52.87.204.253
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Amazon Technologies Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14618
- Hostname(s)
- ec2-52-87-204-253.compute-1.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
No reports in the last 60 days
52.87.204.253 has been reported 113 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
113 from
57 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇷🇺 Agrohim |
Gate Inet blocked for categories:
|
DDoS Attack Ping of Death Port Scan Hacking Brute-Force | |
| 🇷🇺 Agrohim |
Gate Inet blocked for categories:
|
DDoS Attack Ping of Death Port Scan Hacking Brute-Force | |
| 🇮🇹 Fusty |
Unauthorized attempt on (TCP on port 9200).
Source port: 58513
TTL: 54
Packet length: 52
Timestamp: 2025-12-21 02:25:30
|
Port Scan | |
| 🇩🇪 Tamsweb |
Unauthorized connection attempt or scan from 52.87.204.253 on port 9200
...
|
Port Scan | |
| 🇺🇸 RAP |
2025-12-21 01:23:08 UTC Unauthorized activity to TCP port 9200.
|
Port Scan | |
| 🇺🇸 en0 |
52.87.204.253 was recorded 3 times by 2 hosts attempting to connect to 1 unique ports. Incident counter (4h, 24h, all-time): 3, 26, 27
|
Port Scan | |
| 🇵🇱 IROK |
Firewall Blocked - Unauthorized Port Scanning
...
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 9200)
Source port: 53530
TTL: 55
Packet length: 52
TOS: 0x00
This report (for 52.87.204.253) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 David Ferneding |
Blocked by UFW (TCP on 9200)
Source port: 47894
TTL: 57
Packet length: 52
TOS: 0x00
This report (for 52.87.204.253) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇧🇷 chronos |
Possible malicious scan or exploit attempt on database services. | Proto: TCP | Port: 9200 | Location: United States, Ashburn
|
Port Scan Hacking SQL Injection Exploited Host | |
| 🇩🇪 ioexploit. |
SYN -> SYN-ACK scan
Source port: 43532
Destination port: 9200
|
Port Scan | |
| 🇦🇹 centurion |
Unauthorized attempt on git [9200/tcp]
Source port: 50125
TTL: 55
Packet length: 52
TOS: 0x00
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇬🇧 [email protected] |
...
|
Brute-Force SSH | |
| 🇷🇴 abuse_IP_reporter |
Dec 21 02:40:52 server UFW BLOCK SRC=52.87.204.253 PROTO=TCP SPT=51658 DPT=9200
|
Port Scan | |
| 🇺🇸 MPL |
tcp/9200 (2 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown
Recently Reported IPs:
🇺🇸
216.25.90.87