JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.200.70.29

Neutral Activity

Abuse confidence score ?

0% Low Risk

367 reports

195 reporters · latest 3 years ago

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-200-70-29.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.200.70.29 has been reported 367 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 54.200.70.29

Export CSV

This IP address has been reported a total of 367 times from 195 distinct sources. 54.200.70.29 was first reported on October 10th 2022, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Diguid	2022-11-09 17:05:47 (3 years ago)	...	Brute-Force SSH
🇮🇳 Parth Maniar	2022-10-28 08:39:29 (3 years ago)	SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect ... show more SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇩🇪 www.blocklist.de	2022-10-12 21:06:25 (4 years ago)	Lines containing failures of 54.200.70.29 (max 1000) Oct 10 11:29:42 ntop sshd[432856]: AD user ftpu ... show more Lines containing failures of 54.200.70.29 (max 1000) Oct 10 11:29:42 ntop sshd[432856]: AD user ftpuser from 54.200.70.29 port 51980 Oct 10 11:29:42 ntop sshd[432867]: AD user caspida from 54.200.70.29 port 52298 Oct 10 11:29:42 ntop sshd[432858]: AD user guest from 54.200.70.29 port 52318 Oct 10 11:29:42 ntop sshd[432865]: User r.r from 54.200.70.29 not allowed because not listed in AllowUsers Oct 10 11:29:42 ntop sshd[432863]: AD user linaro from 54.200.70.29 port 51994 Oct 10 11:29:42 ntop sshd[432856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.200.70.29 Oct 10 11:29:42 ntop sshd[432866]: AD user pal from 54.200.70.29 port 52074 Oct 10 11:29:42 ntop sshd[432860]: AD user ansible from 54.200.70.29 port 52170 Oct 10 11:29:42 ntop sshd[432859]: AD user nas from 54.200.70.29 port 52342 Oct 10 11:29:42 ntop sshd[432862]: User r.r from 54.200.70.29 not allowed because not listed in AllowUsers Oct 10 11:29:42 ntop sshd[432864........ ------------------------------ show less	FTP Brute-Force Hacking
🇩🇪 www.blocklist.de	2022-10-12 17:43:00 (4 years ago)	Lines containing failures of 54.200.70.29 (max 1000) Oct 10 11:29:42 ntop sshd[432856]: AD user ftpu ... show more Lines containing failures of 54.200.70.29 (max 1000) Oct 10 11:29:42 ntop sshd[432856]: AD user ftpuser from 54.200.70.29 port 51980 Oct 10 11:29:42 ntop sshd[432867]: AD user caspida from 54.200.70.29 port 52298 Oct 10 11:29:42 ntop sshd[432858]: AD user guest from 54.200.70.29 port 52318 Oct 10 11:29:42 ntop sshd[432865]: User r.r from 54.200.70.29 not allowed because not listed in AllowUsers Oct 10 11:29:42 ntop sshd[432863]: AD user linaro from 54.200.70.29 port 51994 Oct 10 11:29:42 ntop sshd[432856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.200.70.29 Oct 10 11:29:42 ntop sshd[432866]: AD user pal from 54.200.70.29 port 52074 Oct 10 11:29:42 ntop sshd[432860]: AD user ansible from 54.200.70.29 port 52170 Oct 10 11:29:42 ntop sshd[432859]: AD user nas from 54.200.70.29 port 52342 Oct 10 11:29:42 ntop sshd[432862]: User r.r from 54.200.70.29 not allowed because not listed in AllowUsers Oct 10 11:29:42 ntop sshd[432864........ ------------------------------ show less	FTP Brute-Force Hacking
Anonymous	2022-10-12 01:52:12 (4 years ago)	Scanning	Port Scan
🇩🇪 IllusionCloud	2022-10-11 22:07:31 (4 years ago)	Invalid user subbu from 54.200.70.29 port 49774	Brute-Force SSH
🇪🇹 aorth	2022-10-11 18:34:48 (4 years ago)	Oct 11 21:01:48 Invalid user tomcat from 54.200.70.29 port 60418	Brute-Force SSH
🇩🇪 formality	2022-10-11 17:59:13 (4 years ago)	Invalid user ftpuser from 54.200.70.29 port 50462	Brute-Force SSH
🇺🇸 MPL	2022-10-11 16:59:35 (4 years ago)	tcp/22	Port Scan
