JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.50.193.5

52.50.193.5 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 55%: ?

55%

ISP	Amazon Data Services Ireland Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-52-50-193-5.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.50.193.5

Whois 52.50.193.5

IP Abuse Reports for 52.50.193.5:

This IP address has been reported a total of 14 times from 10 distinct sources. 52.50.193.5 was first reported on December 21st 2025, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-07-27 11:47:23 (21 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: URI: /.env.txt \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
Anonymous	2026-07-27 01:14:45 (1 day ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-27 00:20:09 (1 day ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-26 21:59:51 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-25. show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-07-25 21:59:53 (2 days ago)	Auto-ban: >3000 req/min op 2026-07-25	Web App Attack SSH Hacking
Anonymous	2026-07-25 05:26:03 (3 days ago)	Bot / scanning and/or hacking attempts: GET /tmp/.env HTTP/1.1, GET /sbin/.env HTTP/1.1, GET /temp/. ... show more Bot / scanning and/or hacking attempts: GET /tmp/.env HTTP/1.1, GET /sbin/.env HTTP/1.1, GET /temp/.env HTTP/1.1, GET /backup/.env HTTP/1.1, GET /local/.env HTTP/1.1, GET /cronlab/.env HTTP/1.1, GET /lab/.env HTTP/1.1, GET /old/.env HTTP/1.1, GET /panel/.env HTTP/1.1, GET / HTTP/1.1, GET /shop/.env HTTP/1.1, GET /erp/.env HTTP/1.1, GET /next/.env HTTP/1.1, GET /uploads/.env HTTP/1.1, GET /.git/config HTTP/1.1, GET /user-panel/.env HTTP/1.1, GET /project/.env HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env HTTP/1.1, GET /.env.old HTTP/1.1, GET /codeigniter/.env HTTP/1.1, GET /scripts/.env HTTP/1.1, GET /nuxt/.env HTTP/1.1, GET /.env.remote HTTP/1.1, GET /store/.env HTTP/1.1, GET /admin/.env HTTP/1.1, GET /node/.env HTTP/1.1 show less	Hacking Web App Attack
🇮🇹 VHosting	2026-07-25 04:00:06 (3 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 18:34:11 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 52.50.193.5 (ec2-52-50-193-5.eu-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 52.50.193.5 (ec2-52-50-193-5.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 14:34:08.041438 2026] [security2:error] [pid 20863:tid 20863] [client 52.50.193.5:51864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.exhibitmanager.krmartindale.com"] [uri "/.git/config"] [unique_id "amOwIBOr9-sdBaDHeGVCyQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-07-24 17:15:15 (3 days ago)	[FriJul2419:15:10.0580752026][security2:error][pid86666:tid86953][client52.50.193.5:0]ModSecurity:Ac ... show more [FriJul2419:15:10.0580752026][security2:error][pid86666:tid86953][client52.50.193.5:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.executivekotech.com.81-17-25-250.cpanel.site\"][uri\"/.git/config\"][unique_id\"amOdnr6xPiHkhew5vb7_cQAAAIk\"] show less	Hacking Web App Attack
🇫🇷 dynamix	2026-07-24 16:28:53 (3 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 15:31:54 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 52.50.193.5 (ec2-52-50-193-5.eu-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 52.50.193.5 (ec2-52-50-193-5.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 11:31:49.515463 2026] [security2:error] [pid 2885103:tid 2885103] [client 52.50.193.5:58026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.exchange.ic1.solutions.ic1.biz"] [uri "/.git/config"] [unique_id "amOFZWD6rk8PLKnHbSkOBAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 08:47:05 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 52.50.193.5 (ec2-52-50-193-5.eu-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 52.50.193.5 (ec2-52-50-193-5.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 04:47:01.294855 2026] [security2:error] [pid 1515306:tid 1515306] [client 52.50.193.5:47562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.evtoy.danged.com"] [uri "/.git/config"] [unique_id "amMmhUcIClt2HmsDfrNgHwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 05:18:14 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 52.50.193.5 (ec2-52-50-193-5.eu-west-1.compute. ... show more (mod_security) mod_security (id:210492) triggered by 52.50.193.5 (ec2-52-50-193-5.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 01:18:03.935061 2026] [security2:error] [pid 82628:tid 82628] [client 52.50.193.5:41534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.evinify.marshvineyards.com"] [uri "/.git/config"] [unique_id "amL1i0DB259OWpMACXg6mwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 COMAITE	2025-12-21 09:21:27 (7 months ago)	Common web attack from 52.50.193.5.	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 35.184.204.64

🇳🇱 2001:67c:e60:c0c:192:42:116:107

🇺🇸 216.25.89.150

🇹🇭 203.154.158.195

🇺🇸 192.81.211.118

🇺🇦 176.103.5.98

🇸🇬 172.253.84.218

🇯🇵 172.70.222.217

🇵🇰 163.223.4.12

🇸🇬 114.119.137.238

🇨🇳 106.12.240.38

🇺🇸 98.159.96.115

🇺🇸 66.132.172.151

🇨🇳 27.18.78.143

🇺🇸 20.163.30.209

🇺🇸 216.218.206.66

🇯🇵 172.70.49.147

🇨🇦 172.69.130.174

🇺🇸 170.106.35.137

🇳🇱 161.35.153.129