JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

16.52.174.193

Neutral Activity

Abuse Confidence Score

0% Low Risk

71 reports

58 reporters · latest 3 months ago

ISP: Amazon Data Services Canada
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16509
Hostname(s): ec2-16-52-174-193.ca-central-1.compute.amazonaws.com
Domain Name: amazon.com
Country: 🇨🇦 Canada
City: Montreal, Quebec

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

16.52.174.193 has been reported 71 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

71 from 58 distinct reporters

First reported

September 2nd 2025

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 07:00:00 UTC · (3 months ago)	Apache probe; attempts=645; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.env.bak \| /.env.ci \| /.env.dev \| /.env.development \| /.env.dist \| /.env.docker \| /.env.example \| /.env.fly \| /.env.json \| /.env.live \| /.env.local \| /.e ... show more Apache probe; attempts=645; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.env.bak \| /.env.ci \| /.env.dev \| /.env.development \| /.env.dist \| /.env.docker \| /.env.example \| /.env.fly \| /.env.json \| /.env.live \| /.env.local \| /.env.neon \| /.env.old \| /.env.preprod \| /.env.prod \| /.env.production \| /.env.railway \| /.env.remote \| /.env.render \| /.env.sample \| /.env.save \| /.env.stage \| /.env.staging \| /.env.supabase \| /.env.swp \| /.env.test \| /.env.txt \| /.env.uat \| /.env.vault \| /.env.vercel \| /.env.yaml \| /.env.yml \| /.env~ \| /.git/.env \| /.git/config \| /actions/.env \| /admin-panel/.env \| /admin/.env \| /administrator/.env \| /angular/.env \| /ansible/.env \| /api/.env \| /api/dev/.env \| /api/staging/.env \| /api/v1/.env \| /api/v2/.env \| /api/v3/.env \| /app/.env \| /application/.env \| /apps/.env \| /assets/.env \| /aws/.env \| /azure/.env \| /backend/.env \| /backup/.env \| /backups/.env \| /beta/.env \| ... [211 exact paths total] show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 17:06:22 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 16.52.174.193 (ec2-16-52-174-193.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 13:06:14.094535 2026] [security2:error] [ ... show more (mod_security) mod_security (id:210492) triggered by 16.52.174.193 (ec2-16-52-174-193.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 13:06:14.094535 2026] [security2:error] [pid 4097158:tid 4097158] [client 16.52.174.193:57476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thewarmachineguns.com"] [uri "/.git/config"] [unique_id "ameQBi7jECMOqS6N-KSPDQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 12:59:02 UTC · (3 months ago)	(mod_security) mod_security (id:210492) triggered by 16.52.174.193 (ec2-16-52-174-193.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:58:56.328607 2026] [security2:error] [ ... show more (mod_security) mod_security (id:210492) triggered by 16.52.174.193 (ec2-16-52-174-193.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:58:56.328607 2026] [security2:error] [pid 1175721:tid 1175721] [client 16.52.174.193:40956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theurbanlogger.com"] [uri "/.git/config"] [unique_id "amdWEIw_gv3WY9xDPbdijwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-07-27 01:55:05 UTC · (3 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇬🇧 myintarweb	2025-10-11 03:23:11 UTC · (1 year ago)	16.52.174.193 - - [02/Sep/2025:20:38:10 +0100] 80 "\x16\x03\x01" 400 1467 "-" "-" ...	Hacking Bad Web Bot Web App Attack
🇬🇧 myintarweb	2025-09-19 14:51:59 UTC · (1 year ago)	16.52.174.193 - - [02/Sep/2025:20:38:10 +0100] 80 "\x16\x03\x01" 400 1467 "-" "-" ...	Hacking Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2025-09-04 20:08:37 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-04 00:08:36 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 SpaceHost-Server	2025-09-03 22:48:58 UTC · (1 year ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2025-09-03 22:05:07 UTC · (1 year ago)	2025-09-03 02:04:22 / 2025-09-03 02:11:39 / 2025-09-03 02:04:25 /	Web App Attack
🇩🇪 Vegascosmetics	2025-09-03 21:53:19 UTC · (1 year ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇹🇷 rtbh.com.tr	2025-09-03 20:08:35 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 f14driver	2025-09-03 06:07:33 UTC · (1 year ago)	...	Port Scan Brute-Force Web App Attack SSH
🇬🇧 openstrike.co.uk	2025-09-03 05:13:44 UTC · (1 year ago)	2 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇧🇪 boxed-it	2025-09-03 02:06:27 UTC · (1 year ago)	GET /.git/config (Tarpitted for , wasted 120B)	Web App Attack

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇬 165.154.11.225

🇺🇸 165.22.184.221

🇵🇹 85.240.193.104

🇫🇮 80.66.83.80

🇺🇸 40.124.123.115

🇺🇸 195.184.76.224

🇳🇱 193.47.62.69

🇬🇧 188.30.58.163

🇺🇸 173.194.103.166

🇩🇪 167.94.146.39

🇺🇸 162.216.150.214

🇺🇸 161.35.55.191

🇮🇳 157.245.108.6

🇦🇫 149.54.62.86

🇹🇷 78.190.131.6

🇬🇧 35.203.211.81

🇬🇧 35.203.210.46

🇬🇧 2.57.17.245

🇹🇼 198.235.24.81

🇺🇸 174.138.85.182