AbuseIPDB » 13.52.237.228
13.52.237.228
This IP was reported 6 times. Confidence of
Abuse
is 30% : ?
ISP
Amazon.com, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-13-52-237-228.us-west-1.compute.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸
United States of America
City
San Jose, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 13.52.237.228 :
This IP address has been reported a total of
6
times from
4 distinct
sources.
13.52.237.228 was first reported on
July 12th 2026 , and the most recent report was
18 minutes ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-12 11:22:40
(18 minutes ago)
(caddyscan) Scanner path probe from 13.52.237.228 (US/United States/ec2-13-52-237-228.us-west-1.comp ...
show more
(caddyscan) Scanner path probe from 13.52.237.228 (US/United States/ec2-13-52-237-228.us-west-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:11:22:40 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:11:22:40 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:11:22:40 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:11:22:40 +0000] "GET /.env.production HTTP/1.1"
[REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:11:22:40 +0000] "GET /.env.staging HTTP/1.1"
show less
Port Scan
🇪🇸
alferez
2026-07-12 10:56:19
(44 minutes ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
2026-07-12 10:21:19
(1 hour ago)
(caddyscan) Scanner path probe from 13.52.237.228 (US/United States/ec2-13-52-237-228.us-west-1.comp ...
show more
(caddyscan) Scanner path probe from 13.52.237.228 (US/United States/ec2-13-52-237-228.us-west-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:10:21:15 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:10:21:15 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:10:21:15 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:10:21:15 +0000] "GET /.env.production HTTP/1.1"
[REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:10:21:15 +0000] "GET /.env.staging HTTP/1.1"
show less
Port Scan
🇮🇹
VHosting
2026-07-12 09:35:05
(2 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
2026-07-12 09:18:29
(2 hours ago)
(caddyscan) Scanner path probe from 13.52.237.228 (US/United States/ec2-13-52-237-228.us-west-1.comp ...
show more
(caddyscan) Scanner path probe from 13.52.237.228 (US/United States/ec2-13-52-237-228.us-west-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:09:18:27 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:09:18:27 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:09:18:27 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:09:18:27 +0000] "GET /.env.production HTTP/1.1"
[REDACTED] 200 2627 13.52.237.228 - - [12/Jul/2026:09:18:27 +0000] "GET /.env.staging HTTP/1.1"
show less
Port Scan
🇳🇱
WeCloudit-Anti-Abuse
2026-07-12 08:39:28
(3 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: