AbuseIPDB » 54.248.168.199

54.248.168.199 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 62%: ?

62%

ISP	Amazon.com Inc.
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	ec2-54-248-168-199.ap-northeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 54.248.168.199

Whois 54.248.168.199

IP Abuse Reports for 54.248.168.199:

This IP address has been reported a total of 24 times from 20 distinct sources. 54.248.168.199 was first reported on September 14th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-10-03 06:44:03 (1 week ago)	\| CMS (WordPress or Joomla) brute force attempt 10 times (rewritten)	Hacking SQL Injection Web App Attack
SkyDancer	2024-09-15 20:15:47 (3 weeks ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show moreMultiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
KIsmay	2024-09-15 20:05:19 (3 weeks ago)	Sep 15 14:06:26 www4 WPAudit[3046845]: 54.248.168.199 imaginesalmon.com "Mozilla/5.0 (Windows NT 6.1 ... show moreSep 15 14:06:26 www4 WPAudit[3046845]: 54.248.168.199 imaginesalmon.com "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" imagine:grantham FAIL Sep 15 14:06:32 www4 WPAudit[3046845]: 54.248.168.199 imaginesalmon.com "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" se7enoaks:grantham FAIL Sep 15 15:22:34 www4 WPAudit[3027791]: 54.248.168.199 www.valhallasafety.com "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" sbd-admin:321654 FAIL Sep 15 16:05:17 www4 WPAudit[3060220]: 54.248.168.199 lemoncreekcampground.ca "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" lemoncreek:321654 FAIL Sep 15 16:05:19 www4 WPAudit[3060220]: 54.248.168.199 lemoncreekcampground.ca "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" sbd-admin:321654 FAIL ... show less	Brute-Force Web App Attack
MSaluste	2024-09-15 16:38:00 (3 weeks ago)	Brute-force WP login attack	Hacking Brute-Force
mitsurugi	2024-09-15 14:50:00 (3 weeks ago)	WordPress brute-force attack.	Brute-Force Web App Attack
paulshipley.com.au	2024-09-15 12:47:28 (3 weeks ago)	Sep 15 22:47:25 ip-172-26-1-65 wordpress(dance4fitness.com.au)[917085]: Authentication failure for p ... show moreSep 15 22:47:25 ip-172-26-1-65 wordpress(dance4fitness.com.au)[917085]: Authentication failure for paul from 54.248.168.199 Sep 15 22:47:27 ip-172-26-1-65 wordpress(dance4fitness.com.au)[913373]: Authentication failure for paul from 54.248.168.199 Sep 15 22:47:27 ip-172-26-1-65 wordpress(dance4fitness.com.au)[917074]: Authentication failure for maree from 54.248.168.199 ... show less	Web App Attack
KIsmay	2024-09-15 10:34:57 (3 weeks ago)	Sep 15 03:07:41 www4 WPAudit[2975939]: 54.248.168.199 lemoncreekcampground.ca "Mozilla/5.0 (Windows ... show moreSep 15 03:07:41 www4 WPAudit[2975939]: 54.248.168.199 lemoncreekcampground.ca "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" sbd-admin:matahariku FAIL Sep 15 05:49:58 www4 WPAudit[2987752]: 54.248.168.199 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" sbd-admin:winston1 FAIL Sep 15 06:14:47 www4 WPAudit[2996006]: 54.248.168.199 lemoncreekcampground.ca "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" sbd-admin:grantham FAIL Sep 15 06:34:55 www4 WPAudit[2994941]: 54.248.168.199 www.valhallasafety.com "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" sbd-admin:winston1 FAIL Sep 15 06:34:56 www4 WPAudit[2982070]: 54.248.168.199 www.valhallasafety.com "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" ron:winston1 FAIL ... show less	Brute-Force Web App Attack
RLDD	2024-09-15 09:36:58 (3 weeks ago)	WP login attempts -rld	Brute-Force
SpaceHost-Server	2024-09-15 09:04:38 (3 weeks ago)	54.248.168.199 - - [15/Sep/2024:11:04:35 +0200] "POST /wp-login.php HTTP/1.1" 200 7103 "https://taxi ... show more54.248.168.199 - - [15/Sep/2024:11:04:35 +0200] "POST /wp-login.php HTTP/1.1" 200 7103 "https://taxifisch.com/" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" 54.248.168.199 - - [15/Sep/2024:11:04:35 +0200] "POST /wp-login.php HTTP/1.1" 200 7115 "https://taxifisch.com/" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" 54.248.168.199 - - [15/Sep/2024:11:04:37 +0200] "POST /wp-login.php HTTP/1.1" 200 7115 "https://taxifisch.com/" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" show less	Hacking Web App Attack
MSZ	2024-09-15 08:51:03 (3 weeks ago)	Blocked by Fail2Ban (plesk-wordpress)	Hacking Brute-Force Web App Attack
MAGIC	2024-09-15 07:00:35 (3 weeks ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
paulshipley.com.au	2024-09-15 06:51:15 (3 weeks ago)	Sep 15 16:50:45 ip-172-26-1-65 wordpress(dance4fitness.com.au)[886373]: Authentication failure for p ... show moreSep 15 16:50:45 ip-172-26-1-65 wordpress(dance4fitness.com.au)[886373]: Authentication failure for paul from 54.248.168.199 Sep 15 16:50:51 ip-172-26-1-65 wordpress(dance4fitness.com.au)[883352]: Authentication failure for maree from 54.248.168.199 Sep 15 16:51:14 ip-172-26-1-65 wordpress(dance4fitness.com.au)[883654]: Authentication failure for paul from 54.248.168.199 ... show less	Web App Attack
bmino.pl	2024-09-15 05:48:28 (3 weeks ago)	Autoban 54.248.168.199 BLOCK ACCESS	Brute-Force
Anonymous	2024-09-15 04:48:02 (3 weeks ago)	Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1	Hacking Web App Attack
SpaceHost-Server	2024-09-15 03:20:26 (3 weeks ago)	54.248.168.199 - - [15/Sep/2024:05:20:23 +0200] "POST /wp-login.php HTTP/1.1" 200 7103 "https://taxi ... show more54.248.168.199 - - [15/Sep/2024:05:20:23 +0200] "POST /wp-login.php HTTP/1.1" 200 7103 "https://taxifisch.com/" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" 54.248.168.199 - - [15/Sep/2024:05:20:23 +0200] "POST /wp-login.php HTTP/1.1" 200 7103 "https://taxifisch.com/" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" 54.248.168.199 - - [15/Sep/2024:05:20:25 +0200] "POST /wp-login.php HTTP/1.1" 200 7115 "https://taxifisch.com/" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" show less	Hacking Web App Attack