JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.15.114.144

52.15.114.144 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-52-15-114-144.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.15.114.144

Whois 52.15.114.144

IP Abuse Reports for 52.15.114.144:

This IP address has been reported a total of 37 times from 27 distinct sources. 52.15.114.144 was first reported on April 3rd 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2025-04-07 22:59:36 (1 year ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇹🇷 rtbh.com.tr	2025-04-05 20:05:55 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-04-05 00:05:55 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-04-04 20:05:54 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 openstrike.co.uk	2025-04-04 05:12:51 (1 year ago)	24 attacks on Wordpress URLs, PHP URLs: GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1 GET /domain.c ... show more 24 attacks on Wordpress URLs, PHP URLs: GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1 GET /domain.cgi?id=167/xmlrpc.php?rsd HTTP/1.1 show less	Web App Attack
🇫🇷 pm33	2025-04-03 16:34:15 (1 year ago)	Excessive crawling HTTP 404	Web App Attack
🇺🇸 TPI-Abuse	2025-04-03 15:41:01 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 52.15.114.144 (ec2-52-15-114-144.us-east-2.comp ... show more (mod_security) mod_security (id:225170) triggered by 52.15.114.144 (ec2-52-15-114-144.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 11:40:53.323586 2025] [security2:error] [pid 31779:tid 31779] [client 52.15.114.144:63911] [client 52.15.114.144] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.doug-riley.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.doug-riley.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z-6sBQ-hBbK-jmSVkhOijgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ELYAZ	2025-04-03 15:23:25 (1 year ago)	(wordpress) Failed wordpress login from 52.15.114.144 (US/United States/ec2-52-15-114-144.us-east-2. ... show more (wordpress) Failed wordpress login from 52.15.114.144 (US/United States/ec2-52-15-114-144.us-east-2.compute.amazonaws.com) show less	Brute-Force
🇧🇷 OuverneY	2025-04-03 15:19:18 (1 year ago)	FW-PortScan: Traffic Blocked (Port=443 <- 69 attempts), Total connections: 138, Total destination I ... show more FW-PortScan: Traffic Blocked (Port=443 <- 69 attempts), Total connections: 138, Total destination IPs: 1 show less	Port Scan
Anonymous	2025-04-03 14:09:25 (1 year ago)	[15:09:24] 11*: Scanning for Exploits - //wp-includes/wlwmanifest.xml	Hacking Bad Web Bot Web App Attack
Anonymous	2025-04-03 13:49:20 (1 year ago)	Probing for Open Source CMS Components	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-04-03 13:10:47 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 52.15.114.144 (ec2-52-15-114-144.us-east-2.comp ... show more (mod_security) mod_security (id:240335) triggered by 52.15.114.144 (ec2-52-15-114-144.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 09:10:43.949927 2025] [security2:error] [pid 25865:tid 25865] [client 52.15.114.144:65437] [client 52.15.114.144] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 52.15.114.144 (+1 hits since last alert)\|www.usaangelinvestors.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.usaangelinvestors.com"] [uri "/xmlrpc.php"] [unique_id "Z-6I08gNQvdb_p2gFaZuFgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-03 12:34:09 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 52.15.114.144 (ec2-52-15-114-144.us-east-2.comp ... show more (mod_security) mod_security (id:225170) triggered by 52.15.114.144 (ec2-52-15-114-144.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 08:34:03.724758 2025] [security2:error] [pid 18340:tid 18340] [client 52.15.114.144:59770] [client 52.15.114.144] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.tttns.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tttns.com"] [uri "/about-jason/wp-json/wp/v2/users/"] [unique_id "Z-6AO1Y67b8jNNr1s5ziawAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 DEV-DNS	2025-04-03 11:53:49 (1 year ago)	(wordpress) Failed wordpress login from 52.15.114.144 (US/United States/Ohio/Columbus/ec2-52-15-114- ... show more (wordpress) Failed wordpress login from 52.15.114.144 (US/United States/Ohio/Columbus/ec2-52-15-114-144.us-east-2.compute.amazonaws.com/[redacted]) show less	Brute-Force
🇺🇸 TPI-Abuse	2025-04-03 11:39:47 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 52.15.114.144 (ec2-52-15-114-144.us-east-2.comp ... show more (mod_security) mod_security (id:225170) triggered by 52.15.114.144 (ec2-52-15-114-144.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 07:39:42.629111 2025] [security2:error] [pid 17852:tid 17852] [client 52.15.114.144:60227] [client 52.15.114.144] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|peacefulsteps.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "peacefulsteps.com"] [uri "/test/wp-json/wp/v2/users/"] [unique_id "Z-5zfo8JF1tfIP3fIKGmZgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 178.128.108.2

🇩🇪 167.94.145.28

🇺🇸 162.216.150.6

🇿🇦 102.222.20.182

🇳🇱 45.148.10.141

🇹🇭 202.29.220.126

🇲🇽 187.188.8.205

🇨🇳 183.222.14.242

🇨🇳 180.76.53.175

🇺🇸 147.185.132.131

🇺🇸 137.184.226.118

🇨🇳 124.163.202.215

🇫🇷 91.231.89.79

🇺🇸 74.125.42.156

🇮🇶 65.20.131.63

🇧🇷 45.205.1.241

🇺🇸 45.33.85.184

🇭🇰 199.45.154.177

🇪🇸 196.196.150.4

🇦🇷 190.16.194.197