JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.81.195.152

54.81.195.152 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 84%: ?

84%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-81-195-152.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.81.195.152

Whois 54.81.195.152

IP Abuse Reports for 54.81.195.152:

This IP address has been reported a total of 16 times from 16 distinct sources. 54.81.195.152 was first reported on September 12th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-13 00:14:36 (5 days ago)	postfix sasl authentication failure blocked by fail2ban ...	Brute-Force
🇩🇪 iNetWorker	2026-09-12 23:22:10 (5 days ago)	trying to access non-authorized port	Port Scan
🇨🇭 Origon	2026-09-12 23:04:52 (5 days ago)	NOQUEUE - IP: 54.81.195.152 - Sep 13 01:04:52 plesk postfix/smtpd[2537451]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 54.81.195.152 - Sep 13 01:04:52 plesk postfix/smtpd[2537451]: NOQUEUE: reject: RCPT from ec2-54-81-195-152.compute-1.amazonaws.com[54.81.195.152]: 554 5.7.1 <ec2-54-81-195-152.compute-1.amazonaws.com[54.81.195.152]>: Client host rejected: Access denied; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<EC2AMAZ-PRU9TCD.ec2.internal> show less	Email Spam
🇨🇭 foobar	2026-09-12 22:48:01 (5 days ago)	SMTP nagging	Email Spam Brute-Force
🇪🇸 didevi	2026-09-12 22:37:54 (5 days ago)	SPAM or Brute force attack detected	Email Spam Brute-Force
🇩🇪 ksol-hostmaster	2026-09-12 22:34:25 (5 days ago)	Sep 13 00:34:24 ksol postfix/submission-587/smtpd[92389]: NOQUEUE: reject: CONNECT from ec2-54-81-19 ... show more Sep 13 00:34:24 ksol postfix/submission-587/smtpd[92389]: NOQUEUE: reject: CONNECT from ec2-54-81-195-152.compute-1.amazonaws.com[54.81.195.152]:52802: 554 5.7.1 Service unavailable; Client host [54.81.195.152] blocked using sbl-xbl.spamhaus.org; Listed by XBL, see https://check.spamhaus.org/query/ip/54.81.195.152 / Listed by CSS, see https://check.spamhaus.org/query/ip/54.81.195.152; proto=SMTP Sep 13 00:34:24 ksol postfix/submission-587/smtpd[92389]: NOQUEUE: lost connection after CONNECT from ec2-54-81-195-152.compute-1.amazonaws.com[54.81.195.152]:52802 ... show less	Email Spam
🇮🇳 dineshskt4all	2026-09-12 22:32:46 (5 days ago)	2026-09-12 22:32:43 TLS error on connection from ec2-54-81-195-152.compute-1.amazonaws.com (EC2AMAZ- ... show more 2026-09-12 22:32:43 TLS error on connection from ec2-54-81-195-152.compute-1.amazonaws.com (EC2AMAZ-PRU9TCD.ec2.internal) [54.81.195.152] (recv): The TLS connection was non-properly terminated. 2026-09-12 22:32:44 TLS error on connection from ec2-54-81-195-152.compute-1.amazonaws.com [54.81.195.152] (gnutls_handshake): The TLS connection was non-properly terminated. ... show less	Web App Attack
🇩🇪 Lino Project	2026-09-12 22:11:51 (5 days ago)	CrowdSec abuse IP report (host SRV-2) Scenario: crowdsecurity/postfix-spam	Hacking
🇩🇪 london2038.com	2026-09-12 21:42:34 (5 days ago)	Connection atttempts against closed TCP ports Sep 12 23:12:53 BLOCK SRC=54.81.195.152 LEN=52 TOS=0x0 ... show more Connection atttempts against closed TCP ports Sep 12 23:12:53 BLOCK SRC=54.81.195.152 LEN=52 TOS=0x02 PREC=0x00 TTL=120 ID=27577 DF PROTO=TCP SPT=60818 DPT=2525 WINDOW=64240 RES=0x00 CWR ECE SYN Sep 12 23:12:56 BLOCK SRC=54.81.195.152 LEN=52 TOS=0x02 PREC=0x00 TTL=120 ID=27581 DF PROTO=TCP SPT=60818 DPT=2525 WINDOW=64240 RES=0x00 CWR ECE SYN Sep 12 23:42:32 BLOCK SRC=54.81.195.152 LEN=52 TOS=0x02 PREC=0x00 TTL=120 ID=29738 DF PROTO=TCP SPT=58269 DPT=587 WINDOW=64240 RES=0x00 CWR ECE SYN show less	Port Scan
🇧🇷 SvrAdmin	2026-09-12 21:41:10 (5 days ago)	[254] (smtpauth) Failed SMTP AUTH login from 54.81.195.152 (US/United States/ec2-54-81-195-152.compu ... show more [254] (smtpauth) Failed SMTP AUTH login from 54.81.195.152 (US/United States/ec2-54-81-195-152.compute-1.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Sep 12 18:15:06 painel postfix/smtpd[15648]: warning: ec2-54-81-195-152.compute-1.amazonaws.com[54.81.195.152]: SASL PLAIN authentication failed: Sep 12 18:15:16 painel postfix/smtpd[15814]: warning: ec2-54-81-195-152.compute-1.amazonaws.com[54.81.195.152]: SASL PLAIN authentication failed: Sep 12 18:27:23 painel postfix/smtpd[25799]: warning: ec2-54-81-195-152.compute-1.amazonaws.com[54.81.195.152]: SASL PLAIN authentication failed: Sep 12 18:27:33 painel postfix/smtpd[25883]: warning: ec2-54-81-195-152.compute-1.amazonaws.com[54.81.195.152]: SASL PLAIN authentication failed: Sep 12 18:41:07 painel postfix/smtpd[3981]: warning: ec2-54-81-195-152.compute-1.amazonaws.com[54.81.195.152]: SASL PLAIN authentication failed: show less	Port Scan Hacking Brute-Force Exploited Host
🇮🇹 VHosting	2026-09-12 21:30:04 (5 days ago)	Detected mail brute force attack from different servers	Brute-Force
Anonymous	2026-09-12 21:18:51 (5 days ago)	postfix	Email Spam Web App Attack
🇫🇷 pwozniak	2026-09-12 21:15:22 (5 days ago)	lost connection after AUTH from ec2-54-81-195-152.compute-1.amazonaws.com[54.81.195.152]	Brute-Force
🇩🇪 cloudmax	2026-09-12 21:08:36 (5 days ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇿🇦 hostsec_za	2026-09-12 20:52:01 (5 days ago)	SMTP Auth Attack. 30 failed logins in 1 hour.	Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.58.73.238

🇭🇰 199.45.154.186

🇺🇸 172.236.126.127

🇫🇷 85.217.140.28

🇺🇸 20.127.203.77

🇧🇷 177.7.30.146

🇧🇬 109.160.32.116

🇺🇸 70.39.95.36

🇯🇵 205.188.155.137

🇺🇸 195.184.76.183

🇧🇷 190.115.84.25

🇲🇽 189.202.252.14

🇫🇷 169.58.186.92

🇺🇸 157.230.234.202

🇻🇳 123.21.139.107

🇫🇷 91.196.152.223

🇺🇸 34.148.41.157

🇳🇱 217.60.76.226

🇨🇱 186.10.86.130

🇦🇺 144.6.149.73