JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.235.238.14

54.235.238.14 was found in our database!

This IP was reported 165 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-235-238-14.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.235.238.14

Whois 54.235.238.14

IP Abuse Reports for 54.235.238.14:

This IP address has been reported a total of 165 times from 105 distinct sources. 54.235.238.14 was first reported on July 1st 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-21 15:32:08 (5 hours ago)	suricata IPS/IDS detection, ruleset ET SCAN Behavioral Unusually fast Terminal Server Traffic Potent ... show more suricata IPS/IDS detection, ruleset ET SCAN Behavioral Unusually fast Terminal Server Traffic Potential Scan or Infection (Inbound) show less	Port Scan
Anonymous	2026-07-21 14:49:21 (5 hours ago)	PAD: ModSec_Scanner! detected	Bad Web Bot
🇺🇸 rellim.com	2026-07-21 09:06:15 (11 hours ago)	Jul 21 02:06:12 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08 ... show more Jul 21 02:06:12 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=54.235.238.14 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=58396 DF PROTO=TCP SPT=30484 DPT=3389 WINDOW=62727 RES=0x00 SYN URGP=0 Jul 21 02:06:13 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=54.235.238.14 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=58397 DF PROTO=TCP SPT=30484 DPT=3389 WINDOW=62727 RES=0x00 SYN URGP=0 Jul 21 02:06:15 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=54.235.238.14 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=58398 DF PROTO=TCP SPT=30484 DPT=3389 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 cloudmax	2026-07-21 08:08:37 (12 hours ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇦🇷 Bruno	2026-07-21 07:35:49 (13 hours ago)	Port Scanner: 54.235.238.14	Port Scan
🇩🇪 ISPLtd	2026-07-21 03:59:37 (16 hours ago)	Jul 21 00:59:33 54.235.238.14 TCP SPT=29812 DPT=1245 SYN Jul 21 00:59:34 54.235.238.14 TCP SPT=29812 ... show more Jul 21 00:59:33 54.235.238.14 TCP SPT=29812 DPT=1245 SYN Jul 21 00:59:34 54.235.238.14 TCP SPT=29812 DPT=1245 SYN Jul 21 00:59:36 54.235.238.14 TCP SPT=29812 DPT=1245 ... show less	Port Scan
🇦🇺 LiftUp Hosting	2026-07-20 22:39:57 (22 hours ago)	Honeypot hit: HTTP/1.1 request on 1224 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ... show more Honeypot hit: HTTP/1.1 request on 1224 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 1224 [1] TCP show less	Hacking Bad Web Bot
🇯🇵 www.winos.me	2026-07-20 20:34:46 (1 day ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking
🇺🇸 MPL	2026-07-20 18:50:28 (1 day ago)	tcp/1245 (3 or more attempts)	Port Scan
Anonymous	2026-07-20 17:20:17 (1 day ago)	2026-07-20T19:20:16.458838+02:00 vps kernel: [938875.887331] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa ... show more 2026-07-20T19:20:16.458838+02:00 vps kernel: [938875.887331] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=54.235.238.14 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=113 ID=44805 DF PROTO=TCP SPT=45028 DPT=50050 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇩🇪 centurion	2026-07-20 16:17:20 (1 day ago)	Blocked by UFW on ns02 [10443/tcp] Source port: 31746 TTL: 121 Packet length: 60 TOS: 0x00 This rep ... show more Blocked by UFW on ns02 [10443/tcp] Source port: 31746 TTL: 121 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 ISPLtd	2026-07-20 12:30:32 (1 day ago)	Jul 20 09:29:02 54.235.238.14 TCP SPT=22186 DPT=21 SYN Jul 20 09:29:03 54.235.238.14 TCP SPT=22186 D ... show more Jul 20 09:29:02 54.235.238.14 TCP SPT=22186 DPT=21 SYN Jul 20 09:29:03 54.235.238.14 TCP SPT=22186 DPT=21 SYN Jul 20 09:29:05 54.235.238.14 TCP SPT=22186 DPT=21 SYN ... show less	Port Scan
🇩🇪 cloudmax	2026-07-20 08:05:55 (1 day ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇬🇧 andypiper	2026-07-20 01:02:56 (1 day ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇮🇳 Mr.Singh	2026-07-20 00:30:25 (1 day ago)	NFT blocked 54.235.238.14 on 20-Jul-2026..	Port Scan Brute-Force

Showing 1 to 15 of 165 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.175

🇺🇸 195.184.76.170

🇭🇰 139.198.113.29

🇨🇬 102.141.43.224

🇹🇼 198.235.24.68

🇺🇸 195.184.76.189

🇺🇸 195.184.76.48

🇮🇳 182.95.106.118

🇺🇸 173.239.224.146

🇺🇸 170.231.250.102

🇭🇰 101.36.116.230

🇰🇷 101.36.114.252

🇫🇷 94.23.188.202

🇺🇸 91.230.168.93

🇳🇱 81.19.216.103

🇺🇸 66.132.172.44

🇺🇸 43.172.84.218

🇬🇧 35.203.210.27

🇯🇴 213.139.63.101

🇬🇪 212.58.102.118