JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.204.141.52

43.204.141.52 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 39%: ?

39%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-43-204-141-52.ap-south-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.204.141.52

Whois 43.204.141.52

IP Abuse Reports for 43.204.141.52:

This IP address has been reported a total of 12 times from 8 distinct sources. 43.204.141.52 was first reported on February 7th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-16 20:40:31 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 43.204.141.52 (ec2-43-204-141-52.ap-south-1.com ... show more (mod_security) mod_security (id:210492) triggered by 43.204.141.52 (ec2-43-204-141-52.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 16:40:28.361578 2026] [security2:error] [pid 20755:tid 20755] [client 43.204.141.52:60374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.advantstudio.com"] [uri "/.git/config"] [unique_id "allBvLAnaQdinSVgoUF2sAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 20:11:08 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 43.204.141.52 (ec2-43-204-141-52.ap-south-1.com ... show more (mod_security) mod_security (id:210492) triggered by 43.204.141.52 (ec2-43-204-141-52.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 16:11:01.576888 2026] [security2:error] [pid 20818:tid 20818] [client 43.204.141.52:39510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.adamsclothiers.com"] [uri "/.git/config"] [unique_id "alk61WRsUkmv6BB6cQbAjgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 02:17:58 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 43.204.141.52 (ec2-43-204-141-52.ap-south-1.com ... show more (mod_security) mod_security (id:210492) triggered by 43.204.141.52 (ec2-43-204-141-52.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 22:17:52.930899 2026] [security2:error] [pid 28663:tid 28663] [client 43.204.141.52:39716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.virtualmediamasters.net"] [uri "/.git/config"] [unique_id "alg_UF69WXkf8pfdkCwzUwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-07-16 00:20:03 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-15 21:59:24 (1 week ago)	Auto-ban: >3000 req/min op 2026-07-15	Web App Attack SSH Hacking
🇨🇭 webber	2026-07-15 08:23:00 (1 week ago)		Web App Attack
🇫🇷 dynamix	2026-07-15 04:30:17 (1 week ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-07-14 23:14:19 (1 week ago)	Aggressive web search of vulnerable pages: / /.env /.env.local /app/.env /apps/.env ...	Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 14:40:05 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 43.204.141.52 (ec2-43-204-141-52.ap-south-1.com ... show more (mod_security) mod_security (id:210492) triggered by 43.204.141.52 (ec2-43-204-141-52.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 10:39:58.090517 2026] [security2:error] [pid 1668:tid 1668] [client 43.204.141.52:43004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dunbartonucc.org"] [uri "/.git/config"] [unique_id "alZKPlqIdDUUwdT2u2XCCgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 thedreamer.nl	2026-07-14 14:08:00 (1 week ago)	43.204.141.52 - - [14/Jul/2026:16:07:35 +0200] "GET / HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT ... show more 43.204.141.52 - - [14/Jul/2026:16:07:35 +0200] "GET / HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "IN" "Mumbai" "19.07480" "72.88560" 43.204.141.52 - - [14/Jul/2026:16:07:35 +0200] "POST / HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "IN" "Mumbai" "19.07480" "72.88560" 43.204.141.52 - - [14/Jul/2026:16:07:35 +0200] "POST / HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "IN" "Mumbai" "19.07480" "72.88560" 43.204.141.52 - - [14/Jul/2026:16:07:35 +0200] "POST / HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "IN" "Mumbai" "19.07480" "72.88560" ... show less	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-14 12:00:36 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 43.204.141.52 (ec2-43-204-141-52.ap-south-1.com ... show more (mod_security) mod_security (id:210492) triggered by 43.204.141.52 (ec2-43-204-141-52.ap-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 08:00:32.116430 2026] [security2:error] [pid 4174:tid 4196] [client 43.204.141.52:48218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dulemba.com"] [uri "/.git/config"] [unique_id "alYk4OgENWAwJWTJGGqzpAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Ariazonaa	2026-02-07 23:51:59 (5 months ago)	RDP brute-force detected. Automated system says: 'Nice try, script kiddie.'	Brute-Force

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.105.139.114

🇸🇬 97.74.87.119

🇵🇱 89.68.245.7

🇨🇭 34.65.47.130

🇺🇦 31.148.221.1

🇺🇸 2607:f8b0:400e:c09::121

🇳🇱 193.176.31.156

🇧🇷 170.244.201.0

🇮🇳 114.31.188.175

🇮🇩 103.164.57.37

🇺🇸 91.230.168.253

🇺🇸 47.251.179.35

🇬🇧 45.133.173.169

🇬🇧 35.203.211.160

🇦🇺 1.131.79.34

🇺🇸 2604:a940:301:225:0:6::

🇺🇸 205.210.31.71

🇭🇰 199.45.155.89

🇩🇪 193.124.20.235

🇺🇸 162.216.149.174