JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.90.163.28

Neutral Activity

Abuse confidence score ?

0% Low Risk

971 reports

232 reporters · latest 6 months ago

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-52-90-163-28.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.90.163.28 has been reported 971 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 52.90.163.28

Export CSV

This IP address has been reported a total of 971 times from 232 distinct sources. 52.90.163.28 was first reported on November 5th 2025, and the most recent report was 6 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-03-12 23:15:25 (6 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/52.90.163.28 2026-03-12 ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/52.90.163.28 2026-03-12 03:57:41 / show less	Web App Attack
🇷🇺 Agrohim	2026-03-12 21:41:21 (6 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇹🇷 rtbh.com.tr	2026-03-12 04:12:01 (6 months ago)	list.rtbh.com.tr report: tcp/3389	Brute-Force
🇮🇩 hermawan	2026-03-12 04:01:13 (6 months ago)	2026-03-12T02:44:17.479881+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:7 ... show more 2026-03-12T02:44:17.479881+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=52.90.163.28 DST=103.166.156.58 LEN=60 TOS=0x00 PREC=0x00 TTL=115 ID=14034 DF PROTO=TCP SPT=42720 DPT=1224 WINDOW=62727 RES=0x00 SYN URGP=0 ... show less	Email Spam Hacking
🇫🇷 centurion	2026-03-12 02:28:56 (6 months ago)	Unauthorized attempt on uptime [21/tcp] Source port: 54386 TTL: 116 Packet length: 60 TOS: 0x00 http ... show more Unauthorized attempt on uptime [21/tcp] Source port: 54386 TTL: 116 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan FTP Brute-Force Brute-Force
🇫🇷 centurion	2026-03-12 01:43:07 (6 months ago)	Blocked by UFW on dc00 [13443/tcp] Source port: 65426 TTL: 117 Packet length: 60 TOS: 0x00 This rep ... show more Blocked by UFW on dc00 [13443/tcp] Source port: 65426 TTL: 117 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 infra_alabijak	2026-03-12 01:07:51 (6 months ago)	[vm-pangolin-l-home-01] Blocked by SysWarden Firewall (Web Attack Port 80)	Port Scan Exploited Host Web App Attack
🇫🇷 ISPLtd	2026-03-12 00:26:38 (6 months ago)	Mar 11 21:26:34 52.90.163.28 TCP SPT=15630 DPT=8080 SYN Mar 11 21:26:35 52.90.163.28 TCP SPT=15630 D ... show more Mar 11 21:26:34 52.90.163.28 TCP SPT=15630 DPT=8080 SYN Mar 11 21:26:35 52.90.163.28 TCP SPT=15630 DPT=8080 SYN Mar 11 21:26:37 52.90.163.28 TCP SPT=15630 DPT=8080 ... show less	Port Scan
🇩🇪 ISPLtd	2026-03-11 23:39:11 (6 months ago)	Mar 11 20:39:08 52.90.163.28 TCP SPT=27506 DPT=11443 SYN Mar 11 20:39:09 52.90.163.28 TCP SPT=27506 ... show more Mar 11 20:39:08 52.90.163.28 TCP SPT=27506 DPT=11443 SYN Mar 11 20:39:09 52.90.163.28 TCP SPT=27506 DPT=11443 SYN Mar 11 20:39:11 52.90.163.28 TCP SPT=27506 DPT=11443 ... show less	Port Scan
🇨🇳 ThreatBook.io	2026-03-11 23:22:51 (6 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/52.90.163.28	SSH
🇦🇹 centurion	2026-03-11 23:17:32 (6 months ago)	Unauthorized attempt on siem [3000/tcp] Source port: 25752 TTL: 119 Packet length: 60 TOS: 0x00 http ... show more Unauthorized attempt on siem [3000/tcp] Source port: 25752 TTL: 119 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 Pingger Shikkoken	2026-03-11 23:17:32 (6 months ago)	2026-03-11T23:17:32+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-03-11T23:17:32+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=52.90.163.28 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=118 ID=17578 DF PROTO=TCP SPT=54328 DPT=3000 WINDOW=62727 RES=0x00 SYN URGP=0 2026-03-11T23:17:33+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=52.90.163.28 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=118 ID=17579 DF PROTO=TCP SPT=54328 DPT=3000 WINDOW=62727 RES=0x00 SYN URGP=0 2026-03-11T23:17:35+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=52.90.163.28 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=118 ID=17580 DF PROTO=TCP SPT=54328 DPT=3000 WINDOW=62727 RES=0x00 SYN URGP=0 show less	Hacking Bad Web Bot
🇫🇷 ISPLtd	2026-03-11 20:13:35 (6 months ago)	Mar 11 17:13:31 52.90.163.28 TCP SPT=17690 DPT=13443 SYN Mar 11 17:13:32 52.90.163.28 TCP SPT=17690 ... show more Mar 11 17:13:31 52.90.163.28 TCP SPT=17690 DPT=13443 SYN Mar 11 17:13:32 52.90.163.28 TCP SPT=17690 DPT=13443 SYN Mar 11 17:13:34 52.90.163.28 TCP SPT=17690 DPT=13443 ... show less	Port Scan
🇹🇼 taiwanfrp.me	2026-03-11 14:38:57 (6 months ago)	taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, targ ... show more taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, target=proxy:kiwicanary.MinecraftJava62owefeewfewfew\|port:- show less	Port Scan Hacking
🇺🇸 technash	2026-03-11 13:07:40 (6 months ago)	Unauthorized network connection attempt(s) via TCP port(s) from TI-mapped entity detected [Fortinet/ ... show more Unauthorized network connection attempt(s) via TCP port(s) from TI-mapped entity detected [Fortinet/Sentinel]. Traffic deny/drop. show less	Port Scan

Showing 1 to 15 of 971 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 199.47.82.21

🇨🇴 181.48.81.172

🇮🇳 13.140.57.129

🇨🇱 200.113.10.158

🇨🇴 200.6.171.50

🇳🇱 193.47.62.69

🇫🇮 135.181.101.111

🇫🇷 95.111.252.50

🇫🇷 90.50.80.43

🇪🇸 83.48.125.229

🇳🇱 77.239.124.34

🇺🇸 72.69.229.58

🇺🇸 68.0.32.215

🇵🇱 45.138.12.21

🇰🇪 41.72.213.122

🇳🇱 37.49.227.165

🇺🇸 34.83.61.1

🇮🇷 185.215.230.49

🇨🇴 179.32.213.29

🇺🇸 173.249.132.73