JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.14.26.177

52.14.26.177 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 81%: ?

81%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-52-14-26-177.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.14.26.177

Whois 52.14.26.177

IP Abuse Reports for 52.14.26.177:

This IP address has been reported a total of 17 times from 14 distinct sources. 52.14.26.177 was first reported on July 24th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇴 Bots.go.to.hell	2026-07-27 10:12:55 (18 hours ago)	This IP was detected by CrowdSec triggering LePresidente/http-generic-403-bf	Web App Attack Brute-Force
🇩🇪 big-cloud.nl	2026-07-27 08:53:33 (19 hours ago)	Try to access /.git/config	Web App Attack
🇮🇹 CoreTech srl	2026-07-27 08:50:39 (19 hours ago)	cloudlinux2 fail2ban: 2026-07-27 10:09:11,679 fail2ban.actions [1917]: NOTICE [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-07-27 10:09:11,679 fail2ban.actions [1917]: NOTICE [plesk-modsecurity] Unban 39.194.2.195cloudlinux2 fail2ban: 2026-07-27 10:09:11,691 fail2ban.actions [1917]: NOTICE [plesk-modsecurity] Unban 122.164.12.227cloudlinux2 fail2ban: 2026-07-27 10:09:22,322 fail2ban.filter [1917]: INFO [plesk-proftpd] Found 27.29.164.167 - 2026-07-27 10:09:22cloudlinux2 fail2ban: 2026-07-27 10:09:43,009 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 216.128.11.105 - 2026-07-27 10:09:43cloudlinux2 fail2ban: 2026-07-27 10:09:43,747 fail2ban.actions [1917]: NOTICE [plesk-modsecurity] Unban 176.204.4.23cloudlinux2 fail2ban: 2026-07-27 10:10:15,865 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 52.14.26.177 - 2026-07-27 10:10:15cloudlinux2 fail2ban: 2026-07-27 10:10:15,575 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 52.14.26.177 - 2026-07-27 10:10:15cloudlinux2 fail2ban: 2026-07-27 10:10:16,005 fail2ban.actions show less	FTP Brute-Force
🇺🇸 TPI-Abuse	2026-07-27 06:53:26 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 52.14.26.177 (ec2-52-14-26-177.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 52.14.26.177 (ec2-52-14-26-177.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 02:53:22.661199 2026] [security2:error] [pid 12445:tid 12445] [client 52.14.26.177:38128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "filmpolis.com"] [uri "/.git/config"] [unique_id "amcAYtP3PQS22ogtqfJtAAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-27 06:22:49 (22 hours ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 homeshowdomain.nl	2026-07-26 21:59:55 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-25. show less	Web App Attack SSH Hacking
Anonymous	2026-07-26 05:26:27 (1 day ago)	(caddyscan) Scanner path probe from 52.14.26.177 (US/United States/ec2-52-14-26-177.us-east-2.comput ... show more (caddyscan) Scanner path probe from 52.14.26.177 (US/United States/ec2-52-14-26-177.us-east-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:05:26:23 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:05:26:23 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:05:26:23 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:05:26:23 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:05:26:23 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
Anonymous	2026-07-26 03:37:48 (2 days ago)	(caddyscan) Scanner path probe from 52.14.26.177 (US/United States/ec2-52-14-26-177.us-east-2.comput ... show more (caddyscan) Scanner path probe from 52.14.26.177 (US/United States/ec2-52-14-26-177.us-east-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:03:37:45 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:03:37:45 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:03:37:46 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:03:37:46 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:03:37:46 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
🇩🇪 R.G.	2026-07-26 03:02:58 (2 days ago)	(ScanningForFiles) Scanning for files triggerd 52.14.26.177 (US/United States/ec2-52-14-26-177.us-ea ... show more (ScanningForFiles) Scanning for files triggerd 52.14.26.177 (US/United States/ec2-52-14-26-177.us-east-2.compute.amazonaws.com): 10 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-26 03:02:15 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇮🇹 clamehost.it	2026-07-26 02:41:01 (2 days ago)	Automatic report - Brute Force attack using this IP address	Brute-Force
Anonymous	2026-07-26 01:59:58 (2 days ago)	(caddyscan) Scanner path probe from 52.14.26.177 (US/United States/ec2-52-14-26-177.us-east-2.comput ... show more (caddyscan) Scanner path probe from 52.14.26.177 (US/United States/ec2-52-14-26-177.us-east-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:01:59:57 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:01:59:57 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:01:59:57 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:01:59:57 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 52.14.26.177 - - [26/Jul/2026:01:59:57 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
🇳🇱 debestelapp	2026-07-25 00:45:05 (3 days ago)		Web App Attack
🇫🇷 Octopuce	2026-07-25 00:08:02 (3 days ago)	Aggressive web search of vulnerable pages: / /.env /.env.local /app/.env /apps/.env ...	Web App Attack
🇬🇧 consul.to	2026-07-24 23:48:06 (3 days ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 172.213.144.209

🇺🇸 162.217.100.196

🇪🇸 158.158.76.106

🇺🇸 136.119.96.30

🇩🇪 3.71.26.96

🇮🇳 203.193.137.250

🇹🇼 198.235.24.87

🇹🇼 198.235.24.39

🇹🇼 198.235.24.37

🇺🇸 173.239.240.116

🇳🇱 167.172.40.248

🇺🇸 162.216.150.170

🇺🇸 162.216.150.68

🇨🇳 111.36.112.138

🇺🇸 100.55.20.32

🇫🇷 91.231.89.15

🇺🇸 68.127.228.176

🇳🇱 64.89.162.181

🇻🇪 38.224.36.78

🇺🇸 35.91.133.236