54.91.60.230
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon Data Services Northern Virginia
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14618
- Hostname(s)
- ec2-54-91-60-230.compute-1.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
81 from
70 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Drop from IP address 54.91.60.230 to tcp-port 1245
|
Port Scan | |
| 🇺🇸 MPL |
tcp/21 (4 or more attempts)
|
Port Scan | |
| Anonymous |
suricata IPS/IDS detection, ruleset ET SCAN Behavioral Unusually fast Terminal Server Traffic Potential Scan or Infection (Inbound)
|
Port Scan | |
| 🇬🇧 nandadytm |
[2026-11-13 14:47:24] Banned 54.91.60.230 after 3 attempts: Portscan probe on TCP port 3389
|
Port Scan | |
| 🇷🇴 abuse_IP_reporter |
Nov 13 14:25:32 server UFW BLOCK SRC=54.91.60.230 DF PROTO=TCP SPT=60120
|
Port Scan | |
| 🇩🇪 ITSNF |
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=22
|
Port Scan Hacking | |
| 🇹🇷 ugurcoskun |
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — Elasticsearch (9 events in 10min) at 2026-11-13 10:14
|
Hacking | |
| 🇺🇸 pshempel |
VyOS perimeter firewall blocked 39 inbound TCP packets (Subnet sweep across 13 hosts) targeting port(s) [3389].
|
Port Scan Brute-Force | |
| 🇧🇷 mbaute |
Incoming tcp sessions established on 3 different honey sites over the last 24h
|
Port Scan | |
| 🇧🇷 chronos |
HTTPS: Connection attempt to the secure web service, commonly probed for vulnerable web applications. | Port: 443 | Proto: TCP | rDNS: ec2-54-91-60-230.compute-1.amazonaws.com | AS: AS14618 Amazon.com, Inc. | Location: United States, Ashburn (~20km)
|
Web App Attack Port Scan | |
| 🇨🇿 kronos |
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:1600 | alerts5m:1600
|
Port Scan | |
| 🇺🇸 cunning-fox |
Automated web-application probing observed.
|
Web App Attack | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇩🇪 Coinetic AI Security |
Connection to a trap port: 1 attempts on port 22, 2026-11-12 18:24 - 18:24 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).
|
Port Scan Hacking | |
| 🇩🇪 anycast_ac |
Blocked by UFW on baremetal1 [8443/tcp] | SPT: 60590 | TTL: 117 | LEN: 60 | TOS: 0x00 • Reported by: FemboyHolding LTD
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown