JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.234.201.228

54.234.201.228 was found in our database!

This IP was reported 113 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-234-201-228.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.234.201.228

Whois 54.234.201.228

IP Abuse Reports for 54.234.201.228:

This IP address has been reported a total of 113 times from 85 distinct sources. 54.234.201.228 was first reported on August 24th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-10 09:52:37 (2 weeks ago)	Reported from Nginx log analysis 11. Log: 54.234.201.228 - - [10/Jun/2026:xx:xx:xx 0200] "GET /favi ... show more Reported from Nginx log analysis 11. Log: 54.234.201.228 - - [10/Jun/2026:xx:xx:xx 0200] "GET /favicon.ico HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" "-" "US United States Ashburn" "AS14618" "Amazon.com, Inc." show less	Port Scan Brute-Force SSH
Anonymous	2026-06-10 05:28:36 (2 weeks ago)	Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=3232	Port Scan Hacking
🇺🇸 donarev419	2026-06-10 05:12:01 (2 weeks ago)	Connection to port 10443 with data transfer. Data preview:	Port Scan Hacking
🇩🇪 femboy.cat	2026-06-10 01:29:05 (2 weeks ago)	Port scan to tcp/1245 from 54.234.201.228	Brute-Force
🇦🇺 crispi	2026-06-10 00:10:41 (2 weeks ago)	Port scan from 54.234.201.228	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-09 22:40:29 (2 weeks ago)	Honeypot hit: HTTP/1.1 request on 3000 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ... show more Honeypot hit: HTTP/1.1 request on 3000 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 3000 [1] TCP show less	Web App Attack
Anonymous	2026-06-09 21:21:31 (2 weeks ago)	Drop from IP address 54.234.201.228 to tcp-port 8080	Port Scan
🇩🇪 D3vNu11	2026-06-09 17:07:57 (2 weeks ago)	Level: (LOW): Known Attacker via Cowrie IOC Country: United States 1x -> Target Country: Frankreich ... show more Level: (LOW): Known Attacker via Cowrie IOC Country: United States 1x -> Target Country: Frankreich SSH show less	Hacking Brute-Force SSH
🇺🇸 cwytech	2026-06-09 12:52:31 (2 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.	Hacking
🇩🇪 ValtonTahiri	2026-06-09 06:04:48 (2 weeks ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=54.234.201.228; proto=TCP; source_port=31304; target_port=1224; flags=SYN show less	Port Scan
🇩🇪 larse99	2026-06-08 21:00:26 (2 weeks ago)	Detected Scanning / Hacking activity	Port Scan Hacking
🇺🇸 ISPLtd	2026-06-08 12:29:51 (2 weeks ago)	Jun 8 09:29:26 54.234.201.228 TCP SPT=48980 DPT=3000 SYN Jun 8 09:29:27 54.234.201.228 TCP SPT=489 ... show more Jun 8 09:29:26 54.234.201.228 TCP SPT=48980 DPT=3000 SYN Jun 8 09:29:27 54.234.201.228 TCP SPT=48980 DPT=3000 SYN Jun 8 09:29:29 54.234.201.228 TCP SPT=48980 DPT=3000 ... show less	Port Scan
🇺🇸 rellim.com	2026-06-08 09:07:46 (2 weeks ago)	Jun 8 02:07:43 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08 ... show more Jun 8 02:07:43 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=54.234.201.228 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=47024 DF PROTO=TCP SPT=20082 DPT=8443 WINDOW=62727 RES=0x00 SYN URGP=0 Jun 8 02:07:44 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=54.234.201.228 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=47025 DF PROTO=TCP SPT=20082 DPT=8443 WINDOW=62727 RES=0x00 SYN URGP=0 Jun 8 02:07:46 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=54.234.201.228 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=47026 DF PROTO=TCP SPT=20082 DPT=8443 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Admins@FBN	2026-06-08 08:05:47 (2 weeks ago)	FW-PortScan: Traffic Blocked srcport=14786 dstport=11443	Port Scan
🇫🇷 dusfor72	2026-06-08 07:26:24 (2 weeks ago)	aggressive portscan ...	Port Scan

Showing 1 to 15 of 113 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 217.174.149.203

🇪🇬 196.221.116.83

🇳🇱 185.224.128.16

🇧🇪 146.148.116.108

🇩🇿 105.235.136.69

🇧🇩 103.183.62.2

🇬🇧 87.236.176.49

🇷🇴 80.94.92.145

🇵🇭 64.224.98.91

🇱🇹 62.60.130.219

🇱🇹 45.227.254.170

🇺🇸 40.65.222.177

🇮🇳 27.60.32.138

🇩🇪 4.184.246.230

🇺🇸 137.184.151.34

🇮🇳 49.36.220.174

🇭🇰 13.70.7.131

🇺🇸 199.127.63.58

🇬🇧 195.206.182.219

🇩🇪 194.187.176.159