JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.85.166.37

Neutral Activity

Abuse confidence score ?

0% Low Risk

58 reports

20 reporters · latest 4 years ago

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-85-166-37.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.85.166.37 has been reported 58 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 54.85.166.37

This IP address has been reported a total of 58 times from 20 distinct sources. 54.85.166.37 was first reported on March 24th 2021, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇬 Tobs007	2022-04-22 10:00:37 (4 years ago)	Portscanning TCP / UDP	Port Scan
🇿🇦 IrisFlower	2021-12-29 18:38:19 (4 years ago)	Unauthorized connection attempt detected from IP address 54.85.166.37 to port 21 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2021-12-29 16:46:58 (4 years ago)	Unauthorized connection attempt detected from IP address 54.85.166.37 to port 80 [J]	Port Scan Hacking
🇲🇩 iHost	2021-05-20 14:54:22 (5 years ago)	Port Scan detected from 54.85.166.37 (US/United States/-). 3 hits in the last 25 seconds; Ports: * ... show more Port Scan detected from 54.85.166.37 (US/United States/-). 3 hits in the last 25 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: May 20 21:54:18 web1 kernel: Firewall: TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.85.166.37 DST=31.131.1.103 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=31565 PROTO=TCP SPT=56857 DPT=19160 WINDOW=1024 RES=0x00 SYN URGP=0 May 20 21:54:18 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.85.166.37 DST=31.131.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=56594 PROTO=TCP SPT=56857 DPT=90 WINDOW=1024 RES=0x00 SYN URGP=0 May 20 21:54:18 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.85.166.37 DST=31.131.1.101 LEN=40 TOS=0x00 PREC=0x00 TTL=225 ID=60489 PROTO=TCP SPT=56857 DPT=50002 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇲🇩 iHost	2021-05-20 08:52:21 (5 years ago)	Port Scan detected from 54.85.166.37 (US/United States/-). 3 hits in the last 271 seconds; Ports: ... show more Port Scan detected from 54.85.166.37 (US/United States/-). 3 hits in the last 271 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: May 20 15:52:19 web1 kernel: Firewall: TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.85.166.37 DST=31.131.1.54 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=9394 PROTO=TCP SPT=55138 DPT=88 WINDOW=1024 RES=0x00 SYN URGP=0 May 20 15:52:19 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.85.166.37 DST=31.131.1.55 LEN=40 TOS=0x00 PREC=0x00 TTL=225 ID=42808 PROTO=TCP SPT=55138 DPT=8084 WINDOW=1024 RES=0x00 SYN URGP=0 May 20 15:52:19 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.85.166.37 DST=31.131.1.53 LEN=40 TOS=0x00 PREC=0x00 TTL=225 ID=51169 PROTO=TCP SPT=55138 DPT=3128 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇲🇩 iHost	2021-05-20 07:52:20 (5 years ago)	Port Scan detected from 54.85.166.37 (US/United States/-). 3 hits in the last 281 seconds; Ports: ... show more Port Scan detected from 54.85.166.37 (US/United States/-). 3 hits in the last 281 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: May 20 14:52:19 web1 kernel: Firewall: TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.85.166.37 DST=31.131.1.52 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=44364 PROTO=TCP SPT=51537 DPT=50002 WINDOW=1024 RES=0x00 SYN URGP=0 May 20 14:52:19 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.85.166.37 DST=31.131.1.54 LEN=40 TOS=0x00 PREC=0x00 TTL=225 ID=36995 PROTO=TCP SPT=51537 DPT=5000 WINDOW=1024 RES=0x00 SYN URGP=0 May 20 14:52:19 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.85.166.37 DST=31.131.1.52 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=10712 PROTO=TCP SPT=51537 DPT=5003 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇲🇩 iHost	2021-05-20 02:51:22 (5 years ago)	Port Scan detected from 54.85.166.37 (US/United States/-). 3 hits in the last 281 seconds; Ports: ... show more Port Scan detected from 54.85.166.37 (US/United States/-). 3 hits in the last 281 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: May 20 09:51:19 web1 kernel: Firewall: TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.85.166.37 DST=31.131.1.36 LEN=40 TOS=0x00 PREC=0x00 TTL=225 ID=4953 PROTO=TCP SPT=53478 DPT=8080 WINDOW=1024 RES=0x00 SYN URGP=0 May 20 09:51:19 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.85.166.37 DST=31.131.1.38 LEN=40 TOS=0x00 PREC=0x00 TTL=225 ID=18403 PROTO=TCP SPT=53478 DPT=8090 WINDOW=1024 RES=0x00 SYN URGP=0 May 20 09:51:19 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=54.85.166.37 DST=31.131.1.37 LEN=40 TOS=0x00 PREC=0x00 TTL=225 ID=41904 PROTO=TCP SPT=53478 DPT=5003 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇹🇭 Sawasdee	2021-05-19 14:59:20 (5 years ago)	Port Scan ...	Port Scan
🇩🇪 Andi	2021-05-14 16:59:19 (5 years ago)	[H1] Blocked by UFW	Port Scan Brute-Force
🇺🇸 FireballDWF	2021-05-11 18:40:15 (5 years ago)	404 NOT FOUND	Web App Attack
🇪🇸 domotuto.com	2021-05-10 21:32:03 (5 years ago)	Mikrotik port scanner detected. EA4GKQ	Port Scan
🇪🇸 domotuto.com	2021-05-08 08:05:02 (5 years ago)	Mikrotik port scanner detected. EA4GKQ	Port Scan
🇪🇸 domotuto.com	2021-05-07 08:05:02 (5 years ago)	Mikrotik port scanner detected. EA4GKQ	Port Scan
🇿🇦 IrisFlower	2021-05-07 02:11:18 (5 years ago)	Unauthorized connection attempt detected from IP address 54.85.166.37 to port 80 [J]	Port Scan Hacking
🇩🇰 bredelund.dk	2021-05-06 10:58:57 (5 years ago)	(2req.)Repeatedly scanning for vulnerabilities	Bad Web Bot

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.211.199

🇧🇷 205.210.31.154

🇹🇼 198.235.24.67

🇪🇬 197.44.15.210

🇺🇸 195.184.76.154

🇺🇸 195.184.76.73

🇵🇱 193.8.187.11

🇨🇴 190.67.26.242

🇬🇹 190.56.51.26

🇺🇸 138.226.111.130

🇨🇳 115.56.170.99

🇷🇺 109.72.227.158

🇷🇴 86.121.74.16

🇨🇦 85.217.149.55

🇺🇸 40.119.46.8

🇺🇸 205.210.31.71

🇧🇪 198.235.24.165

🇺🇸 195.184.76.208

🇳🇱 195.178.110.232

🇦🇷 190.245.193.97