🇩🇪 ipcop.net	2022-10-11 16:12:18 (4 years ago)	Oct 11 18:12:17 gw-de20-01.guestgw.net sshd[178320]: Invalid user bitrix from 54.200.70.29 port 3969 ... show more Oct 11 18:12:17 gw-de20-01.guestgw.net sshd[178320]: Invalid user bitrix from 54.200.70.29 port 39696 Oct 11 18:12:17 gw-de20-01.guestgw.net sshd[178321]: Invalid user king from 54.200.70.29 port 39404 Oct 11 18:12:17 gw-de20-01.guestgw.net sshd[178322]: Invalid user linaro from 54.200.70.29 port 39512 Oct 11 18:12:17 gw-de20-01.guestgw.net sshd[178328]: Invalid user pal from 54.200.70.29 port 39528 Oct 11 18:12:17 gw-de20-01.guestgw.net sshd[178331]: Invalid user nas from 54.200.70.29 port 39464 show less	Brute-Force
🇩🇪 ipcop.net	2022-10-11 16:12:18 (4 years ago)	Oct 11 18:12:17 gw-de20-01.guestgw.net sshd[178320]: Invalid user bitrix from 54.200.70.29 port 3969 ... show more Oct 11 18:12:17 gw-de20-01.guestgw.net sshd[178320]: Invalid user bitrix from 54.200.70.29 port 39696 Oct 11 18:12:17 gw-de20-01.guestgw.net sshd[178321]: Invalid user king from 54.200.70.29 port 39404 Oct 11 18:12:17 gw-de20-01.guestgw.net sshd[178322]: Invalid user linaro from 54.200.70.29 port 39512 Oct 11 18:12:17 gw-de20-01.guestgw.net sshd[178328]: Invalid user pal from 54.200.70.29 port 39528 Oct 11 18:12:17 gw-de20-01.guestgw.net sshd[178331]: Invalid user nas from 54.200.70.29 port 39464 show less	Brute-Force
🇺🇸 MPL	2022-10-11 14:04:31 (4 years ago)	tcp/22 (2 or more attempts)	Port Scan
🇳🇱 applemooz	2022-10-11 13:50:39 (4 years ago)	Oct 11 19:50:37 lnxweb61 sshd[22063]: Did not receive identification string from 54.200.70.29 port 5 ... show more Oct 11 19:50:37 lnxweb61 sshd[22063]: Did not receive identification string from 54.200.70.29 port 53838 Oct 11 19:50:38 lnxweb61 sshd[22065]: Invalid user king from 54.200.70.29 port 53846 Oct 11 19:50:38 lnxweb61 sshd[22076]: Invalid user sa from 54.200.70.29 port 53984 Oct 11 19:50:38 lnxweb61 sshd[22068]: Invalid user account1 from 54.200.70.29 port 54126 ... show less	Brute-Force SSH
🇫🇷 LRNP	2022-10-11 13:45:45 (4 years ago)	Oct 11 17:45:44 neon sshd[298169]: Invalid user caspida from 54.200.70.29 port 39510 Oct 11 17:45:45 ... show more Oct 11 17:45:44 neon sshd[298169]: Invalid user caspida from 54.200.70.29 port 39510 Oct 11 17:45:45 neon sshd[298172]: Invalid user alex from 54.200.70.29 port 39278 Oct 11 17:45:45 neon sshd[298168]: Invalid user account1 from 54.200.70.29 port 39316 ... show less	Brute-Force SSH
🇩🇪 www.blocklist.de	2022-10-11 13:43:09 (4 years ago)	Lines containing failures of 54.200.70.29 (max 1000) Oct 10 11:29:42 ntop sshd[432856]: AD user ftpu ... show more Lines containing failures of 54.200.70.29 (max 1000) Oct 10 11:29:42 ntop sshd[432856]: AD user ftpuser from 54.200.70.29 port 51980 Oct 10 11:29:42 ntop sshd[432867]: AD user caspida from 54.200.70.29 port 52298 Oct 10 11:29:42 ntop sshd[432858]: AD user guest from 54.200.70.29 port 52318 Oct 10 11:29:42 ntop sshd[432865]: User r.r from 54.200.70.29 not allowed because not listed in AllowUsers Oct 10 11:29:42 ntop sshd[432863]: AD user linaro from 54.200.70.29 port 51994 Oct 10 11:29:42 ntop sshd[432856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.200.70.29 Oct 10 11:29:42 ntop sshd[432866]: AD user pal from 54.200.70.29 port 52074 Oct 10 11:29:42 ntop sshd[432860]: AD user ansible from 54.200.70.29 port 52170 Oct 10 11:29:42 ntop sshd[432859]: AD user nas from 54.200.70.29 port 52342 Oct 10 11:29:42 ntop sshd[432862]: User r.r from 54.200.70.29 not allowed because not listed in AllowUsers Oct 10 11:29:42 ntop sshd[432864........ ------------------------------ show less	FTP Brute-Force Hacking

Showing 1 to 15 of 367 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 201.79.24.29

🇩🇪 142.93.104.164

🇰🇪 105.163.156.31

🇫🇷 51.254.130.71

🇳🇱 34.178.62.0

🇺🇸 20.15.133.175

🇺🇸 174.138.39.41

🇺🇸 147.185.132.243

🇲🇦 105.74.193.87

🇭🇰 101.79.165.43

🇷🇺 94.241.197.139

🇪🇬 41.38.91.188

🇨🇳 220.202.112.192

🇺🇸 172.172.193.200

🇺🇸 162.217.103.68

🇺🇸 157.55.39.225

🇨🇳 106.227.76.197

🇳🇱 81.19.216.76

🇰🇼 62.215.140.109

🇲🇽 46.250.174.14