Identicon of IP address 52.79.226.34

52.79.226.34

IP Risk Score: 100 / 100

This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.

What is this IP address?
IP Address: 52.79.226.34
Country: South Korea flag South Korea (KR)
Region Name: Seoul (11)
City: Seoul
ISP: Amazon Technologies Inc.
Organization: AWS EC2 (ap-northeast-2)
Threat level: 100 / 100
Conf. level: 100 / 100
Properties
ASN: AS16509
AS Name: Amazon.com, Inc.
Timezone: Asia/Seoul
Reverse DNS: ec2-52-79-226-34.ap-northeast-2.compute.amazonaws.com
Status: Critical Unknown
Hosting

Observed Client Profile
  • OS: Windows (50%)
  • Device Type: Desktop (100%)
  • Browser Family: Chrome (50%)
  • Rendering Engine: Unknown (100%)
Variability
Behavioral Indicators

The IP exhibits highly suspicious behavior with a significant number of requests to various endpoints, all resulting in 403/404 responses. The use of a known automation user-agent (python-httpx) and the absence of JavaScript support further indicate potential malicious intent. The traffic is concentrated on a single site, suggesting targeted probing or scraping activity.

๐Ÿฏ
Honeypot Hit
๐Ÿ“ก
Scanner
JavaScript Support
โš ๏ธ No
User-Agent Samples
  • Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/91.0.4472.124
  • python-httpx/0.24.1

IP Location

Region: Seoul, South Korea

City: Seoul

Local time: 2026-06-22 17:36:25