.198.67.201:56124] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.198.67.201 request_line = GET /robots.txt HTTP/1.1 Request URI RAW = /robots.txt Request Basename = robots.txt"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aiQZG5Ov2ohedz6z7pvXVwAAAEQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[13138] [D9ocUFWhML8] [aiQZG5Ov2ohedz6z7pvXVwAAAEQ] keep_alive=[0] [2026-06-06 19:56:59.929542] [R:aiQZG5Ov2ohedz6z7pvXVwAAAEQ] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (K ... show less	Email Spam Hacking
🇫🇷 polido	2026-06-04 10:30:40 (4 days ago)	Unauthorized connection attempt to port 443 from 54.198.67.201	Port Scan
🇭🇳 unph	2026-05-25 11:39:46 (2 weeks ago)	Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin	Brute-Force
🇨🇦 dispensight	2026-05-21 16:06:36 (2 weeks ago)	Automated web scanner: 1 request to help.dispensight.cloud. Paths: /robots.txt. UA: Mozilla/5.0 (Mac ... show more Automated web scanner: 1 request to help.dispensight.cloud. Paths: /robots.txt. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort). Amazon.com, Inc. (Ashburn, United States). show less	Bad Web Bot
🇩🇪 KI-Netzwerk	2026-05-21 12:09:50 (2 weeks ago)	Bad Calls: Webpage scraping, Web App Attack	Bad Web Bot Exploited Host Web App Attack
🇩🇪 Carsten	2026-05-20 22:22:57 (2 weeks ago)	Bad web bot [Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) ... show more Bad web bot [Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)] show less	Bad Web Bot
🇨🇿 rawnullbyte	2026-05-18 15:52:38 (2 weeks ago)	🚨 Honeypot triggered! 🖥️ System: NPot 🎯 Target: ROBOTS_TXT_PROBE 🛣️ Path: /robots.txt 👤 Attacker IP: ... show more 🚨 Honeypot triggered! 🖥️ System: NPot 🎯 Target: ROBOTS_TXT_PROBE 🛣️ Path: /robots.txt 👤 Attacker IP: 54.198.67.201 ⏰ Time: 2026-05-18 15:52:37 📡 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort) show less	Web App Attack
🇫🇷 polido	2026-05-12 12:35:59 (3 weeks ago)	Unauthorized connection attempt to port 443 from 54.198.67.201	Port Scan
🇨🇳 ThreatBook.io	2026-05-09 23:18:10 (4 weeks ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.198.67.201 2026-05-0 ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/54.198.67.201 2026-05-09 00:25:44 /robots.txt show less	Web App Attack
🇩🇪 bescared	2026-05-07 14:32:54 (1 month ago)	F2B - Malicious activity detected. URL Probing. -8ff06ede-	Hacking Bad Web Bot Web App Attack
🇩🇪 Carsten	2026-05-03 05:39:41 (1 month ago)	Bad web bot [Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) ... show more Bad web bot [Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)] show less	Bad Web Bot
🇮🇩 hermawan	2026-04-23 09:44:03 (1 month ago)	[Thu Apr 23 16:43:59.066097 2026] [security2:error] [pid 27139:tid 140045797291712] [client 54.198.6 ... show more [Thu Apr 23 16:43:59.066097 2026] [security2:error] [pid 27139:tid 140045797291712] [client 54.198.67.201:42241] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "451"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.198.67.201 request_line = GET /robots.txt HTTP/1.1 Request URI RAW = /robots.txt Request Basename = robots.txt"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aenp3zSa1tKdQm9T5exHeAAAABc"] [staklim-malang.info] [staklim-malang.info] top=[27190] [fATTfJ0U/IM] [aenp3zSa1tKdQm9T5exHeAAAABc] keep_alive=[0] [2026-04-23 16:43:59.066102] [R:aenp3zSa1tKdQm9T5exHeAAAABc] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Geck ... show less	Email Spam Hacking
🇩🇪 Carsten	2026-04-23 04:00:04 (1 month ago)	Bad web bot [Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) ... show more Bad web bot [Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)] show less	Bad Web Bot
🇦🇺 MAGIC	2026-04-21 01:07:44 (1 month ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 2402:800:6116:a835:49a3:e82c:3b6c:5c18

🇷🇴 193.32.162.82

🇱🇹 185.169.4.30

🇻🇳 171.231.197.35

🇨🇳 111.53.166.163

🇺🇸 104.164.178.199

🇨🇳 43.248.108.63

🇰🇷 220.118.173.234

🇸🇬 217.15.164.228

🇩🇪 213.209.159.236

🇳🇱 204.76.203.15

🇩🇪 178.104.164.71

🇵🇰 175.107.228.73

🇨🇳 122.226.38.134

🇺🇸 103.143.11.150

🇳🇱 93.123.72.166

🇦🇹 91.141.57.255

🇩🇪 84.159.116.226

🇨🇦 2001:1810:1041:200:0:4:d1eb:888a

🇲🇽 189.146.62.55