JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.81.199.30

54.81.199.30 was found in our database!

This IP was reported 160 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-81-199-30.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.81.199.30

Whois 54.81.199.30

IP Abuse Reports for 54.81.199.30:

This IP address has been reported a total of 160 times from 47 distinct sources. 54.81.199.30 was first reported on June 28th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-09 14:12:24 (2 days ago)	[Tue Jun 09 21:12:21.661928 2026] [security2:error] [pid 46606:tid 139736422180544] [client 54.81.19 ... show more [Tue Jun 09 21:12:21.661928 2026] [security2:error] [pid 46606:tid 139736422180544] [client 54.81.199.30:18370] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.81.199.30 request_line = GET /index.php/prakiraan-bulanan/4261-prakiraan-bulanan-untuk-6-bulan-ke-depan-di-provinsi-jawa-timur/prakiraan-bulanan-curah-hujan-untuk-6-bulan-ke-depan-di-provinsi-jawa-timur/555561119-prakiraan-bulanan-curah-hujan-di-kabupaten-gresik-untuk-6-bulan-ke-depan HTTP/1.1 Request URI RAW = /index.php/prakiraan-bulanan/4261-prakiraan-bulanan-unt..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/4261-prakiraan-bulanan-untu ... show less	Email Spam Hacking
🇧🇪 cmbplf	2026-06-09 08:17:28 (2 days ago)	6.669 requests from abuseipdb.com blacklisted IP (6mos2w4d)	Brute-Force Bad Web Bot
🇮🇩 hermawan	2026-06-09 07:16:39 (2 days ago)	[Tue Jun 09 14:16:38.332044 2026] [security2:error] [pid 314253:tid 139737490777792] [client 54.81.1 ... show more [Tue Jun 09 14:16:38.332044 2026] [security2:error] [pid 314253:tid 139737490777792] [client 54.81.199.30:59778] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.81.199.30 request_line = GET /robots.txt HTTP/1.1 Request URI RAW = /robots.txt Request Basename = robots.txt"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aie91haMEnNIIhnU3oxqpAAAARI"] [staklim-malang.info] [staklim-malang.info] top=[314298] [1Y5r6Iw4G5M] [aie91haMEnNIIhnU3oxqpAAAARI] keep_alive=[0] [2026-06-09 14:16:38.332051] [R:aie91haMEnNIIhnU3oxqpAAAARI] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Geck ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-09 01:33:33 (2 days ago)	[Tue Jun 09 08:33:30.171040 2026] [security2:error] [pid 82056:tid 140245127370432] [client 54.81.19 ... show more [Tue Jun 09 08:33:30.171040 2026] [security2:error] [pid 82056:tid 140245127370432] [client 54.81.199.30:35330] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.81.199.30 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin HTTP/1.1 Request URI RAW = /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin Request Basename = infografis-bulanan-buletin"] [hostname "staklim-malang.info"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin"] [unique_id "aidtakY_CMHz0Go5Oy9xXgAAAVc"] [staklim-malang.i ... show less	Email Spam Hacking
🇫🇷 Sklurk	2026-06-08 17:23:37 (2 days ago)	Web App Attack	Web App Attack
🇺🇸 rsa	2026-06-08 16:44:00 (3 days ago)	excessive crawling ddos	DDoS Attack Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-06-08 13:20:47 (3 days ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇮🇩 hermawan	2026-06-08 07:16:29 (3 days ago)	[Mon Jun 08 14:16:24.126121 2026] [security2:error] [pid 819623:tid 140661789554368] [client 54.81.1 ... show more [Mon Jun 08 14:16:24.126121 2026] [security2:error] [pid 819623:tid 140661789554368] [client 54.81.199.30:49829] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.81.199.30 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-harian/suhu-minimum HTTP/1.1 Request URI RAW = /index.php/informasi-iklim/infografis-iklim/infografis-harian/suhu-minimum