54.89.161.200

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
132 reports
72 reporters · latest 11 months ago
ISP
Amazon Technologies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-54-89-161-200.compute-1.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

54.89.161.200 has been reported 132 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
132 from 72 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇿🇦 slartybartfast69420blazit
Fail2ban picked up 54.89.161.200 attacking nginx
Web App Attack
🇿🇦 slartybartfast69420blazit
Fail2ban picked up 54.89.161.200 attacking nginx
Web App Attack
🇿🇦 slartybartfast69420blazit
Fail2ban picked up 54.89.161.200 attacking nginx
Web App Attack
🇿🇦 slartybartfast69420blazit
Fail2ban picked up 54.89.161.200 attacking nginx
Web App Attack
🇿🇦 slartybartfast69420blazit
Fail2ban picked up 54.89.161.200 attacking nginx
Web App Attack
🇨🇳 ThreatBook.io
ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/54.89.161.200 2025-09-10 04:53:57 / 2025-09-10 04:39:58 / 2025-09-10 02:26:32 / 2025-09-10 02:21:34 / 2025-09-10 05:59:50 /
SSH
🇩🇪 ISPLtd
Sep 10 22:32:17 54.89.161.200 TCP SPT=20372 DPT=8443 SYN Sep 10 22:32:18 54.89.161.200 TCP SPT=20372 DPT=8443 SYN Sep 10 22:32:20 54.89.161.200 TCP SPT=20372 DPT=8443 ...
Port Scan
🇩🇪 sato
*Port Scan* detected from 54.89.161.200 (US/United States/ec2-54-89-161-200.compute-1.amazonaws.com).
Port Scan
🇳🇱 Study Bitcoin 🤗
Port probe to tcp/1244 [srv125]
Port Scan
🇮🇳 Parth Maniar
This IP address carried out 4 port scanning attempts on 09-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Port Scan SSH
🇵🇱 mkey
[2025-09-10 04:27:30] Unauthorized connection probe. Source on blacklist ((spp_reputation) packets blacklisted)
Port Scan Hacking
🇫🇷 sbocquet
Port 22 scanned from 54.89.161.200:42058.
Port Scan
🇯🇵 mkaraki
1757474460 # Service_probe # SIGNATURE_SEND # source_ip:54.89.161.200 # dst_port:8443 ...
Port Scan
🇫🇷 Lunik
Malicious access
Web Spam Port Scan Web App Attack
🇩🇰 swrlly
ssh bruteforce
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇿 198.163.193.174
🇺🇸 45.140.206.198
🇳🇱 5.2.69.86
🇵🇭 210.5.117.238
🇪🇨 186.46.1.172
🇳🇱 138.226.239.234
🇸🇪 94.255.245.175
🇬🇧 87.106.65.126
🇫🇷 85.217.140.23
🇺🇸 66.249.73.4
🇮🇩 43.129.56.70
🇮🇩 202.158.36.50
🇺🇸 192.155.90.80
🇮🇷 185.142.157.54
🇺🇸 185.61.221.38
🇳🇱 138.226.239.91
🇸🇮 130.12.182.117
🇨🇳 101.89.76.249
🇺🇸 66.132.186.176
feedback