JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.208.49.87

54.208.49.87 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 0%: ?

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-208-49-87.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.208.49.87

Whois 54.208.49.87

IP Abuse Reports for 54.208.49.87:

This IP address has been reported a total of 22 times from 22 distinct sources. 54.208.49.87 was first reported on April 1st 2026, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 somosbr	2026-04-02 12:55:26 (4 months ago)	[2026-04-02T12:55:26Z] Unsolicited scan from 54.208.49.87 to port 22/tcp	Port Scan
🇵🇱 skillhost.pl	2026-04-02 10:20:43 (4 months ago)	Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ... show more Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe. show less	Brute-Force SSH
🇩🇪 jwally	2026-04-02 09:49:56 (4 months ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 jennij	2026-04-02 09:05:36 (4 months ago)	Fail2Ban sshd ban on luckymc.gg ...	Brute-Force SSH
🇨🇿 lp	2026-04-02 04:48:50 (4 months ago)	SSH Brute force: 432 attempts were recorded from 54.208.49.87 2026-04-02T05:23:57+02:00 Connection c ... show more SSH Brute force: 432 attempts were recorded from 54.208.49.87 2026-04-02T05:23:57+02:00 Connection closed by authenticating user root 54.208.49.87 port 52317 [preauth] 2026-04-02T05:23:58+02:00 Connection closed by authenticating user root 54.208.49.87 port 51480 [preauth] 2026-04-02T05:23:58+02:00 Connection closed by authenticating user root 54.208.49.87 port 7794 [preauth] 2026-04-02T05:23:59+02:00 Connection closed by authenticating user root 54.208.49.87 port 44800 [preauth] 2026-04-02T05:24:00+02:00 Connection closed by authenticating user root 54.208.49.87 port 16203 [preauth] 2026-04-02T05:24:00+02:00 Connection closed by authenticating user root 54.208.49.87 port 58628 [preauth] 2026-04-02T05:24:01+02:00 Connection closed by authenticating user root 54.208.49.87 port 58442 [preauth] 2026-04-02T05:24:02+02:00 Connection closed by authenticating user root 54.208.49.87 port 42337 [ show less	Brute-Force SSH
🇳🇱 EGP Abuse Dept	2026-04-02 04:24:35 (4 months ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇺🇸 ezscale	2026-04-02 03:32:06 (4 months ago)	SSH brute force on support (3 failures). Detected by fail2ban.	Brute-Force SSH
🇩🇪 lmathe	2026-04-02 00:25:13 (4 months ago)	2026-04-02T02:25:12.249796+02:00 lin2me-srv sshd[3097798]: Invalid user user from 54.208.49.87 port ... show more 2026-04-02T02:25:12.249796+02:00 lin2me-srv sshd[3097798]: Invalid user user from 54.208.49.87 port 57716 2026-04-02T02:25:12.478217+02:00 lin2me-srv sshd[3097800]: Connection from 54.208.49.87 port 58322 on 185.39.222.142 port 22 rdomain "" 2026-04-02T02:25:12.889848+02:00 lin2me-srv sshd[3097800]: Invalid user user from 54.208.49.87 port 58322 ... show less	Brute-Force SSH
🇧🇬 MazenHost	2026-04-02 00:20:26 (4 months ago)	Apr 2 03:20:13 valcrest sshd[65692]: Failed password for root from 54.208.49.87 port 57697 ssh2 Apr ... show more Apr 2 03:20:13 valcrest sshd[65692]: Failed password for root from 54.208.49.87 port 57697 ssh2 Apr 2 03:20:15 valcrest sshd[65694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.208.49.87 user=root Apr 2 03:20:17 valcrest sshd[65694]: Failed password for root from 54.208.49.87 port 14564 ssh2 Apr 2 03:20:20 valcrest sshd[65696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.208.49.87 user=root Apr 2 03:20:22 valcrest sshd[65696]: Failed password for root from 54.208.49.87 port 45102 ssh2 Apr 2 03:20:24 valcrest sshd[65698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.208.49.87 user=root Apr 2 03:20:25 valcrest sshd[65698]: Failed password for root from 54.208.49.87 port 18695 ssh2 ... show less	Brute-Force SSH
