JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 32.195.49.74

32.195.49.74 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 22%: ?

22%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-32-195-49-74.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 32.195.49.74

Whois 32.195.49.74

IP Abuse Reports for 32.195.49.74:

This IP address has been reported a total of 8 times from 7 distinct sources. 32.195.49.74 was first reported on September 11th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-09-13 13:02:00 (1 month ago)	Web application attack detected	Hacking Web App Attack
🇫🇷 ecode hosting	2026-09-12 10:52:04 (1 month ago)	Domain : MailEnable WebMail Rule : hack 2026-09-12 10:49:38 10.100.1.20 HEAD /database.bak - 443 - 3 ... show more Domain : MailEnable WebMail Rule : hack 2026-09-12 10:49:38 10.100.1.20 HEAD /database.bak - 443 - 32.195.49.74 gobuster/3.8.2 - 404 0 2 189 - - show less	Hacking SQL Injection Brute-Force
Anonymous	2026-09-12 08:47:27 (1 month ago)	fail2ban: plesk-modsecurity jail on genckocaeli.com	Web App Attack
🇩🇪 Admins@FBN	2026-09-12 03:29:31 (1 month ago)	FW-PortScan: Traffic Blocked srcport=41942 dstport=443	Port Scan
🇹🇷 sinan	2026-09-11 21:53:00 (1 month ago)	Scan, HEAD /NTUSER.DAT HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 20:46:00 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 32.195.49.74 (ec2-32-195-49-74.compute-1.amazon ... show more (mod_security) mod_security (id:210730) triggered by 32.195.49.74 (ec2-32-195-49-74.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 16:45:53.598951 2026] [security2:error] [pid 25649:tid 25649] [client 32.195.49.74:47126] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.zmnc.tr:443\|F\|2"] [data ".cmd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.zmnc.tr"] [uri "/deploy.cmd"] [unique_id "aqRogQekxczgYcwM1N-cDgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-11 16:00:45 (1 month ago)	Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ... show more Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing. show less	Web App Attack
Anonymous	2026-09-11 15:44:51 (1 month ago)	Attempted access to sensitive endpoint (/.env.local) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/.env.local) detected. Automated scan or unauthorized probing. show less	Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.124.4.26

🇳🇱 185.203.56.9

🇧🇷 177.185.62.95

🇺🇸 165.154.202.254

🇧🇪 207.175.52.162

🇺🇸 184.105.139.114

🇺🇸 162.216.150.48

🇺🇸 147.135.11.133

🇩🇪 69.5.169.239

🇨🇦 37.120.205.202

🇵🇸 24.42.100.65

🇨🇳 14.103.116.87

🇨🇳 203.132.60.122

🇳🇵 202.70.78.237

🇳🇱 193.47.62.69

🇨🇳 180.76.125.241

🇷🇺 178.75.6.232

🇫🇷 173.249.19.73

🇺🇸 172.174.211.154

🇨🇦 144.217.241.75