JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.90.154.5

52.90.154.5 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-52-90-154-5.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.90.154.5

Whois 52.90.154.5

IP Abuse Reports for 52.90.154.5:

This IP address has been reported a total of 20 times from 18 distinct sources. 52.90.154.5 was first reported on June 5th 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 raymarron.com	2025-06-16 00:02:33 (1 year ago)	/wp-admin/css/ (x2)	Web App Attack
🇵🇱 nfsec.pl	2025-06-11 02:11:04 (1 year ago)	52.90.154.5 - - [11/Jun/2025:04:10:47 +0200] "GET /WP/ HTTP/1.1" 404 31200 "-" "python-requests/2.27 ... show more 52.90.154.5 - - [11/Jun/2025:04:10:47 +0200] "GET /WP/ HTTP/1.1" 404 31200 "-" "python-requests/2.27.1" 52.90.154.5 - - [11/Jun/2025:04:10:49 +0200] "GET /bc/ HTTP/1.1" 404 31231 "-" "python-requests/2.27.1" 52.90.154.5 - - [11/Jun/2025:04:10:52 +0200] "GET /bk/ HTTP/1.1" 404 31275 "-" "python-requests/2.27.1" 52.90.154.5 - - [11/Jun/2025:04:10:56 +0200] "GET /db/ HTTP/1.1" 404 31213 "-" "python-requests/2.27.1" 52.90.154.5 - - [11/Jun/2025:04:11:03 +0200] "GET /js/ HTTP/1.1" 404 31317 "-" "python-requests/2.27.1" ... show less	Exploited Host Web App Attack
🇺🇸 ersei.net	2025-06-10 20:55:55 (1 year ago)	Web app exploiting	Web App Attack
🇪🇸 el-brujo	2025-06-10 17:54:43 (1 year ago)	Cloudflare WAF: Request Path: /wp-content/ALFA_DATA/alfacgiapi/ Request Query: Host: foro.elhacker. ... show more Cloudflare WAF: Request Path: /wp-content/ALFA_DATA/alfacgiapi/ Request Query: Host: foro.elhacker.net userAgent: python-requests/2.27.1 Action: log Source: firewallManaged ASN Description: AMAZON-AES Country: US Method: GET Timestamp: 2025-06-10T17:54:43Z ruleId: 9f35644b7f734c87a57cfd6d8b036974. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 kosada.com	2025-06-10 17:44:25 (1 year ago)	Web vulnerability probing	Web App Attack
Anonymous	2025-06-10 17:09:46 (1 year ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/js	Web App Attack
🇺🇸 TPI-Abuse	2025-06-09 21:11:54 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 52.90.154.5 (ec2-52-90-154-5.compute-1.amazonaw ... show more (mod_security) mod_security (id:210492) triggered by 52.90.154.5 (ec2-52-90-154-5.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 09 17:11:50.045382 2025] [security2:error] [pid 495679:tid 495679] [client 52.90.154.5:54322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rockpage.net"] [uri "/.env/"] [unique_id "aEdOFoaiV8CporRrezJfIgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TheMadBeaker	2025-06-09 19:24:57 (1 year ago)	Fail2Ban Ban Triggered HTTP Exploit Attempt	Brute-Force Web App Attack
🇺🇸 masterguru	2025-06-09 17:13:19 (1 year ago)	BAD BOT - Detected and Blocked.. Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. (11 ... show more BAD BOT - Detected and Blocked.. Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. (1100000-124) show less	Bad Web Bot
🇺🇸 ipblock.com	2025-06-09 16:00:00 (1 year ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇪🇸 el-brujo	2025-06-09 12:38:13 (1 year ago)	Cloudflare WAF: Request Path: /wp-content/ALFA_DATA/alfacgiapi/ Request Query: Host: ns2.elhacker.n ... show more Cloudflare WAF: Request Path: /wp-content/ALFA_DATA/alfacgiapi/ Request Query: Host: ns2.elhacker.net userAgent: python-requests/2.27.1 Action: log Source: firewallManaged ASN Description: AMAZON-AES Country: US Method: GET Timestamp: 2025-06-09T12:38:13Z ruleId: 9f35644b7f734c87a57cfd6d8b036974. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇳🇱 CryptoYakari	2025-06-09 00:52:23 (1 year ago)	52.90.154.5 - - [09/Jun/2025:03:50:50 +0300] "GET /wp-admin/css/ HTTP/1.0" 404 7075 "binance.com" "M ... show more 52.90.154.5 - - [09/Jun/2025:03:50:50 +0300] "GET /wp-admin/css/ HTTP/1.0" 404 7075 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 52.90.154.5 - - [09/Jun/2025:03:50:56 +0300] "GET /.well-known/ HTTP/1.0" 404 3510 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 52.90.154.5 - - [09/Jun/2025:03:51:53 +0300] "GET /sites/default/files/ HTTP/1.0" 404 3510 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 52.90.154.5 - - [09/Jun/2025:03:52:13 +0300] "GET /admin/controller/extension/extension/ HTTP/1.0" 404 3510 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 52.90.154.5 - - [09/Jun/2025:03:52:22 +0300] "GET /uploads/ HTTP/1.0" 404 3510 "binance.com" "Mozilla/5.0 (Win ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
Anonymous	2025-06-08 22:45:13 (1 year ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/css	Web App Attack
🇫🇷 /dev/null	2025-06-08 18:20:27 (1 year ago)	CMS Bruteforce / WebApp Attack attempt	Hacking Web App Attack
🇳🇱 i-turnradio.nl	2025-06-08 04:43:31 (1 year ago)	2025-06-08 @ 06:43:30 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.156.126.1

🇩🇪 217.181.85.141

🇳🇱 206.189.4.166

🇧🇷 152.32.199.33

🇸🇬 138.75.105.42

🇨🇳 123.146.57.234

🇨🇳 112.103.60.73

🇨🇳 106.75.214.209

🇬🇧 87.236.176.45

🇺🇸 66.132.224.19

🇺🇸 2607:f8b0:4001:c10::129

🇺🇸 216.73.216.87

🇳🇱 213.177.179.12

🇨🇳 114.241.210.242

🇺🇸 68.67.112.38

🇨🇦 20.48.163.91

🇱🇹 213.176.26.166

🇳🇱 195.178.110.30

🇳🇱 192.253.248.223

🇺🇸 165.154.36.102