JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.47.126.101

52.47.126.101 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 24%: ?

24%

ISP	Amazon Data Services France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-52-47-126-101.eu-west-3.compute.amazonaws.com
Domain Name	amazon.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.47.126.101

Whois 52.47.126.101

IP Abuse Reports for 52.47.126.101:

This IP address has been reported a total of 4 times from 4 distinct sources. 52.47.126.101 was first reported on June 3rd 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-06-03 21:48:37 (2 weeks ago)	Excessive 404/403 errors	Brute-Force
🇮🇹 VHosting	2026-06-03 21:10:02 (2 weeks ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 21:00:50 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 52.47.126.101 (ec2-52-47-126-101.eu-west-3.comp ... show more (mod_security) mod_security (id:210492) triggered by 52.47.126.101 (ec2-52-47-126-101.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 17:00:46.200036 2026] [security2:error] [pid 6908:tid 6908] [client 52.47.126.101:49934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pittyvaich.com"] [uri "/.git/config"] [unique_id "aiCV_iNdhSy6VRhjuSID0wAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 sw0ok	2026-06-03 16:52:30 (2 weeks ago)	time="2026-06-03T16:52:29Z" level=info msg="Access to https://portainer.sw0ok.dev/ (method GET) is n ... show more time="2026-06-03T16:52:29Z" level=info msg="Access to https://portainer.sw0ok.dev/ (method GET) is not authorized to user <anonymous>, responding with status code 302 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fportainer.sw0ok.dev%2F&rm=GET" method=GET path=/api/authz/forward-auth remote_ip=52.47.126.101 time="2026-06-03T16:52:29Z" level=info msg="Access to https://portainer.sw0ok.dev/ (method POST) is not authorized to user <anonymous>, responding with status code 303 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fportainer.sw0ok.dev%2F&rm=POST" method=GET path=/api/authz/forward-auth remote_ip=52.47.126.101 time="2026-06-03T16:52:29Z" level=info msg="Access to https://portainer.sw0ok.dev/ (method POST) is not authorized to user <anonymous>, responding with status code 303 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fportainer.sw0ok.dev%2F&rm=POST" method=GET path=/api/authz/forward-auth remote_ip=52.47.126.101 ... show less	Brute-Force

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.79

🇸🇬 43.156.162.193

🇧🇷 181.218.9.86

🇺🇸 172.232.8.247

🇻🇳 171.231.191.85

🇳🇿 121.73.168.107

🇹🇭 118.194.250.31

🇨🇳 111.48.160.201

🇻🇳 103.75.182.108

🇨🇦 85.217.149.47

🇺🇸 73.44.218.208

🇱🇹 45.227.254.170

🇺🇸 34.222.92.74

🇰🇷 221.162.0.119

🇺🇸 207.90.244.19

🇳🇱 192.42.116.54

🇳🇱 185.242.226.71

🇳🇱 178.16.53.230

🇳🇬 152.32.141.2

🇮🇳 124.123.99.32