JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.28.204.83

52.28.204.83 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 27%: ?

27%

ISP	A100 ROW GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-52-28-204-83.eu-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.28.204.83

Whois 52.28.204.83

IP Abuse Reports for 52.28.204.83:

This IP address has been reported a total of 5 times from 4 distinct sources. 52.28.204.83 was first reported on June 9th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 iNetWorker	2026-06-28 03:10:38 (3 days ago)	firewall-block, port(s): 8/tcp, 80/tcp, 443/tcp, 8000/tcp, 8001/tcp, 8002/tcp, 8003/tcp, 8004/tcp, 8 ... show more firewall-block, port(s): 8/tcp, 80/tcp, 443/tcp, 8000/tcp, 8001/tcp, 8002/tcp, 8003/tcp, 8004/tcp, 8005/tcp, 8080/tcp, 8081/tcp, 8082/tcp, 8188/tcp, 8189/tcp show less	Port Scan
🇮🇩 hermawan	2026-06-20 21:01:23 (1 week ago)	[Sun Jun 21 04:01:22.432874 2026] [security2:error] [pid 549042:tid 140110641206976] [client 52.28.2 ... show more [Sun Jun 21 04:01:22.432874 2026] [security2:error] [pid 549042:tid 140110641206976] [client 52.28.204.83:53974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "HTTP/1.0" at REQUEST_PROTOCOL. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "30"] [id "448111"] [msg "BAD http versions"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: HTTP/1.0 found within REQUEST_PROTOCOL: HTTP/1.0 request_line = GET / HTTP/1.0 Request URI RAW = / Request Basename = "] [severity "NOTICE"] [hostname "matomo.staklim-malang.info"] [uri "/"] [unique_id "ajb_olDT--TLPXJhLa0XZQAAAEg"] [matomo.staklim-malang.info] [matomo.staklim-malang.info] top=[549077] [pUEstnUlqV8] [ajb_olDT--TLPXJhLa0XZQAAAEg] keep_alive=[0] [2026-06-21 04:01:22.432876] [R:ajb_olDT--TLPXJhLa0XZQAAAEg] Host:'103.166.156.58:80' ... show less	Email Spam Hacking
Anonymous	2026-06-20 19:03:15 (1 week ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-06-19 18:02:48 (1 week ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇫🇷 ISPLtd	2026-06-09 20:24:36 (3 weeks ago)	Jun 9 17:24:36 52.28.204.83 TCP SPT=47370 DPT=8000 SYN Jun 9 17:24:36 52.28.204.83 TCP SPT=60846 D ... show more Jun 9 17:24:36 52.28.204.83 TCP SPT=47370 DPT=8000 SYN Jun 9 17:24:36 52.28.204.83 TCP SPT=60846 DPT=8004 SYN Jun 9 17:24:36 52.28.204.83 TCP SPT=48278 DPT=8001 ... show less	Port Scan

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.127.11.105

🇳🇱 172.233.62.72

🇺🇸 172.172.180.124

🇳🇱 160.119.69.14

🇧🇬 91.191.209.46

🇫🇷 85.217.140.4

🇸🇬 82.38.180.169

🇭🇰 218.103.36.176

🇺🇸 204.48.30.59

🇺🇸 192.169.136.182

🇳🇱 190.2.151.172

🇳🇱 185.189.182.234

🇺🇸 154.13.194.170

🇸🇬 145.223.131.193

🇫🇷 92.205.50.247

🇺🇸 91.230.168.140

🇸🇬 84.75.155.103

🇺🇸 71.6.239.39

🇫🇮 65.108.252.228

🇺🇸 43.166.232.28