54.174.133.101

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
51 reports
40 reporters · latest 8 hours ago
ISP
Amazon Technologies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-54-174-133-101.compute-1.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
51 from 40 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 13 🇩🇪 Germany 12 🇺🇸 United States of America 8
Most common categories Port Scan 39 Hacking 17 Brute-Force 10 SSH 9 Web App Attack 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 Melua
Attempted connection to SSH tarpit
Brute-Force SSH
🇫🇷 GoodOldTOS
Un-authorized connection to SSH
Hacking SSH
🇫🇷 mailox
Unauthorized SSH connection on tarpit ...
SSH
🇫🇷 TheHoneyPotter
Honeypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2026-11-07T20:16:40.148Z ACCEPT host=::ffff:54.174.133.101 port=55160 fd=4 n=1/4096 ...
Brute-Force SSH
🇫🇷 cityhunter_rhone
Connection attempts on sensitive port(s) 22 (4) of a private server (ports closed to the public, firewall log). Mercurius-Guide automated detection.
Port Scan Hacking
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇺🇸 3rdKey
OpenCanary honeypot hit on port 3389 (no legitimate service runs there); logtype 14001. Automated report.
Port Scan Brute-Force Exploited Host
🇫🇷 uthul
T-Pot honeypot: 6 hits on ports [3232] (automated)
Port Scan
🇬🇧 KTSTechnology
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
Port Scan
🇫🇷 Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 4 payload-bearing connection/event(s), 972 payload byte(s) total, maximum payload 243 byte(s). Target port(s): 3232.
Port Scan Hacking
🇨🇿 david1117
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=3000
Port Scan Hacking
🇩🇪 iNetWorker
firewall-block, port(s): 8443/tcp
Port Scan
🇺🇸 HamSammich
Automated sensor: 1 HTTPS connection/probe attempts over the last 24h (latest 2026-11-07T07:38Z).
Port Scan Web App Attack
🇩🇪 von44bis33
Cowrie SSH honeypot: unauthorized login attempts/commands observed.
Brute-Force SSH
🇩🇪 _ArminS_
SP-Scan 49912:3000 detected 2026.11.06 22:45:01 blocked until 2026.12.26 15:47:48
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 130.49.150.98
🇺🇸 74.208.32.138
🇺🇸 18.209.201.119
🇧🇩 223.25.254.240
🇸🇪 159.253.220.70
🇫🇮 147.185.133.33
🇪🇸 79.116.219.91
🇺🇸 70.183.226.17
🇨🇳 58.59.233.137
🇰🇿 46.34.195.16
🇧🇷 181.191.46.48
🇺🇸 161.77.39.83
🇧🇩 116.206.255.159
🇬🇧 82.20.24.116
🇺🇸 50.6.201.228
🇧🇷 191.180.161.164
🇪🇸 185.192.183.130
🇺🇸 20.84.153.187
🇺🇸 205.210.31.75
🇺🇸 205.185.159.65
feedback