JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 177.52.83.169

177.52.83.169 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 30%: ?

30%

ISP	ALCANS TELECOM LTDA
Usage Type	Fixed Line ISP
ASN	AS52783
Hostname(s)	177-52-83-169.alcanstelecom.com.br
Domain Name	alcans.com.br
Country	🇧🇷 Brazil
City	Sao Simao, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 177.52.83.169

Whois 177.52.83.169

IP Abuse Reports for 177.52.83.169:

This IP address has been reported a total of 19 times from 14 distinct sources. 177.52.83.169 was first reported on July 4th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-19 16:29:01 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 177.52.83.169 (177-52-83-169.alcanstelecom.com. ... show more (mod_security) mod_security (id:210350) triggered by 177.52.83.169 (177-52-83-169.alcanstelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 12:28:54.039494 2026] [security2:error] [pid 13645:tid 13645] [client 177.52.83.169:4100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|starfrontiers.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "starfrontiers.com"] [uri "/"] [unique_id "atZFRhw6TetH745xriipogAAAAU"], referer: https://worldoferoc.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-10-18 04:46:05 (5 days ago)	Scraping webshop URLs (webshop.hofstede-optiek.nl), likely botnet drone	Bad Web Bot Exploited Host
🇩🇪 LRob	2026-10-17 01:31:00 (6 days ago)	Calendar filter flood (L7 DDoS) \| host: escrime-auvergnerhonealpes.fr \| path: /calendrier-2/action~a ... show more Calendar filter flood (L7 DDoS) \| host: escrime-auvergnerhonealpes.fr \| path: /calendrier-2/action~agenda/time_limit~1763506800/cat_ids~124/tag_ids~338,674,629,424,614,474/request_format~json/ \| src_port: 4209 show less	DDoS Attack Web App Attack
🇺🇸 鬼影233	2026-09-24 06:25:14 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-13 15:04:06 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇵🇱 bart@	2026-09-11 16:34:30 (1 month ago)	Automated scan detection against redacted protected targets. Hits=1; port 20334 proto 17 detection d ... show more Automated scan detection against redacted protected targets. Hits=1; port 20334 proto 17 detection dark_ip show less	Port Scan
🇺🇸 kosada.com	2026-08-20 19:35:51 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-03 12:37:29 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 177.52.83.169 (177-52-83-169.alcanstelecom.com. ... show more (mod_security) mod_security (id:210730) triggered by 177.52.83.169 (177-52-83-169.alcanstelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 08:37:23.319928 2026] [security2:error] [pid 2294500:tid 2294500] [client 177.52.83.169:9425] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|stepiz62.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stepiz62.com"] [uri "/joty/resources/JotyResponse.xsd"] [unique_id "anCLg3f_uSC_jKW_c0TxXQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-30 17:39:38 (2 months ago)	denied traffic to a non-approved destination port. destination port 40389.	Port Scan
🇺🇸 Cyber Crusader	2026-07-30 12:20:42 (2 months ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
Anonymous	2026-07-07 17:33:31 (3 months ago)	Port scan / connection attempts on port 58754/UDP to unused IP	Port Scan
Anonymous	2026-07-07 17:32:13 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 kosada.com	2026-06-29 11:17:22 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-04 20:45:22 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2025-11-24 22:24:50 (10 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 218.219.193.151

🇩🇪 213.209.159.236

🇧🇩 202.37.47.114

🇺🇸 172.236.254.181

🇺🇸 172.236.228.197

🇿🇦 172.209.216.27

🇺🇸 136.107.38.48

🇺🇸 129.121.143.149

🇧🇩 103.101.250.217

🇮🇳 74.225.146.100

🇺🇸 72.214.38.39

🇵🇰 59.103.111.161

🇬🇦 41.158.135.20

🇦🇺 34.87.197.166

🇿🇦 20.164.1.47

🇺🇸 3.129.187.38

🇬🇧 2a06:4880::f

🇺🇸 192.161.49.2

🇺🇸 184.183.93.96

🇮🇳 172.198.56.179