JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.7.83.29

52.7.83.29 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 41%: ?

41%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-52-7-83-29.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.7.83.29

Whois 52.7.83.29

IP Abuse Reports for 52.7.83.29:

This IP address has been reported a total of 6 times from 6 distinct sources. 52.7.83.29 was first reported on July 1st 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-07-02 01:04:18 (3 hours ago)	[Thu Jul 02 08:04:10.499575 2026] [security2:error] [pid 1092214:tid 139635829241536] [client 52.7.8 ... show more [Thu Jul 02 08:04:10.499575 2026] [security2:error] [pid 1092214:tid 139635829241536] [client 52.7.83.29:16578] ModSecurity: Access denied with code 403 (phase 1). Match of "pm staklim-jatim.bmkg.go.id staklim-malang.info matomo.staklim-malang.info" against "REQUEST_HEADERS:Host" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "521"] [id "440217"] [msg "Not Current Hostname"] [data "Matched Data: host,user-agent,accept,accept-encoding found within REQUEST_HEADERS:Host: 103.166.156.58 request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "matomo.staklim-malang.info"] [uri "/robots.txt"] [unique_id "akW5ChYkj1GXwF9TuQJBGgAAAk0"] [matomo.staklim-malang.info] [matomo.staklim-malang.info] top=[1092254] [KGWzYpbm3hY] [akW5ChYkj1GXwF9TuQJBGgAAAk0] keep_alive=[0] [2026-07-02 08:04:10.499584] [R:akW5ChYkj1GXwF9TuQJBGgAAAk0] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0. ... show less	Email Spam Hacking
🇺🇸 Choice Tech LLC	2026-07-01 21:30:02 (7 hours ago)	Blocked by OPNsense firewall; 4 hits, proto=tcp, ports=21	Port Scan Hacking
🇩🇪 wiredalter	2026-07-01 19:02:40 (9 hours ago)	Blocked by UFW on dVPS [8443/tcp] Source Port: 20384 TTL: 119 Packet Length: 60 TOS: 0x00 Analyzed ... show more Blocked by UFW on dVPS [8443/tcp] Source Port: 20384 TTL: 119 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇧🇷 somosbr	2026-07-01 18:54:07 (9 hours ago)	[2026-07-01T18:54:07Z] Unsolicited scan from 52.7.83.29 to port 8443/tcp	Port Scan
🇨🇦 polycoda	2026-07-01 15:56:25 (12 hours ago)	AutoBlock: 📡 Port 22 Scan (Non Decay-Based)	Port Scan SSH
🇺🇸 ne1for23	2026-07-01 14:42:31 (13 hours ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 52.7.83.29 - - [01/Jul/2026:14:42:31 +0000] "GET /favicon.ico HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" "-" show less	Hacking

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 202.148.52.33

🇺🇸 77.220.195.208

🇷🇴 2.57.121.112

🇺🇸 2a03:2880:3ff:108::

🇺🇸 205.210.31.92

🇺🇸 205.210.31.75

🇺🇸 205.210.31.71

🇩🇪 185.242.3.226

🇫🇷 176.172.130.57

🇫🇮 172.253.83.222

🇺🇸 162.216.150.44

🇵🇰 119.156.28.157

🇨🇳 113.133.96.221

🇺🇸 104.22.24.122

🇺🇸 104.22.1.24

🇺🇸 66.132.195.53

🇧🇷 45.5.102.93

🇿🇲 41.63.62.103

🇺🇸 34.138.6.55

🇯🇵 20.78.33.180