JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 15.252.173.132

15.252.173.132

Recent Activity

21 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Amazon.com, Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS16509

Hostname(s)

ec2-15-252-173-132.ap-south-1.compute.amazonaws.com

Domain Name

amazon.com

Country

🇮🇳 India

City

Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 15.252.173.132:

This IP address has been reported a total of 21 times from 21 distinct sources. 15.252.173.132 was first reported on September 5th 2026, and the most recent report was 8 hours ago. In the last 60 days, the top reporter locations were: United States of America with 8 reports; France with 4 reports; Germany with 3 reports. The most common categories in these recent reports were: Web App Attack 13 times; Hacking 10 times; Port Scan 5 times; Bad Web Bot 5 times; IoT Targeted 1 time; Other 4 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 kwiatekstas	2026-09-08 15:08:24 (8 hours ago)	15.252.173.132 - - [08/Sep/2026:17:08:22 +0200] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Macin ... show more 15.252.173.132 - - [08/Sep/2026:17:08:22 +0200] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 15.252.173.132 - - [08/Sep/2026:17:08:23 +0200] "GET /.env.local HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 15.252.173.132 - - [08/Sep/2026:17:08:23 +0200] "GET /.env.production HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
🇵🇱 TaKeN	2026-09-08 14:55:53 (8 hours ago)	Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application pr ... show more Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 1 matching blocked event(s) between 2026-09-08T16:55:53+02:00 and 2026-09-08T16:55:53+02:00. Sample requested paths: /db.sql. show less	Web App Attack Hacking
🇺🇸 LotPhantom	2026-09-08 11:01:46 (12 hours ago)	2026-09-08T11:01:45.903405+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-08T11:01:45.903405+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=15.252.173.132 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=37103 DF PROTO=TCP SPT=49042 DPT=8081 WINDOW=64240 RES=0x00 SYN URGP=0 2026-09-08T11:01:45.905439+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=15.252.173.132 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=38872 DF PROTO=TCP SPT=50778 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇪🇸 elcruzado.es	2026-09-06 21:35:20 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 15.252.173.132 (IN/India/ec2-15-252-173 ... show more (mod_security) mod_security triggered on hostname [redacted] 15.252.173.132 (IN/India/ec2-15-252-173-132.ap-south-1.compute.amazonaws.com) show less	SQL Injection
🇨🇦 polycoda	2026-09-06 20:20:05 (2 days ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇫🇷 Coco Bongo	2026-09-06 20:06:10 (2 days ago)	15.252.173.132 [redacted] (16509-Amazon.com, Inc. India Mumbai) - - [06/Sep/2026:22:05:55 +0200] "GE ... show more 15.252.173.132 [redacted] (16509-Amazon.com, Inc. India Mumbai) - - [06/Sep/2026:22:05:55 +0200] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; ArgusScanner/0.1; +http://example/abuse) ... show less	Bad Web Bot Web App Attack
🇫🇷 spot	2026-09-06 18:17:28 (2 days ago)	15.252.173.132 - - [06/Sep/2026:19:17:26 +0100] "GET /.env HTTP/1.1" 404 485 "-" "Mozilla/5.0 (compa ... show more 15.252.173.132 - - [06/Sep/2026:19:17:26 +0100] "GET /.env HTTP/1.1" 404 485 "-" "Mozilla/5.0 (compatible; ArgusScanner/0.1; +http://example/abuse)" ... show less	Web App Attack VPN IP
🇫🇷 ISPLtd	2026-09-06 18:17:27 (2 days ago)	15.252.173.132 [06/Sep/2026:15:17:26 -0300] 178.18.241.253:80 URL:/.env "GET /.env 15.252.173.132 [0 ... show more 15.252.173.132 [06/Sep/2026:15:17:26 -0300] 178.18.241.253:80 URL:/.env "GET /.env 15.252.173.132 [06/Sep/2026:15:17:26 -0300] 178.18.241.253:80 URL:/.git/config "GET /.git/config ... show less	Hacking Web App Attack
🇺🇸 stvnrdg.me	2026-09-06 16:03:58 (2 days ago)	15.252.173.132 - - [06/Sep/2026:16:03:57 +0000] "GET /phpinfo.php HTTP/1.1" 404 393 "-" "Mozilla/5.0 ... show more 15.252.173.132 - - [06/Sep/2026:16:03:57 +0000] "GET /phpinfo.php HTTP/1.1" 404 393 "-" "Mozilla/5.0 (compatible; ArgusScanner/0.1; +http://example/abuse)" ... show less	Hacking
🇩🇪 schuh	2026-09-06 15:55:18 (2 days ago)	06-09-2026:15:55:13UTC [Caddy] Suspicious web request: uri:/.env,/.git/config,/.git/HEAD,/.aws/crede ... show more 06-09-2026:15:55:13UTC [Caddy] Suspicious web request: uri:/.env,/.git/config,/.git/HEAD,/.aws/credentials (4 requests) tcp:80 show less	Bad Web Bot Web App Attack
🇺🇸 drewf.ink	2026-09-06 15:29:58 (2 days ago)	[15:29] Attempted HTTP access to an exposed .env file on the web honeypot	Web App Attack
🇺🇸 jfz-abuse	2026-09-06 14:24:54 (2 days ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇺🇸 SuperCores Hosting	2026-09-06 11:58:42 (2 days ago)	[2026-09-06 11:58:42.625260] TELNET/8080 Unautorized connection, Suspicious Mirai Botnet.	IoT Targeted Brute-Force Hacking Port Scan DDoS Attack
🇫🇷 a.mohamed.go	2026-09-06 11:04:02 (2 days ago)	15.252.173.132 - - [06/Sep/2026:11:04:01 +0000] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compa ... show more 15.252.173.132 - - [06/Sep/2026:11:04:01 +0000] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; ArgusScanner/0.1; +http://example/abuse)" ... show less	Hacking Web App Attack
Anonymous	2026-09-06 10:28:12 (2 days ago)	80/tcp (1 or more attempts)	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.155.154.82

🇨🇳 123.187.243.243

🇻🇳 103.154.63.88

🇬🇧 35.203.210.66

🇺🇸 205.210.31.92

🇺🇸 195.184.76.4

🇻🇳 171.231.183.157

🇺🇸 154.12.252.42

🇺🇸 66.240.192.138

🇿🇦 41.185.61.177

🇺🇸 34.201.223.158

🇧🇷 205.210.31.140

🇩🇪 185.216.213.235

🇧🇾 178.120.51.155

🇩🇪 118.193.58.120

🇲🇾 113.23.225.9

🇨🇾 94.46.236.234

🇺🇸 72.167.225.241

🇩🇪 51.224.251.97

🇬🇧 51.89.129.112