JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.71.253.254

52.71.253.254 was found in our database!

This IP was reported 120 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-52-71-253-254.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.71.253.254

Whois 52.71.253.254

IP Abuse Reports for 52.71.253.254:

This IP address has been reported a total of 120 times from 82 distinct sources. 52.71.253.254 was first reported on May 28th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Smel	2026-06-10 08:31:35 (5 days ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇫🇷 ISPLtd	2026-06-10 06:09:59 (5 days ago)	Jun 10 03:09:56 52.71.253.254 TCP SPT=47510 DPT=1244 SYN Jun 10 03:09:57 52.71.253.254 TCP SPT=47510 ... show more Jun 10 03:09:56 52.71.253.254 TCP SPT=47510 DPT=1244 SYN Jun 10 03:09:57 52.71.253.254 TCP SPT=47510 DPT=1244 SYN Jun 10 03:09:59 52.71.253.254 TCP SPT=47510 DPT=1244 ... show less	Port Scan
🇯🇵 pixelboost.kr	2026-06-10 05:57:01 (5 days ago)	52.71.253.254 - - [10/Jun/2026:14:57:00 +0900] "GET /favicon.ico HTTP/1.1" 444 0 "-" "Mozilla/5.0 (W ... show more 52.71.253.254 - - [10/Jun/2026:14:57:00 +0900] "GET /favicon.ico HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇧🇷 diego	2026-06-10 05:08:19 (5 days ago)	[rede-168-134] 06/10/2026-02:08:18.963302, 52.71.253.254, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-168-134] 06/10/2026-02:08:18.963302, 52.71.253.254, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 99 show less	Hacking
🇫🇷 polido	2026-06-10 02:36:40 (5 days ago)	Unauthorized connection attempt to port 443 from 52.71.253.254	Port Scan
🇦🇹 urnilxfgbez	2026-06-09 22:45:00 (5 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇮🇩 hermawan	2026-06-09 22:43:30 (5 days ago)	[Wed Jun 10 05:43:24.285735 2026] [security2:error] [pid 363119:tid 139735267792576] [client 52.71.2 ... show more [Wed Jun 10 05:43:24.285735 2026] [security2:error] [pid 363119:tid 139735267792576] [client 52.71.253.254:35352] ModSecurity: Access denied with code 403 (phase 1). Match of "pm staklim-jatim.bmkg.go.id staklim-malang.info matomo.staklim-malang.info" against "REQUEST_HEADERS:Host" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "502"] [id "440217"] [msg "Not Current Hostname"] [data "Matched Data: host,user-agent,accept,accept-encoding found within REQUEST_HEADERS:Host: 103.166.156.58 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "matomo.staklim-malang.info"] [uri "/"] [unique_id "aiiXDCh6QIU5SARAAL9bugAAAc8"] [matomo.staklim-malang.info] [matomo.staklim-malang.info] top=[363161] [4/yw2lmJ8hQ] [aiiXDCh6QIU5SARAAL9bugAAAc8] keep_alive=[0] [2026-06-10 05:43:24.285737] [R:aiiXDCh6QIU5SARAAL9bugAAAc8] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36' ... show less	Email Spam Hacking
🇳🇴 tmiland	2026-06-09 21:44:14 (5 days ago)	Suricata Detected 4 attacks from 52.71.253.254.; ET CINS Active Threat Intelligence Poor Reputation ... show more Suricata Detected 4 attacks from 52.71.253.254.; ET CINS Active Threat Intelligence Poor Reputation IP group 99; IP: 52.71.253.254; Ports: 40532; Direction: to_server; Trigger: CINS; Category: Misc Attack; Severity: 2 show less	Brute-Force
🇫🇷 zulzeen	2026-06-09 17:01:47 (6 days ago)	[incypit-web] Banned by Fail2ban (Jail: syswarden-portscan)	Port Scan
🇮🇩 securejdprop	2026-06-09 16:08:09 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Thr ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Threat Intelligence Poor Reputation IP group 99). Ip 52.71.253.254 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-09 16:08:08.240089919 +0000 UTC show less	Hacking Web App Attack
🇺🇸 Xarcotic	2026-06-09 14:04:41 (6 days ago)	SSH login on honeypot.	Brute-Force SSH
🇩🇪 ITSNF	2026-06-09 10:15:07 (6 days ago)	Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=3389	Port Scan Hacking
🇫🇷 TheHoneyPotter	2026-06-09 10:13:59 (6 days ago)	Honeypot [fc-honeypot]: Unauthorized traffic (243 bytes of payload); 56001 [1] TCP Reported by: http ... show more Honeypot [fc-honeypot]: Unauthorized traffic (243 bytes of payload); 56001 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇷 SOC-BR	2026-06-09 06:12:16 (6 days ago)	Trying access in non-authorized port - Source Port 61884 - Destination Port 3389 - Time 2026-06-08 2 ... show more Trying access in non-authorized port - Source Port 61884 - Destination Port 3389 - Time 2026-06-08 23:22:13 (UTC-3) show less	Port Scan Hacking
🇧🇷 ludarkstar99	2026-06-09 06:00:23 (6 days ago)	Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=1224	Port Scan Hacking

Showing 1 to 15 of 120 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 64.81.115.187

🇮🇩 34.101.39.161

🇨🇦 20.104.244.165

🇨🇦 216.208.216.40

🇺🇸 216.25.89.83

🇮🇳 202.142.114.81

🇧🇷 187.50.226.182

🇸🇪 171.25.158.24

🇧🇩 160.25.6.18

🇩🇪 64.226.83.235

🇺🇦 46.200.4.39

🇳🇱 45.156.87.117

🇳🇱 45.148.10.183

🇧🇷 205.210.31.231

🇵🇪 190.223.196.78

🇺🇸 189.104.151.249

🇨🇴 181.54.70.40

🇺🇸 167.99.145.88

🇮🇩 165.154.150.65

🇭🇰 165.154.41.6