Request Basename = suhu-minimum"] [hostname "staklim-malang.info"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-harian/suhu-minimum"] [unique_id "aiZsSB-BTY5vj7DJ8qe-FQAAAEQ"] [staklim-malang.info] [staklim-malang.info] top=[819655] [9Yy7yXhmGpM] [aiZ ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-08 03:59:04 (3 days ago)	[Mon Jun 08 10:59:00.752695 2026] [security2:error] [pid 650525:tid 140662113453760] [client 54.81.1 ... show more [Mon Jun 08 10:59:00.752695 2026] [security2:error] [pid 650525:tid 140662113453760] [client 54.81.199.30:8657] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.81.199.30 request_line = GET /index.php/component/tags/tag/analisis-bulanan HTTP/1.1 Request URI RAW = /index.php/component/tags/tag/analisis-bulanan Request Basename = analisis-bulanan"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/analisis-bulanan"] [unique_id "aiY-BAa4jK0Dt6HWToYOJwAAAQE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[650556] [+bfPB7YMeZ4] [aiY-BAa4jK0Dt6HWToYOJwAAAQE] keep_alive=[0] [2026-06-08 10:59:00.7527 ... show less	Email Spam Hacking
🇨🇿 ptlab	2026-06-07 20:45:20 (3 days ago)	Detected php_null_array_access attack from WP-host.	Hacking Web App Attack
🇮🇩 securejdprop	2026-06-07 13:49:57 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
🇮🇩 hermawan	2026-06-07 12:44:19 (4 days ago)	[Sun Jun 07 19:44:15.890208 2026] [security2:error] [pid 6344:tid 140409951901376] [client 54.81.199 ... show more [Sun Jun 07 19:44:15.890208 2026] [security2:error] [pid 6344:tid 140409951901376] [client 54.81.199.30:63387] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.81.199.30 request_line = GET /index.php/prakiraan-iklim/prakiraan-musim/prakiraan-musim-hujan/prakiraan-curah-hujan-musim-hujan HTTP/1.1 Request URI RAW = /index.php/prakiraan-iklim/prakiraan-musim/prakiraan-musim-hujan/prakiraan-curah-hujan-musim-hujan Request Basename = prakiraan-curah-hujan-musim-hujan"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-iklim/prakiraan-musim/prakiraan-musim-hujan/prakiraan-curah-hujan-musim-hujan"] [unique_id "aiVnnzg1vQVebn ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-07 10:39:47 (4 days ago)	[Sun Jun 07 17:39:45.045885 2026] [security2:error] [pid 920048:tid 140592440919744] [client 54.81.1 ... show more [Sun Jun 07 17:39:45.045885 2026] [security2:error] [pid 920048:tid 140592440919744] [client 54.81.199.30:23757] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 54.81.199.30 request_line = GET /index.php/publik/kegiatan/555559820-sosialisasi-cyber-security-awareness-bssn-di-upt-bmkg-jawa-timur HTTP/1.1 Request URI RAW = /index.php/publik/kegiatan/555559820-sosialisasi-cyber-security-awareness-bssn-di-upt-bmkg-jawa-timur Request Basename = 555559820-sosialisasi-cyber-security-awareness-bssn-di-upt-bmkg-jawa-timur"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/publik/kegiatan/555559820-sosialisasi-cyber-security-awareness ... show less	Email Spam Hacking
🇫🇷 bigorre.org	2026-06-07 10:36:18 (4 days ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇩🇪 Hugopvigo	2026-06-06 21:32:52 (4 days ago)	"2026-06-06 21:32:52+00:00 54.81.199.30 IP con score alto (100) detectada en el log."	Brute-Force SSH

Showing 1 to 15 of 160 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.76.172.156

🇫🇮 147.185.133.83

🇺🇸 137.184.203.134

🇺🇸 4.36.96.226

🇩🇪 213.209.159.11

🇲🇽 187.191.48.6

🇳🇴 185.243.218.233

🇺🇸 184.105.139.115

🇳🇱 178.16.55.50

🇩🇪 167.94.145.27

🇺🇸 162.216.150.199

🇻🇳 125.212.158.75

🇻🇳 115.84.183.240

🇺🇸 74.207.253.22

🇺🇸 44.223.232.55

🇭🇰 20.205.34.2

🇷🇴 2.57.122.238

🇺🇸 2607:f8b0:4004:1000::12d

🇬🇧 212.48.71.133

🇺🇸 209.250.4.61