52.41.114.172

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
49% Elevated
11 reports
10 reporters · latest 1 week ago
ISP
Amazon Technologies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-52-41-114-172.us-west-2.compute.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Boardman, Oregon
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
11 from 10 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 3 🇬🇧 United Kingdom of Great Britain and Northern Ireland 2 🇧🇪 Belgium 1
Most common categories Web App Attack 10 Brute-Force 3 Hacking 3 Bad Web Bot 2 SQL Injection 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇬🇧 thetomtaylor.co.uk
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02,wa01]
Hacking SQL Injection Web App Attack
🇧🇪 cmbplf
542 requests with url.path *config.yaml 455 requests with url.path *config.toml 278 requests with url.path *config.yml
Brute-Force Bad Web Bot
🇬🇧 thetomtaylor.co.uk
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa02]
Hacking SQL Injection Web App Attack
Anonymous
52.41.114.172 - - [03/Nov/2026:23:06:00 +0000] "GET /administrator/manifests/files/joomla.xml HTTP/2.0" 444 0 "-" "MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)" "52.41.114.172" "-" ...
Web App Attack
🇺🇸 mnsf
Too many Status 40X (11)
Brute-Force Web App Attack
🇮🇹 VHosting
Detected WordPress attack from different servers
Brute-Force Web App Attack
🇳🇱 debestelapp
Web App Attack
🇮🇪 Jim Keir
2026-11-03 22:49:19 52.41.114.172 File scanning, blocking 52.41.114.172 for 5 minutes
Web App Attack
🇩🇪 Dominik Lysiak
Web App Attack
🇺🇸 gbutiri
Automated report: source IP probed nonexistent .php paths on our web server (vulnerability scanning / bad bot).
Web App Attack Bad Web Bot
🇺🇸 danchoivanov
Automated scanner probing /.git/config on simpleitsrq.com. Auto-blocked by honeypot trap.
Web App Attack Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.227
🇳🇱 109.160.32.165
🇬🇧 18.135.221.73
🇷🇴 2.57.121.25
🇳🇱 103.112.69.15
🇧🇷 45.168.67.200
🇰🇷 220.126.58.114
🇲🇾 202.165.22.173
🇧🇷 177.137.108.193
🇳🇱 176.65.148.114
🇵🇱 172.64.200.131
🇦🇺 46.250.247.204
🇺🇸 43.153.96.79
🇺🇸 40.124.178.103
🇧🇴 190.109.228.244
🇮🇳 49.43.248.239
feedback