JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.12.224.247

52.12.224.247 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 77%: ?

77%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-52-12-224-247.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.12.224.247

Whois 52.12.224.247

IP Abuse Reports for 52.12.224.247:

This IP address has been reported a total of 16 times from 14 distinct sources. 52.12.224.247 was first reported on April 14th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-23 22:04:29 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-22. show less	Web App Attack SSH Hacking
🇩🇪 arnisolutions	2026-08-23 19:42:07 (2 days ago)	Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production s ... show more Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 1 day(s) between 2026-08-23 and 2026-08-23 (UTC). Sample request: GET /includes/phpinfo.php HTTP/2.0 show less	Web App Attack Hacking
🇧🇪 cmbplf	2026-08-23 12:49:55 (2 days ago)	3.472 requests with url.path .env 560 requests with url.path phpinfo.php	Brute-Force Bad Web Bot
🇫🇷 dynamix	2026-08-23 12:25:35 (2 days ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Savvii	2026-08-23 11:29:47 (2 days ago)	20 attempts against mh-misbehave-ban on redirect	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Epimetheus	2026-08-23 04:20:33 (2 days ago)	Unauthorized access attempts: [GET] /public_html/phpinfo.php [GET] /sender/.env [GET] /circleci/.en ... show more Unauthorized access attempts: [GET] /public_html/phpinfo.php [GET] /sender/.env [GET] /circleci/.env [GET] /debug.php [GET] /src/.env [GET] /staging/.env [GET] /temp/.env [GET] /shared/.env [GET] /react/.env [GET] /frontend/.env [GET] /.env.prod UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Web App Attack
🇫🇷 Octopuce	2026-08-22 22:02:53 (2 days ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-22 22:02:46 (2 days ago)	Auto-ban: >3000 req/min op 2026-08-22	Web App Attack SSH Hacking
🇳🇱 debestelapp	2026-08-22 21:10:07 (2 days ago)		Web App Attack
🇩🇪 ghostwarriors	2026-08-22 20:20:07 (3 days ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-08-22 20:13:10 (3 days ago)	52.12.224.247 - - [22/Aug/2026:22:13:00 +0200] "GET / HTTP/1.1" 503 8364 "-" "Mozilla/5.0 (Windows N ... show more 52.12.224.247 - - [22/Aug/2026:22:13:00 +0200] "GET / HTTP/1.1" 503 8364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.12.224.247 - - [22/Aug/2026:22:13:01 +0200] "POST / HTTP/1.1" 503 8336 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.12.224.247 - - [22/Aug/2026:22:13:01 +0200] "POST / HTTP/1.1" 503 8337 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.12.224.247 - - [22/Aug/2026:22:13:02 +0200] "POST / HTTP/1.1" 503 8336 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.12.224.247 - - [22/Aug/2026:22:13:02 +0200] "GET /.git/config HTTP/1.1" 403 4534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.12.224.247 - - [22/Aug/2026: show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-22 19:47:39 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 52.12.224.247 (ec2-52-12-224-247.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 52.12.224.247 (ec2-52-12-224-247.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 15:47:31.030940 2026] [security2:error] [pid 8284:tid 8284] [client 52.12.224.247:60134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "denemeblog.osmanbozkurt.com"] [uri "/.git/config"] [unique_id "aon805_CUhQeccpj13IJRAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-08-21 14:20:09 (4 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 09:36:37 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 52.12.224.247 (ec2-52-12-224-247.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 52.12.224.247 (ec2-52-12-224-247.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 05:36:30.251647 2026] [security2:error] [pid 21318:tid 21318] [client 52.12.224.247:51066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daveroozendaal.chezlubacov.xyz"] [uri "/.git/config"] [unique_id "aogcHibFtBwYbBlN64AwQgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-21 08:11:43 (4 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4882:9000::99

🇬🇧 194.50.235.153

🇺🇸 147.185.132.221

🇳🇱 89.21.67.155

🇺🇸 66.132.224.236

🇻🇪 201.209.76.183

🇭🇰 199.45.154.56

🇺🇸 192.161.49.2

🇻🇳 180.93.172.213

🇳🇱 144.31.203.145

🇨🇳 116.179.37.183

🇨🇳 60.27.226.42

🇬🇧 45.133.173.69

🇵🇦 191.98.196.35

🇨🇳 139.159.142.7

🇳🇱 91.92.40.14

🇺🇸 66.132.172.219

🇸🇬 43.163.80.193

🇬🇧 35.203.210.28

🇺🇸 3.85.190.121