JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.14.211.185

52.14.211.185 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 69%: ?

69%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-52-14-211-185.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.14.211.185

Whois 52.14.211.185

IP Abuse Reports for 52.14.211.185:

This IP address has been reported a total of 14 times from 14 distinct sources. 52.14.211.185 was first reported on June 10th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 LiftUp Hosting	2026-06-10 04:39:59 (1 week ago)	Honeypot hit: HTTP/1.1 request on 9700 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macinto ... show more Honeypot hit: HTTP/1.1 request on 9700 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 9700 [2], 2078 [1] TCP show less	Hacking Bad Web Bot
🇵🇱 sefinek.net	2026-06-10 04:39:41 (1 week ago)	Honeypot hit: HTTP/1.1 request on 2078 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macinto ... show more Honeypot hit: HTTP/1.1 request on 2078 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 2078 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇯🇵 mkaraki	2026-06-10 04:36:57 (1 week ago)	1781066216 # Service_probe # SIGNATURE_SEND # source_ip:52.14.211.185 # dst_port:9700 ...	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-10 04:36:38 (1 week ago)	Honeypot hit: HTTP/1.1 request on 9700 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macinto ... show more Honeypot hit: HTTP/1.1 request on 9700 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 9700 [1] TCP show less	Web App Attack
Anonymous	2026-06-10 04:31:08 (1 week ago)	attempts to hack passwords	Port Scan Brute-Force
🇺🇸 3rdKey	2026-06-10 04:30:03 (1 week ago)	OpenCanary honeypot hit on port 6379 (no legitimate service runs there); logtype 17001. Automated re ... show more OpenCanary honeypot hit on port 6379 (no legitimate service runs there); logtype 17001. Automated report. show less	Port Scan Hacking
🇫🇷 TheHoneyPotter	2026-06-10 04:29:02 (1 week ago)	Honeypot [fc-honeypot]: HTTP/1.1 request on 2078 GET / User-Agent: visionheight.com/scan Mozilla/5. ... show more Honeypot [fc-honeypot]: HTTP/1.1 request on 2078 GET / User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip; 2078 [3], 8554 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 Justin F. \| AS204464	2026-06-10 04:28:35 (1 week ago)	Honeypot [nx-infrastructure]: Unauthorized traffic (1 bytes of payload); 49153 [4], 8084 [3], 5938 [ ... show more Honeypot [nx-infrastructure]: Unauthorized traffic (1 bytes of payload); 49153 [4], 8084 [3], 5938 [2] TCP Reported by: Justin F. show less	Port Scan
🇫🇷 Thaliruth	2026-06-10 04:27:40 (1 week ago)	Jun 10 06:26:26 151 dovecot: imap-login: Login aborted: Connection closed (no auth attempts in 0 sec ... show more Jun 10 06:26:26 151 dovecot: imap-login: Login aborted: Connection closed (no auth attempts in 0 secs) (no_auth_attempts): user=<>, rip=52.14.211.185, lip=46.252.194.151, session=<wcqfpd5TLE00DtO5> Jun 10 06:26:39 151 dovecot: imap-login: Login aborted: Too many invalid commands (no auth attempts in 0 secs) (no_auth_attempts): user=<>, rip=52.14.211.185, lip=46.252.194.151, session=<7f9hpt5Tlrk0DtO5> Jun 10 06:27:40 151 dovecot: imap-login: Login aborted: Too many invalid commands (no auth attempts in 0 secs) (no_auth_attempts): user=<>, rip=52.14.211.185, lip=46.252.194.151, session=<360Fqt5T0oU0DtO5> ... show less	Hacking Brute-Force
🇺🇸 drewf.ink	2026-06-10 04:26:17 (1 week ago)	[04:26] Port scanning. Port(s) scanned: TCP/143	Port Scan
🇺🇸 Zestysoft	2026-06-10 04:26:08 (1 week ago)	2026-06-10T04:25:35.273332+00:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth ... show more 2026-06-10T04:25:35.273332+00:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=52.14.211.185, lip=172.17.100.207, session=<vziNot5TBtE0DtO5> 2026-06-10T04:26:07.839567+00:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=52.14.211.185, lip=172.17.100.207, session=<6CR+pN5TJjI0DtO5> ... show less	Brute-Force
🇷🇺 DZBOT	2026-06-10 04:26:05 (1 week ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇸🇪 donarev419	2026-06-10 04:25:47 (1 week ago)	Connection to port 143 with data transfer. Data preview:	Port Scan Hacking
🇹🇷 Squearex	2026-06-10 04:25:37 (1 week ago)	Automated ban by SCUMUnified Shield. Honeypot Trap Triggered (Decoy Port 143)	Brute-Force SSH

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 201.131.135.106

🇬🇧 185.247.137.145

🇨🇳 182.112.44.187

🇦🇹 178.165.197.134

🇧🇩 160.25.5.221

🇺🇸 147.185.132.88

🇺🇦 145.224.101.83

🇱🇹 91.224.92.17

🇨🇳 61.145.190.218

🇺🇸 20.127.200.74

🇨🇳 223.76.158.107

🇲🇩 217.19.215.17

🇺🇸 205.185.125.44

🇮🇩 202.165.33.162

🇬🇧 185.247.137.129

🇬🇧 185.247.137.127

🇷🇺 178.68.90.40

🇳🇱 176.65.139.58

172.22.0.1

🇭🇰 150.5.131.119