JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

13.52.237.32

Neutral Activity

Abuse confidence score ?

0% Low Risk

17 reports

14 reporters · latest 2 years ago

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-52-237-32.us-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	San Jose, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

13.52.237.32 has been reported 17 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 13.52.237.32

Export CSV

This IP address has been reported a total of 17 times from 14 distinct sources. 13.52.237.32 was first reported on June 9th 2022, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 sohopros	2023-12-12 02:23:37 (2 years ago)	"Multiple malicious connections."	DDoS Attack
🇮🇹 SaltySoftworks	2023-12-10 04:13:14 (2 years ago)	by Amazon Technologies Inc.	DDoS Attack Web Spam Hacking Bad Web Bot Web App Attack
🇬🇧 Epimetheus	2023-12-10 02:04:24 (2 years ago)	Unauthorized access attempts: From: 13.52.237.32 Method: HTTPS GET URI Path: //static.cloudfla ... show more Unauthorized access attempts: From: 13.52.237.32 Method: HTTPS GET URI Path: //static.cloudflareinsights.com/beacon.min.js UA: "nook browser/1.0" show less	Web App Attack
🇦🇺 advena	2023-12-10 01:15:57 (2 years ago)	13.52.237.32 (AS16509 AMAZON-02) was intercepted at 2023-12-10T01:11:41Z after violating WAF directi ... show more 13.52.237.32 (AS16509 AMAZON-02) was intercepted at 2023-12-10T01:11:41Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2023-12-10 00:31:04 (2 years ago)	(mod_security) mod_security (id:210831) triggered by 13.52.237.32 (ec2-13-52-237-32.us-west-1.comput ... show more (mod_security) mod_security (id:210831) triggered by 13.52.237.32 (ec2-13-52-237-32.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 09 19:31:00.258592 2023] [security2:error] [pid 15916] [client 13.52.237.32:59362] [client 13.52.237.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|huboon.com\|F\|4"] [data "Web Downloader"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "huboon.com"] [uri "/ga.js"] [unique_id "ZXUGxGHMRUZRFG9LpDjTbwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 etu brutus	2023-12-10 00:03:48 (2 years ago)	13.52.237.32 has been banned for [Control Panel abuse] ...	Hacking Brute-Force
🇮🇹 SaltySoftworks	2023-12-08 21:58:28 (2 years ago)	User agent spoofing by Amazon Technologies Inc.	DDoS Attack Web Spam Hacking Spoofing Bad Web Bot Web App Attack
🇨🇦 Mediashaker	2023-12-08 20:57:31 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 13.52.237.32 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 13.52.237.32 (US/United States/ec2-13-52-237-32.us-west-1.compute.amazonaws.com) show less	Bad Web Bot
🇮🇹 SaltySoftworks	2023-12-08 20:36:30 (2 years ago)	by Amazon Technologies Inc.	DDoS Attack Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2023-12-08 19:30:42 (2 years ago)	Malicious activity detected	Hacking Web App Attack
🇩🇪 ghostwarriors	2023-12-08 19:20:06 (2 years ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇦🇺 whirlpoole	2023-12-08 19:16:33 (2 years ago)	(mod_security) mod_security (id:949110) triggered by 13.52.237.32 (US/United States/ec2-13-52-237-32 ... show more (mod_security) mod_security (id:949110) triggered by 13.52.237.32 (US/United States/ec2-13-52-237-32.us-west-1.compute.amazonaws.com): 10 in the last 3600 secs show less	Brute-Force
🇫🇷 GabrielJST	2023-12-08 17:31:22 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 13.52.237.32 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 13.52.237.32 (US/United States/ec2-13-52-237-32.us-west-1.compute.amazonaws.com) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2023-12-08 17:14:13 (2 years ago)	(mod_security) mod_security (id:210831) triggered by 13.52.237.32 (ec2-13-52-237-32.us-west-1.comput ... show more (mod_security) mod_security (id:210831) triggered by 13.52.237.32 (ec2-13-52-237-32.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 08 12:14:05.692442 2023] [security2:error] [pid 96532] [client 13.52.237.32:39992] [client 13.52.237.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|1800badbeat.com\|F\|4"] [data "Microsoft URL"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "1800badbeat.com"] [uri "/"] [unique_id "ZXNO3S2omYWtjwvY9m6S3AAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇴 conexcol	2023-12-06 13:08:40 (2 years ago)	(CT) IP 13.52.237.32 (US/United States/ec2-13-52-237-32.us-west-1.compute.amazonaws.com) found to ha ... show more (CT) IP 13.52.237.32 (US/United States/ec2-13-52-237-32.us-west-1.compute.amazonaws.com) found to have 379 connections show less	Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 190.109.18.90

🇺🇸 162.216.149.84

🇩🇪 154.91.170.52

🇮🇪 149.34.242.98

🇧🇷 131.72.36.132

🇰🇷 119.192.128.163

🇨🇳 116.205.140.89

🇨🇳 111.19.212.140

🇺🇸 109.105.209.30

🇺🇸 109.105.209.29

🇺🇸 109.105.209.28

🇺🇸 109.105.209.27

🇮🇩 103.251.44.56

🇫🇷 91.231.89.123

🇫🇷 91.231.89.2

🇫🇷 91.196.152.162

🇺🇸 66.132.159.28

🇨🇭 20.203.244.142

🇺🇸 20.163.11.189

🇺🇸 4.148.240.255