54.145.28.154
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon Data Services Northern Virginia
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14618
- Hostname(s)
- ec2-54-145-28-154.compute-1.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
81 from
60 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 iNetWorker |
trying to access non-authorized port
|
Port Scan | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Unauthorized traffic (243 bytes of payload); 31337 [1] TCP
|
Port Scan | |
| 🇵🇱 bart@ |
|
Port Scan | |
| 🇺🇸 Choice Tech LLC |
Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=8000
|
Port Scan Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 2 application-level events across 2 source port(s). Sensor(s): Tanner.
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 16 hits on ports [8000, 9200] (automated)
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 6 hits on ports [9200] (automated)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8443 (141 or more attempts)
|
Port Scan | |
| 🇺🇸 jbettigole |
MikroTik RouterOS: repeated connection attempts against non-public admin/service ports (SSH/Telnet/FTP/Winbox/API/WWW) triggering escalating 5m/15m/1h/1d blacklist
|
Brute-Force Hacking | |
| 🇧🇷 mbaute |
Incoming tcp sessions established on 3 different honey sites in the last 24h
|
Port Scan | |
| 🇹🇷 mixnet |
Port scan: SYN-only probes to 1,022 hosts / 1 port (8443) in 10 minutes. Detected by Mixnet network flow monitoring.
|
Port Scan | |
| 🇸🇪 venix |
Unauthorized connection attempt detected from IP address 54.145.28.154 to port 8443 (compute01.malmo)
|
Brute-Force Exploited Host | |
| 🇷🇺 dnsbd.tech |
nftables: Port scan (TCP:12443) [srv1]
|
Port Scan Hacking | |
| 🇺🇸 leasj |
Observed Threat-intel match: ThreatIntel match (100% confidence): ["Botnet"] - MSTIC HoneyPot: An attacker used a brute force attack to gain access to a service or device [Microsoft Defender Threat Intelligence]
|
Hacking | |
| 🇨🇿 Prcek |
PortScan:HOST=54.145.28.154,DPORTS=22
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown