JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.25.199.217

Neutral Activity

Abuse Confidence Score

0% Low Risk

44 reports

31 reporters · latest 3 years ago

ISP: Amazon Technologies Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16509
Hostname(s): ec2-52-25-199-217.us-west-2.compute.amazonaws.com
Domain Name: amazon.com
Country: 🇺🇸 United States of America
City: Boardman, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.25.199.217 has been reported 44 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

44 from 31 distinct reporters

First reported

October 12th 2023

Most recent report

3 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Bay13	2023-10-14 02:15:29 UTC · (3 years ago)	f2b urlscanners	Port Scan Hacking Web App Attack
🇺🇸 HoneyPotter	2023-10-14 02:14:21 UTC · (3 years ago)	{"Method":"GET","Path":"/.env.save","Headers":{"Accept":"/","Accept-Encoding":"gzip, deflate","Connection":"keep-alive","User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"}, ... show more {"Method":"GET","Path":"/.env.save","Headers":{"Accept":"/","Accept-Encoding":"gzip, deflate","Connection":"keep-alive","User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"},"Body":"","Ip":"52.25.199.217:55594"} show less	Web App Attack
🇮🇪 Jim Keir	2023-10-14 01:08:17 UTC · (3 years ago)	2023-10-14 01:08:16 52.25.199.217 File scanning, blocking 52.25.199.217 for 5 minutes	Web App Attack
🇮🇩 babahdigital	2023-10-13 22:25:19 UTC · (3 years ago)	(ModSec-3) Access denied and Not found triggered, by 52.25.199.217 (US/United States/ec2-52-25-199-217.us-west-2.compute.amazonaws.com): 5 in the last 3600 secs; Trigger: LF_CUSTOMTRIGGER;	Email Spam Bad Web Bot Web App Attack
🇩🇪 Savvii	2023-10-13 21:46:29 UTC · (3 years ago)	20 attempts against mh-misbehave-ban on cloud	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Savvii	2023-10-13 21:31:18 UTC · (3 years ago)	20 attempts against mh-misbehave-ban on web	Brute-Force Bad Web Bot Web App Attack
Anonymous	2023-10-13 20:41:22 UTC · (3 years ago)	52.25.199.217 - - \[14/Oct/2023:04:41:20 +0800\] \"GET /admin-app/.env HTTP/1.1\" 404 388 \"-\" \"Mozilla/5.0 $Windows NT 10.0\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/109.0.0.0 Safari/537.36\"	Web App Attack
🇺🇸 kuroneko_omu	2023-10-13 16:51:01 UTC · (3 years ago)	[autoreport] Probably Web App attack (eg. wp, phpmyadmin, ...)	Hacking Brute-Force Web App Attack
🇫🇷 LRNP	2023-10-13 16:16:51 UTC · (3 years ago)	_:80 52.25.199.217 - - [13/Oct/2023:16:16:28 +0000] "GET /laravel/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" _:80 52.25.199.217 - - [13/Oct/2023:16:16:3 ... show more _:80 52.25.199.217 - - [13/Oct/2023:16:16:28 +0000] "GET /laravel/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" _:80 52.25.199.217 - - [13/Oct/2023:16:16:31 +0000] "POST /laravel/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" _:80 52.25.199.217 - - [13/Oct/2023:16:16:39 +0000] "GET /frontend_dev.php/$ HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" _:80 52.25.199.217 - - [13/Oct/2023:16:16:41 +0000] "GET /debug/default/view?panel=config HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" _:80 52.25.199.217 - - [13/Oct/2023:16:16:41 +0000] "GET /config.json HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit ... show less	Bad Web Bot Web App Attack
