54.205.98.41
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon.com, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14618
- Hostname(s)
- ec2-54-205-98-41.compute-1.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
118 from
86 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Honeypot wireguard: source IP triggered 3+ blocked attempts in 24h (ports: 8443/tcp (HTTPS-alt))
|
Port Scan | |
| 🇩🇪 Ilop |
[v7-22] Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=443, src_ip=54.205.98.41
|
Port Scan Hacking | |
| 🇩🇪 Coinetic AI Security |
Connection to a trap port: 1 attempts on port 9200, 2026-11-14 00:09 - 00:09 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).
|
Port Scan Hacking | |
| 🇮🇩 solusi247.com |
Wazuh rule 31178: L3: Active Response Trigger by ET CINS Active Threat Intelligence Poor Reputation IP group 101: CINS Poor Reputation IP Blocked.
|
Hacking | |
| 🇧🇾 StatsMe |
Date: 2026-11-13T21:41:24.000+00:00 | Action: deny | Port: 21 | Log: Connection Failed
|
Brute-Force SSH Port Scan | |
| 🇪🇸 Linux Fertxo |
Unauthorized connection attempts: 3 hits @ port(s) 1244, protocol(s) tcp
|
Port Scan Hacking | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [443/tcp]
Source port: 58102
TTL: 110
Packet length: 60
|
Port Scan Web App Attack | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
|
Hacking | |
| 🇬🇧 KTSTechnology |
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 3 payload-bearing connection/event(s), 729 payload byte(s) total, maximum payload 243 byte(s). Target port(s): 50050.
|
Port Scan Hacking | |
| 🇩🇪 iNetWorker |
firewall-block, port(s): 12443/tcp
|
Port Scan | |
| 🇹🇷 mixnet |
Port scan: SYN-only probes to 1,022 hosts / 1 port (8000) in 10 minutes. Detected by Mixnet network flow monitoring.
|
Port Scan | |
| 🇳🇱 knock |
Knock-Knock honeypot brute-force: HTTP (1 total hits)
|
Web App Attack | |
| 🇧🇷 SOC-BR |
Trying access in non-authorized port - Source Port 44166 - Destination Port 3389 - Time 2026-11-12 23:34:05 (UTC-3)
|
Port Scan Hacking | |
| 🇩🇪 bancix |
Heimdallr NIDS: Automatic ban triggered. Reason: TRAP_PORT_HIT (porta 3389)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown