JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.218.230.32

54.218.230.32 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-218-230-32.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.218.230.32

Whois 54.218.230.32

IP Abuse Reports for 54.218.230.32:

This IP address has been reported a total of 56 times from 48 distinct sources. 54.218.230.32 was first reported on July 1st 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 rjdefrancisco	2026-07-02 07:05:49 (1 week ago)	Unwanted traffic detected by honeypot on July 01, 2026: port scans (8 port 22 scans).	Port Scan Brute-Force SSH
🇩🇰 jodk	2026-07-02 03:02:14 (1 week ago)	SSH brute-force + malware deployment (Redtail miner). 8 hits on honeypot. Uploaded clean.sh, setup.s ... show more SSH brute-force + malware deployment (Redtail miner). 8 hits on honeypot. Uploaded clean.sh, setup.sh, redtail binaries. Injected SSH backdoor key. show less	Brute-Force SSH
🇩🇪 shr4pnel	2026-07-02 03:01:34 (1 week ago)	SSH login attempts (endlessh): 2026-07-02T00:51:34.970Z ACCEPT host=::ffff:54.218.230.32 port=58070 ... show more SSH login attempts (endlessh): 2026-07-02T00:51:34.970Z ACCEPT host=::ffff:54.218.230.32 port=58070 fd=6 n=4/4096 show less	Brute-Force SSH
🇩🇪 iamimmanuelraj	2026-07-02 02:31:02 (1 week ago)	Fail2ban SSH Bruteforce - Port = 22 - Failures = 5 - Time = 1782959461.5406	Brute-Force SSH
🇩🇪 ipcop.net	2026-07-02 02:29:25 (1 week ago)	2026-07-02T03:29:18.336644+01:00 web01.schwick.de sshd-session[513631]: Connection closed by 54.218. ... show more 2026-07-02T03:29:18.336644+01:00 web01.schwick.de sshd-session[513631]: Connection closed by 54.218.230.32 port 43176 [preauth] 2026-07-02T03:29:19.682962+01:00 web01.schwick.de sshd-session[513633]: Connection closed by 54.218.230.32 port 43180 [preauth] 2026-07-02T03:29:21.517909+01:00 web01.schwick.de sshd-session[513640]: Unable to negotiate with 54.218.230.32 port 43196: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth] 2026-07-02T03:29:23.443884+01:00 web01.schwick.de sshd-session[513643]: Connection closed by 54.218.230.32 port 43208 [preauth] 2026-07-02T03:29:24.812796+01:00 web01.schwick.de sshd-session[513649]: Connection closed by 54.218.230.32 port 43224 [preauth] show less	Brute-Force
🇮🇸 EricTheRedFL	2026-07-02 02:26:38 (1 week ago)	2026-07-01T22:26:35.149271-04:00 mailstore.ab-data.us sshd-session[279168]: Connection closed by 54. ... show more 2026-07-01T22:26:35.149271-04:00 mailstore.ab-data.us sshd-session[279168]: Connection closed by 54.218.230.32 port 36058 [preauth] 2026-07-01T22:26:36.440578-04:00 mailstore.ab-data.us sshd-session[279170]: Connection closed by 54.218.230.32 port 36070 [preauth] 2026-07-01T22:26:36.845649-04:00 mailstore.ab-data.us sshd-session[279172]: Unable to negotiate with 54.218.230.32 port 36074: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth] 2026-07-01T22:26:37.487639-04:00 mailstore.ab-data.us sshd-session[279174]: Unable to negotiate with 54.218.230.32 port 36078: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth] ... show less	Brute-Force SSH
🇺🇸 66691337	2026-07-02 02:20:57 (1 week ago)	2026-07-02T02:20:25.055Z ACCEPT host=54.218.230.32 port=49254 fd=4 n=1/4096 2026-07-02T02:20:25.055Z ... show more 2026-07-02T02:20:25.055Z ACCEPT host=54.218.230.32 port=49254 fd=4 n=1/4096 2026-07-02T02:20:25.055Z ACCEPT host=54.218.230.32 port=49254 fd=4 n=1/4096 2026-07-02T02:20:35.620Z ACCEPT host=54.218.230.32 port=33296 fd=5 n=2/4096 2026-07-02T02:20:35.620Z ACCEPT host=54.218.230.32 port=33296 fd=5 n=2/4096 2026-07-02T02:20:46.050Z ACCEPT host=54.218.230.32 port=38794 fd=6 n=3/4096 2026-07-02T02:20:46.050Z ACCEPT host=54.218.230.32 port=38794 fd=6 n=3/4096 2026-07-02T02:20:56.684Z ACCEPT host=54.218.230.32 port=49310 fd=4 n=3/4096 2026-07-02T02:20:56.684Z ACCEPT host=54.218.230.32 port=49310 fd=4 n=3/4096 ... show less	Brute-Force SSH
🇩🇪 F63NNKJ4	2026-07-02 02:12:13 (1 week ago)	...	Brute-Force SSH
🇩🇪 vanlueckn	2026-07-02 02:09:24 (1 week ago)	2026-07-01T22:09:22.057353-04:00 steam-cache sshd-session[1138351]: Connection closed by 54.218.230. ... show more 2026-07-01T22:09:22.057353-04:00 steam-cache sshd-session[1138351]: Connection closed by 54.218.230.32 port 37374 [preauth] 2026-07-01T22:09:23.336617-04:00 steam-cache sshd-session[1138353]: Connection closed by 54.218.230.32 port 37380 [preauth] 2026-07-01T22:09:23.895791-04:00 steam-cache sshd-session[1138357]: Unable to negotiate with 54.218.230.32 port 37396: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth] ... show less	Brute-Force SSH
🇺🇸 m2jest1c	2026-07-02 02:09:08 (1 week ago)	2026-07-01T22:09:07.293892 rhel-20gb-ash-1 sshd[85249]: Connection closed by 54.218.230.32 port 3658 ... show more 2026-07-01T22:09:07.293892 rhel-20gb-ash-1 sshd[85249]: Connection closed by 54.218.230.32 port 36584 [preauth] ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-07-02 02:08:56 (1 week ago)	2026-07-02T04:08:50.095606+02:00 gw-de39-01.guestgw.net sshd[719997]: Connection closed by 54.218.23 ... show more 2026-07-02T04:08:50.095606+02:00 gw-de39-01.guestgw.net sshd[719997]: Connection closed by 54.218.230.32 port 44996 [preauth] 2026-07-02T04:08:51.304902+02:00 gw-de39-01.guestgw.net sshd[720005]: Connection closed by 54.218.230.32 port 45000 [preauth] 2026-07-02T04:08:52.134678+02:00 gw-de39-01.guestgw.net sshd[720010]: Unable to negotiate with 54.218.230.32 port 45004: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth] 2026-07-02T04:08:53.810339+02:00 gw-de39-01.guestgw.net sshd[720016]: Unable to negotiate with 54.218.230.32 port 45018: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth] 2026-07-02T04:08:55.636651+02:00 gw-de39-01.guestgw.net sshd[720026]: Connection closed by 54.218.230.32 port 60332 [preauth] show less	Brute-Force
Anonymous	2026-07-02 01:58:42 (1 week ago)	Honeypot hit: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-paramiko_3.4.1 Re ... show more Honeypot hit: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-paramiko_3.4.1 Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH Port Scan
Anonymous	2026-07-02 01:55:30 (1 week ago)	2026-07-01T21:55:26.297202-04:00 sshd-session: Connection closed by 54.218.230.32 port 57188 [preaut ... show more 2026-07-01T21:55:26.297202-04:00 sshd-session: Connection closed by 54.218.230.32 port 57188 [preauth] 2026-07-01T21:55:29.389600-04:00 sshd-session: Connection closed by 54.218.230.32 port 57218 [preauth] show less	Brute-Force SSH
🇰🇷 2048	2026-07-02 01:55:09 (1 week ago)	SSH brute-force detected on no3 Source IP: 54.218.230.32 Service: sshd Port: 22	Brute-Force SSH
🇩🇪 vanlueckn	2026-07-02 01:47:00 (1 week ago)	2026-07-02T01:46:57.492674+00:00 wolfscastlemailcow sshd-session[2578217]: Connection closed by 54.2 ... show more 2026-07-02T01:46:57.492674+00:00 wolfscastlemailcow sshd-session[2578217]: Connection closed by 54.218.230.32 port 47130 [preauth] 2026-07-02T01:46:58.848122+00:00 wolfscastlemailcow sshd-session[2578225]: Connection closed by 54.218.230.32 port 47134 [preauth] 2026-07-02T01:46:59.502601+00:00 wolfscastlemailcow sshd-session[2578240]: Unable to negotiate with 54.218.230.32 port 47136: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 160.187.180.146

🇵🇱 82.22.40.246

🇩🇪 193.124.20.253

🇨🇳 182.44.26.211

🇺🇸 173.244.60.241

🇭🇰 114.111.53.214

🇺🇸 66.132.172.238

🇱🇹 62.60.130.219

🇺🇸 2a06:98c0:3600::103

🇺🇾 190.133.41.17

🇸🇪 176.125.241.253

🇮🇳 122.160.142.194

🇷🇺 109.195.14.161

🇮🇪 108.129.246.204

🇧🇩 103.133.246.73

🇮🇳 80.225.241.76

🇳🇱 45.148.10.238

🇿🇲 41.60.164.85

🇺🇸 104.28.204.176

🇮🇳 103.178.104.183