🇵🇱 jo	2023-10-13 16:08:15 UTC · (3 years ago)	[Fri Oct 13 16:07:50.179988 2023] [php:error] [pid 2307716] [client 52.25.199.217:34794] script '/var/www/html/frontend_dev.php' not found or unable to stat [Fri Oct 13 16:08:06.153355 2023] [php:error] [pid 2308218] [client 52.25.199.217:52264] scri ... show more [Fri Oct 13 16:07:50.179988 2023] [php:error] [pid 2307716] [client 52.25.199.217:34794] script '/var/www/html/frontend_dev.php' not found or unable to stat [Fri Oct 13 16:08:06.153355 2023] [php:error] [pid 2308218] [client 52.25.199.217:52264] script '/var/www/html/phpinfo.php' not found or unable to stat [Fri Oct 13 16:08:09.922772 2023] [php:error] [pid 2308214] [client 52.25.199.217:51428] script '/var/www/html/php-info.php' not found or unable to stat [Fri Oct 13 16:08:11.346607 2023] [php:error] [pid 2308225] [client 52.25.199.217:51438] script '/var/www/html/pinfo.php' not found or unable to stat [Fri Oct 13 16:08:13.881465 2023] [php:error] [pid 2307716] [client 52.25.199.217:51478] script '/var/www/html/information.php' not found or unable to stat ... show less	Port Scan Hacking Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇵🇱 dzpk	2023-10-13 16:05:43 UTC · (3 years ago)	[13/Oct/2023:18:05:35 +0200] 169721313513.908806 52.25.199.217 36028 HOST 80 [13/Oct/2023:18:05:40 +0200] 169721314019.390008 52.25.199.217 36056 HOST 80 [13/Oct/2023:18:05:42 +0200] 169721314222.195145 52.25.199.217 53674 HOST 80	Web App Attack
🇵🇪 inspectorperuano	2023-10-13 15:53:10 UTC · (3 years ago)	GET /application/.env HTTP/1.0	Web App Attack
🇫🇷 LRNP	2023-10-13 15:29:27 UTC · (3 years ago)	_:80 52.25.199.217 - - [13/Oct/2023:15:29:18 +0000] "GET /shared/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" _:80 52.25.199.217 - - [13/Oct/2023:15:29:19 ... show more _:80 52.25.199.217 - - [13/Oct/2023:15:29:18 +0000] "GET /shared/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" _:80 52.25.199.217 - - [13/Oct/2023:15:29:19 +0000] "POST /shared/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" _:80 52.25.199.217 - - [13/Oct/2023:15:29:19 +0000] "GET /.env.development HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" _:80 52.25.199.217 - - [13/Oct/2023:15:29:20 +0000] "POST /.env.development HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" _:80 52.25.199.217 - - [13/Oct/2023:15:29:20 +0000] "GET /.aws/credentials HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTM ... show less	Bad Web Bot Web App Attack
Anonymous	2023-10-13 15:29:08 UTC · (3 years ago)		Web App Attack
🇺🇸 PlexLads	2023-10-13 15:25:16 UTC · (3 years ago)	52.25.199.217 - - [13/Oct/2023:08:25:07 -0700] "GET /.env.old HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 52.25.199.217 - - [13/Oct/2023:08:25:10 -0700] "POST ... show more 52.25.199.217 - - [13/Oct/2023:08:25:07 -0700] "GET /.env.old HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 52.25.199.217 - - [13/Oct/2023:08:25:10 -0700] "POST /.env.old HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 52.25.199.217 - - [13/Oct/2023:08:25:11 -0700] "GET /.aws/credentials HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 52.25.199.217 - - [13/Oct/2023:08:25:12 -0700] "POST /.aws/credentials HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 52.25.199.217 - - [13/Oct/2023:08:25:13 -0700] "GET /private/.env HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Saf ... show less	Hacking Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 2400:6180:100:d0:0:1:c072:1001

🇨🇳 183.224.97.83

🇵🇱 172.64.198.18

🇬🇧 151.229.24.54

🇳🇱 213.209.159.175

🇳🇱 213.152.186.24

🇺🇸 205.210.31.110

🇩🇪 193.124.20.245

🇪🇨 186.5.31.142

🇩🇪 167.94.146.56

🇬🇧 165.232.107.52

🇭🇰 165.154.73.93

🇺🇸 147.185.132.121

🇧🇬 80.66.66.66

🇺🇸 72.253.251.3

🇺🇸 69.249.201.1

🇨🇳 8.141.99.10

🇺🇸 206.189.178.241

🇬🇧 193.163.125.103

🇳🇱 172.94.9.161