🇬🇧 Silly Development	2026-04-01 23:45:04 (4 months ago)	Apr 1 23:45:01 vps sshd[2032356]: Failed password for root from 54.208.49.87 port 58902 ssh2 Apr 1 ... show more Apr 1 23:45:01 vps sshd[2032356]: Failed password for root from 54.208.49.87 port 58902 ssh2 Apr 1 23:45:02 vps sshd[2032358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.208.49.87 user=root Apr 1 23:45:04 vps sshd[2032358]: Failed password for root from 54.208.49.87 port 17125 ssh2 ... show less	Brute-Force SSH
🇫🇷 forhosting	2026-04-01 23:25:22 (4 months ago)	Apr 2 01:25:14 unifi sshd[861617]: Failed password for root from 54.208.49.87 port 32657 ssh2 Apr ... show more Apr 2 01:25:14 unifi sshd[861617]: Failed password for root from 54.208.49.87 port 32657 ssh2 Apr 2 01:25:16 unifi sshd[861628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.208.49.87 user=root Apr 2 01:25:17 unifi sshd[861628]: Failed password for root from 54.208.49.87 port 15487 ssh2 Apr 2 01:25:20 unifi sshd[861630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.208.49.87 user=root Apr 2 01:25:22 unifi sshd[861630]: Failed password for root from 54.208.49.87 port 57283 ssh2 ... show less	Brute-Force SSH
🇨🇱 gbzret4d	2026-04-01 23:20:56 (4 months ago)	Blocked by CrowdSec. Scenario: crowdsecurity/ssh-bf	Brute-Force SSH
🇵🇱 agiso.dev	2026-04-01 23:10:43 (4 months ago)	2026-04-02T00:10:34.085647+01:00 ligmaserver sshd[187575]: Failed password for root from 54.208.49.8 ... show more 2026-04-02T00:10:34.085647+01:00 ligmaserver sshd[187575]: Failed password for root from 54.208.49.87 port 4782 ssh2 2026-04-02T00:10:35.974168+01:00 ligmaserver sshd[187577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.208.49.87 user=root 2026-04-02T00:10:37.539446+01:00 ligmaserver sshd[187577]: Failed password for root from 54.208.49.87 port 53453 ssh2 2026-04-02T00:10:39.661877+01:00 ligmaserver sshd[187579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.208.49.87 user=root 2026-04-02T00:10:42.110178+01:00 ligmaserver sshd[187579]: Failed password for root from 54.208.49.87 port 30445 ssh2 ... show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-04-01 22:45:00 (4 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 paradoxnetworks	2026-04-01 22:41:00 (4 months ago)	2026-04-01T22:40:58.342208+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[166984]: Invalid user user from ... show more 2026-04-01T22:40:58.342208+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[166984]: Invalid user user from 54.208.49.87 port 36608 2026-04-01T22:40:58.754661+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[166986]: Invalid user user from 54.208.49.87 port 65168 2026-04-01T22:40:59.168907+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[166989]: Invalid user user from 54.208.49.87 port 11686 ... show less	Brute-Force SSH

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.149

🇬🇧 78.153.140.93

🇺🇸 64.62.156.90

🇺🇸 47.77.182.54

🇺🇸 205.210.31.66

🇦🇷 190.104.39.129

🇲🇽 187.174.238.116

🇫🇮 147.185.133.1

🇨🇳 111.207.227.228

🇺🇸 66.249.79.199

🇨🇳 60.5.156.225

🇦🇷 45.229.84.35

🇭🇰 45.114.125.22

🇮🇩 41.216.177.55

🇦🇷 186.39.125.21

🇦🇷 181.177.197.105

🇬🇧 151.240.191.209

🇫🇮 147.185.133.190

🇺🇸 147.185.132.44

🇺🇸 100.50.17.159