52.90.3.153

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
54 reports
43 reporters ยท latest 1 hour ago
ISP
Amazon Technologies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14618
Hostname(s)
ec2-52-90-3-153.compute-1.amazonaws.com
Domain Name
amazon.com
Country
๐Ÿ‡บ๐Ÿ‡ธ United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
54 from 43 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 13 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 12 ๐Ÿ‡ณ๐Ÿ‡ฑ Netherlands 7
Most common categories Port Scan 46 Hacking 13 Brute-Force 7 Web App Attack 6 SSH 5
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฉ๐Ÿ‡ช Ilop
[hp-100] 3 unsolicited packets to honeypot ports 9200 (OCI DShield sensor)
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท EvoX
๐Ÿ›ก๏ธ Honeypot [bsts-tpot-sensor]: Unauthorized traffic (243 bytes of payload); 3232 [1] TCP
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ cwytech
Fleet-wide ban from the Ghostfleet ๐Ÿ‘ป. Triggered by scenario: cwy/rdg-local-lockdown-high.
Bad Web Bot Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ HamSammich
Automated sensor: 2 RDP, SSH connection/probe attempts over the last 24h (latest 2026-11-08T23:24Z).
Port Scan SSH
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (243 bytes of payload); 7443 [1] TCP
Port Scan
๐Ÿ‡ธ๐Ÿ‡ช NordhTech
Multiple malicious connection attempts detected, trying port(s) 22/tcp, then blocked by firewall.
Port Scan Hacking
Anonymous
Drop from IP address 52.90.3.153 to tcp-port 21
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/21 (4 or more attempts)
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 3 payload-bearing connection/event(s), 729 payload byte(s) total, maximum payload 243 byte(s). Target port(s): 13443.
Port Scan Hacking
๐Ÿ‡ณ๐Ÿ‡ฑ wlt-blocker
Illegal port scans
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 8443/HTTPS-alt | Proto: TCP(1) | Flags: all SYN | TTL: 114 | Len: 60B | Win: 62727(1) | rDNS: ec2-52-90-3-153.compute-1.amazonaws.com | F2B/ufw-honeypot@2026-11-08T12:06:49Z
Port Scan Hacking
๐Ÿ‡ซ๐Ÿ‡ท uthul
T-Pot honeypot: 8 hits on ports [8000] (automated)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Connection to port 9200 with data transfer. Data preview: 
Port Scan Hacking
๐Ÿ‡ฉ๐Ÿ‡ช Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 8443/HTTPS-alt | Proto: TCP(1) | Flags: all SYN | TTL: 117 | Len: 60B | Win: 62727(1) | rDNS: ec2-52-90-3-153.compute-1.amazonaws.com | F2B/ufw-honeypot@2026-11-08T07:57:48Z
Port Scan Hacking
๐Ÿ‡จ๐Ÿ‡ญ flaus
$f2bV_matches
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ฉ๐Ÿ‡ช 194.88.98.84
๐Ÿ‡ง๐Ÿ‡ท 177.145.220.214
๐Ÿ‡ณ๐Ÿ‡ฑ 93.152.220.197
๐Ÿ‡ฒ๐Ÿ‡พ 47.254.233.252
๐Ÿ‡ฑ๐Ÿ‡ป 46.8.228.122
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.151
๐Ÿ‡ฎ๐Ÿ‡ณ 45.40.57.172
๐Ÿ‡จ๐Ÿ‡ณ 183.63.125.162
๐Ÿ‡บ๐Ÿ‡พ 167.62.78.174
๐Ÿ‡จ๐Ÿ‡ฆ 165.227.44.26
๐Ÿ‡ท๐Ÿ‡บ 81.200.24.92
๐Ÿ‡ฉ๐Ÿ‡ช 64.227.115.55
๐Ÿ‡บ๐Ÿ‡ธ 45.33.109.18
๐Ÿ‡ธ๐Ÿ‡ฌ 43.134.25.46
๐Ÿ‡ฌ๐Ÿ‡ง 31.14.254.38
๐Ÿ‡จ๐Ÿ‡ญ 20.199.186.33
๐Ÿ‡บ๐Ÿ‡ธ 184.183.93.106
๐Ÿ‡บ๐Ÿ‡ธ 164.92.80.218
๐Ÿ‡น๐Ÿ‡ญ 115.87.227.29
๐Ÿ‡บ๐Ÿ‡ธ 76.139.230.81
feedback