JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.91.228.244

54.91.228.244 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-91-228-244.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.91.228.244

Whois 54.91.228.244

IP Abuse Reports for 54.91.228.244:

This IP address has been reported a total of 134 times from 90 distinct sources. 54.91.228.244 was first reported on July 1st 2026, and the most recent report was 40 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-18 04:17:13 (40 minutes ago)	Blocked by firewall on hugin [1224/tcp] \| Rule: UFW \| SPT: 31864 \| TTL: 122 \| LEN: 60 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [1224/tcp] \| Rule: UFW \| SPT: 31864 \| TTL: 122 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 bescared	2026-07-18 04:17:13 (40 minutes ago)	F2B - Malicious activity detected. Excessive port scans. -151302cd-	Port Scan
🇺🇸 LotPhantom	2026-07-18 04:01:09 (56 minutes ago)	54.91.228.244 - - [18/Jul/2026:04:00:53 +0000] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT ... show more 54.91.228.244 - - [18/Jul/2026:04:00:53 +0000] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" "0" ... show less	Web App Attack
🇸🇬 securejdprop	2026-07-18 04:00:53 (56 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Thr ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Threat Intelligence Poor Reputation IP group 98). show less	Hacking Web App Attack
🇺🇸 Choice Tech LLC	2026-07-17 19:05:04 (9 hours ago)	Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=56001	Port Scan Hacking
🇭🇰 sandra361	2026-07-17 16:41:22 (12 hours ago)	Port scan detected: 8 attempts across 1 port (1244). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=54.91.22 ... show more Port scan detected: 8 attempts across 1 port (1244). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=54.91.228.244 LEN=40 TOS=0x14 PREC=0x00 TTL=118 ID=38389 DF PROTO=TCP SPT=55130 DPT=1244 WINDOW=62727 RES=0x00 ACK URGP=0 show less	Port Scan
🇺🇸 rellim.com	2026-07-17 09:21:28 (19 hours ago)	Jul 17 02:21:25 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08 ... show more Jul 17 02:21:25 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=54.91.228.244 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=55679 DF PROTO=TCP SPT=32050 DPT=3389 WINDOW=62727 RES=0x00 SYN URGP=0 Jul 17 02:21:26 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=54.91.228.244 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=55680 DF PROTO=TCP SPT=32050 DPT=3389 WINDOW=62727 RES=0x00 SYN URGP=0 Jul 17 02:21:28 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=54.91.228.244 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=109 ID=55681 DF PROTO=TCP SPT=32050 DPT=3389 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇷 diego	2026-07-17 05:08:27 (23 hours ago)	[rede-168-134] 07/17/2026-02:08:27.576075, 54.91.228.244, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-168-134] 07/17/2026-02:08:27.576075, 54.91.228.244, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 97 show less	Hacking
🇺🇸 donarev419	2026-07-17 05:04:16 (23 hours ago)	Connection to port 3000 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144:3000 ... show more Connection to port 3000 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144:3000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) App show less	Port Scan Hacking
🇩🇪 kingjan1999	2026-07-17 04:08:22 (1 day ago)	Blocked by UFW [7443/tcp] \| SPT: 50726 \| TTL: 122 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [7443/tcp] \| SPT: 50726 \| TTL: 122 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 m_vlasov	2026-07-17 02:41:36 (1 day ago)	SSH/Telnet honeypot: 0 login attempts, 1 sessions, 0 shell commands.	Port Scan
🇬🇧 Deveroonie	2026-07-17 02:27:54 (1 day ago)	2026-07-17T02:27:54.334578+00:00 instance-20241019-1127 sshd[3261250]: Connection closed by 54.91.22 ... show more 2026-07-17T02:27:54.334578+00:00 instance-20241019-1127 sshd[3261250]: Connection closed by 54.91.228.244 port 21760 [preauth] ... show less	Hacking Brute-Force SSH
🇩🇪 ITSNF	2026-07-16 21:15:05 (1 day ago)	Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=12443	Port Scan Hacking
🇫🇷 Hiigara	2026-07-16 20:01:04 (1 day ago)	connection attempt : 54.91.228.244 on port : tcp/22 (SSH)	Port Scan
🇺🇸 technash	2026-07-16 16:34:31 (1 day ago)	Unauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fo ... show more Unauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fortinet/Sentinel] show less	Port Scan

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 47.187.26.218

🇸🇬 43.128.122.242

🇳🇱 193.110.157.47

🇧🇼 168.167.72.132

🇺🇸 162.216.149.226

🇺🇸 161.35.61.64

🇧🇷 129.121.47.136

🇱🇹 81.30.98.44

🇩🇪 69.5.169.227

🇩🇪 69.5.169.145

🇺🇸 57.141.0.67

🇸🇬 47.84.64.223

🇬🇧 31.14.254.70

🇹🇼 198.235.24.122

🇩🇪 167.94.146.52

🇺🇸 162.216.150.190

🇺🇸 162.216.149.158

🇺🇸 147.185.132.58

🇵🇱 95.214.53.196

🇮🇳 49.43.93.105