JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.90.129.148

52.90.129.148 was found in our database!

This IP was reported 634 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-52-90-129-148.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.90.129.148

Whois 52.90.129.148

IP Abuse Reports for 52.90.129.148:

This IP address has been reported a total of 634 times from 247 distinct sources. 52.90.129.148 was first reported on July 1st 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 hxsain	2026-09-16 12:27:41 (2 hours ago)	Blocked by UFW on fr2 [8080/tcp] \| SPT: 44406 \| TTL: 113 \| LEN: 60 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on fr2 [8080/tcp] \| SPT: 44406 \| TTL: 113 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Tsumugi Kotobuki	2026-09-16 10:03:10 (4 hours ago)	Port Scan on Honeypot \| Ports: 3389/RDP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 114 \| Len: 60B \| Win ... show more Port Scan on Honeypot \| Ports: 3389/RDP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 114 \| Len: 60B \| Win: 62727(1) \| rDNS: ec2-52-90-129-148.compute-1.amazonaws.com \| F2B/ufw-honeypot@2026-09-16T10:03:10Z show less	Port Scan Hacking
🇺🇸 donarev419	2026-09-16 08:36:31 (6 hours ago)	Connection to port 443 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 MPL	2026-09-15 18:52:14 (19 hours ago)	tcp/3000 (3 or more attempts)	Port Scan
Anonymous	2026-09-15 17:23:05 (21 hours ago)	2026-09-15T19:23:05.031734+02:00 vps kernel: [5863787.185888] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-09-15T19:23:05.031734+02:00 vps kernel: [5863787.185888] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=52.90.129.148 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=111 ID=59611 DF PROTO=TCP SPT=15664 DPT=9200 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 ISPLtd	2026-09-15 12:29:29 (1 day ago)	Sep 15 09:29:24 52.90.129.148 TCP SPT=15634 DPT=1245 SYN Sep 15 09:29:25 52.90.129.148 TCP SPT=15634 ... show more Sep 15 09:29:24 52.90.129.148 TCP SPT=15634 DPT=1245 SYN Sep 15 09:29:25 52.90.129.148 TCP SPT=15634 DPT=1245 SYN Sep 15 09:29:27 52.90.129.148 TCP SPT=15634 DPT=1245 ... show less	Port Scan
🇦🇹 Pingger Shikkoken	2026-09-15 03:26:04 (1 day ago)	2026-09-15T03:26:04+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-09-15T03:26:04+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=52.90.129.148 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=117 ID=52471 DF PROTO=TCP SPT=57026 DPT=21 WINDOW=62727 RES=0x00 SYN URGP=0 2026-09-15T03:26:05+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=52.90.129.148 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=117 ID=52472 DF PROTO=TCP SPT=57026 DPT=21 WINDOW=62727 RES=0x00 SYN URGP=0 2026-09-15T03:26:07+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=52.90.129.148 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=117 ID=52473 DF PROTO=TCP SPT=57026 DPT=21 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	FTP Brute-Force Hacking
🇨🇿 Countryman	2026-09-15 02:56:19 (1 day ago)	IPS detection: tcp_port_scan, 1001 > threshold 1000, repeats 279 times since last log, pps 4 of prio ... show more IPS detection: tcp_port_scan, 1001 > threshold 1000, repeats 279 times since last log, pps 4 of prior second show less	Port Scan
🇪🇸 raiolanetworks.com	2026-09-14 22:42:31 (1 day ago)	Honeypot detection: API attack; port scan / service probe. 7 events observed. 4 distinct ports targe ... show more Honeypot detection: API attack; port scan / service probe. 7 events observed. 4 distinct ports targeted. Reported automatically from a honeypot sensor. show less	Port Scan Web App Attack
🇭🇰 sandra361	2026-09-14 16:39:17 (1 day ago)	Port scan detected: 9 attempts across 2 ports (80, 12443). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=52 ... show more Port scan detected: 9 attempts across 2 ports (80, 12443). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=52.90.129.148 LEN=240 TOS=0x14 PREC=0x00 TTL=117 ID=55682 DF PROTO=TCP SPT=18016 DPT=80 WINDOW=62727 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇩🇪 sandra361	2026-09-14 15:17:02 (1 day ago)	Port scan detected: 10 attempts across 1 port (13443). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=52.90. ... show more Port scan detected: 10 attempts across 1 port (13443). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=52.90.129.148 LEN=40 TOS=0x00 PREC=0x00 TTL=124 ID=52249 DF PROTO=TCP SPT=60700 DPT=13443 WINDOW=62727 RES=0x00 ACK URGP=0 show less	Port Scan
🇺🇸 ISPLtd	2026-09-14 12:29:16 (2 days ago)	Sep 14 09:29:12 52.90.129.148 TCP SPT=48434 DPT=1245 SYN Sep 14 09:29:13 52.90.129.148 TCP SPT=48434 ... show more Sep 14 09:29:12 52.90.129.148 TCP SPT=48434 DPT=1245 SYN Sep 14 09:29:13 52.90.129.148 TCP SPT=48434 DPT=1245 SYN Sep 14 09:29:15 52.90.129.148 TCP SPT=48434 DPT=1245 ... show less	Port Scan
🇫🇷 EvoX	2026-09-14 05:11:51 (2 days ago)	🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 7547 GET / User-Agent: Mozilla/5.0 (Windows NT ... show more 🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 7547 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 7547 [1] TCP show less	Hacking Bad Web Bot
🇩🇪 Ilop	2026-09-14 04:00:47 (2 days ago)	[hp-100] 3 unsolicited packets to honeypot ports 3232 (OCI DShield sensor)	Port Scan
🇺🇸 HamSammich	2026-09-14 03:50:23 (2 days ago)	Automated sensor: 4 SSH connection/probe attempts over the last 24h (latest 2026-09-14T03:50Z).	Brute-Force SSH

Showing 1 to 15 of 634 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.96

🇦🇷 190.220.172.154

🇧🇷 177.11.173.29

🇧🇷 177.2.111.139

🇮🇳 168.144.77.241

🇨🇳 139.198.29.172

🇸🇮 102.220.161.84

🇺🇸 76.181.103.156

🇵🇷 67.206.199.37

🇮🇳 49.43.5.78

🇧🇷 200.150.254.31

🇧🇷 177.44.182.137

🇧🇷 138.255.230.4

🇨🇳 124.221.221.221

🇹🇭 110.168.141.243

🇧🇬 79.124.56.222

🇺🇸 68.224.118.213

🇺🇸 65.49.1.216

🇧🇬 46.10.90.11

🇳🇱 45.138.12.34