JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.47.125.32

52.47.125.32

Neutral Activity

43 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Amazon Data Services France

Usage Type

Data Center/Web Hosting/Transit

ASN

AS16509

Hostname(s)

ec2-52-47-125-32.eu-west-3.compute.amazonaws.com

Domain Name

amazon.com

Country

🇫🇷 France

City

Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.47.125.32 has been reported 43 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 52.47.125.32:

This IP address has been reported a total of 43 times from 25 distinct sources. 52.47.125.32 was first reported on May 8th 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 nktnet	2025-05-18 22:42:00 (1 year ago)	requesting /.vscode endpoints	Web App Attack
🇬🇧 openstrike.co.uk	2025-05-09 05:13:56 (1 year ago)	11 attacks on password grabbing URLs: GET /.vscode/sftp.json HTTP/1.1	Hacking
🇩🇪 FeG Deutschland	2025-05-09 04:19:25 (1 year ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
Anonymous	2025-05-08 22:30:00 (1 year ago)	Multiple unauthorized attempt to access to non-existent path	Web App Attack
🇺🇸 TPI-Abuse	2025-05-08 22:17:39 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 52.47.125.32 (ec2-52-47-125-32.eu-west-3.comput ... show more (mod_security) mod_security (id:210492) triggered by 52.47.125.32 (ec2-52-47-125-32.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 08 18:17:33.386429 2025] [security2:error] [pid 2387913:tid 2387913] [client 52.47.125.32:62101] [client 52.47.125.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fastr-wellington.com"] [uri "/sftp-config.json"] [unique_id "aB0tfWlxsi-dexvYEJKfGgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2025-05-08 22:17:00 (1 year ago)	Web vulnerability probing	Web App Attack
🇩🇪 Mr-Money	2025-05-08 22:13:06 (1 year ago)	05/Mar/2025:19:52:10 +010052.47.125.32 - - [09/May/2025:00:13:06 +0200] "GET /.vscode/sftp.json HTTP ... show more 05/Mar/2025:19:52:10 +010052.47.125.32 - - [09/May/2025:00:13:06 +0200] "GET /.vscode/sftp.json HTTP/1.1" 404 497 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-05-08 22:01:23 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 52.47.125.32 (ec2-52-47-125-32.eu-west-3.comput ... show more (mod_security) mod_security (id:210492) triggered by 52.47.125.32 (ec2-52-47-125-32.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 08 18:01:20.132090 2025] [security2:error] [pid 4025093:tid 4025093] [client 52.47.125.32:56522] [client 52.47.125.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "feelgood70s.xs80s.com"] [uri "/sftp-config.json"] [unique_id "aB0psMZEpOiNaUHO6CUSsgAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 rakkor	2025-05-08 21:46:27 (1 year ago)	2025/05/08 22:46:26 [error] 28005#28005: 6857954 open() "/var/services/web/sftp-config.json" failed ... show more 2025/05/08 22:46:26 [error] 28005#28005: 6857954 open() "/var/services/web/sftp-config.json" failed (2: No such file or directory), client: 52.47.125.32, server: , request: "GET /sftp-config.json HTTP/1.1", host: "filebrowser.rakkor.uk" 2025/05/08 22:46:26 [error] 28004#28004: *6857957 open() "/var/services/web/.vscode/sftp.json" failed (2: No such file or directory), client: 52.47.125.32, server: , request: "GET /.vscode/sftp.json HTTP/1.1", host: "filebrowser.rakkor.uk" ... show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-05-08 21:27:08 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 52.47.125.32 (ec2-52-47-125-32.eu-west-3.comput ... show more (mod_security) mod_security (id:210492) triggered by 52.47.125.32 (ec2-52-47-125-32.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 08 17:27:01.417041 2025] [security2:error] [pid 17219:tid 17219] [client 52.47.125.32:52145] [client 52.47.125.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "facebook.teenyb.com"] [uri "/sftp-config.json"] [unique_id "aB0hpeMYb8CosxYfXlvwkgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-08 20:44:15 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 52.47.125.32 (ec2-52-47-125-32.eu-west-3.comput ... show more (mod_security) mod_security (id:210492) triggered by 52.47.125.32 (ec2-52-47-125-32.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 08 16:44:11.279456 2025] [security2:error] [pid 3484336:tid 3484336] [client 52.47.125.32:52201] [client 52.47.125.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "worshipconcert.com"] [uri "/1cfeiz//sftp-config.json"] [unique_id "aB0Xm0Bydjuh75HiWeP5eAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2025-05-08 20:05:43 (1 year ago)	Too many Status 40X (16)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-05-08 20:01:57 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 52.47.125.32 (ec2-52-47-125-32.eu-west-3.comput ... show more (mod_security) mod_security (id:210492) triggered by 52.47.125.32 (ec2-52-47-125-32.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 08 16:01:52.365625 2025] [security2:error] [pid 3937462:tid 3937462] [client 52.47.125.32:60853] [client 52.47.125.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "festival.bluegrassexpressband.com"] [uri "/sftp-config.json"] [unique_id "aB0NsPn56tt6S9GRFPrOrAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bescared	2025-05-08 19:56:10 (1 year ago)	F2B - Malicious activity detected. URL Probing.	Hacking Bad Web Bot Web App Attack
🇸🇪 SkyDancer	2025-05-08 19:38:12 (1 year ago)	Multiple web intrusion attempts or RDP/SSH hacking using wrong credentials. Attack automatically blo ... show more Multiple web intrusion attempts or RDP/SSH hacking using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Ai-D show less	Hacking Brute-Force SSH

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.253.10.61

🇰🇷 211.56.131.200

🇺🇸 205.210.31.111

🇪🇹 196.189.155.89

🇬🇧 185.214.101.139

🇴🇲 185.64.25.226

🇺🇸 147.185.132.39

🇺🇸 143.198.18.1

🇮🇳 122.169.207.93

🇭🇰 103.210.21.178

🇦🇪 94.207.70.243

🇺🇸 65.49.1.42

🇺🇸 54.163.137.76

🇸🇬 43.163.1.6

🇺🇸 34.168.112.17

🇮🇳 223.184.165.111

🇱🇹 213.176.24.50

🇮🇳 182.79.103.36

🇺🇸 178.173.235.90

🇿🇦 168.210.192.207