JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.252.207.52

54.252.207.52

Neutral Activity

55 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Amazon.com, Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS16509

Hostname(s)

ec2-54-252-207-52.ap-southeast-2.compute.amazonaws.com

Domain Name

amazon.com

Country

🇦🇺 Australia

City

Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

54.252.207.52 has been reported 55 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 54.252.207.52:

This IP address has been reported a total of 55 times from 47 distinct sources. 54.252.207.52 was first reported on January 25th 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 czdawid	2025-01-27 07:33:00 (1 year ago)	Attempts to exploit	Web Spam Port Scan Spoofing
🇮🇹 LTM	2025-01-26 07:20:02 (1 year ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇧🇪 cmbplf	2025-01-26 02:35:27 (1 year ago)	15.659 requests to */.git/config	Brute-Force Bad Web Bot
🇵🇱 sefinek.net	2025-01-26 01:21:16 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from AU. Action taken: BLOCK ASN: 16509 (AMAZON-02) Protoc ... show more Triggered Cloudflare WAF (firewallCustom) from AU. Action taken: BLOCK ASN: 16509 (AMAZON-02) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config Timestamp: 2025-01-25T23:10:41Z Ray ID: 907bf022fb55574a UA: Mozilla/5.0 (WindowsCE 6.0; rv:2.0.1) Gecko/20100101 Firefox/4.0.1 Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-01-26 01:21:06 (1 year ago)	Bad Request c7c201e9	Port Scan Hacking Bad Web Bot Web App Attack
🇺🇸 BarredOwl	2025-01-26 01:20:00 (1 year ago)	54.252.207.52 - - [25/Jan/2025:18:37:53 -0500] "GET /.git/config HTTP/1.1" 403	Web App Attack
🇳🇱 Savvii	2025-01-26 00:23:31 (1 year ago)	20 attempts against mh-misbehave-ban on flow	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-26 00:21:05 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 54.252.207.52 (ec2-54-252-207-52.ap-southeast-2 ... show more (mod_security) mod_security (id:210492) triggered by 54.252.207.52 (ec2-54-252-207-52.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 25 19:20:59.869363 2025] [security2:error] [pid 193134:tid 193134] [client 54.252.207.52:35614] [client 54.252.207.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oakglenhouse.com"] [uri "/.git/config"] [unique_id "Z5V_6y3kIYfIYUfnbfueXAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2025-01-26 00:18:49 (1 year ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.252.207.52 (AU/Au ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.252.207.52 (AU/Australia/ec2-54-252-207-52.ap-southeast-2.compute.amazonaws.com) show less	Bad Web Bot
🇩🇪 ut-addicted.com	2025-01-26 00:18:01 (1 year ago)	\[Sun Jan 26 01:18:00.300911 2025\] \[:error\] \[pid 24867:tid 139712222127872\] \[client 54.252.207 ... show more \[Sun Jan 26 01:18:00.300911 2025\] \[:error\] \[pid 24867:tid 139712222127872\] \[client 54.252.207.52:41898\] \[client 54.252.207.52\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "www.crx.it"\] \[uri "/.git/config"\] \[unique_id "Z5V-OOw68S1CPUgStIr6qQAAANE"\] show less	Brute-Force Web App Attack
🇩🇪 iNetWorker	2025-01-26 00:17:48 (1 year ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇸 beehivesafety	2025-01-26 00:15:13 (1 year ago)	Malicious activity detected from 16509 AMAZON-02 towards host weather.beehive.systems (GET HTTP/1.1) ... show more Malicious activity detected from 16509 AMAZON-02 towards host weather.beehive.systems (GET HTTP/1.1) @ 2025-01-26T00:15:13Z show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇩🇪 Interceptor_HQ	2025-01-26 00:07:01 (1 year ago)	request_uri: /.git/config -- automatic report --	Hacking Brute-Force
🇩🇪 Mr-Money	2025-01-26 00:06:16 (1 year ago)	54.252.207.52 - - [26/Jan/2025:01:06:16 +0100] "GET /.git/config HTTP/1.1" 404 3555 "-" "Mozilla/5.0 ... show more 54.252.207.52 - - [26/Jan/2025:01:06:16 +0100] "GET /.git/config HTTP/1.1" 404 3555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/73.0.3683.86 Chrome/73.0.3683.86 Safari/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇫🇷 ecodehost.com	2025-01-26 00:04:03 (1 year ago)	Domain : ecodehost.com Rule : config 2025-01-26 00:02:33 10.100.1.20 GET /.git/config - 80 - 54.252. ... show more Domain : ecodehost.com Rule : config 2025-01-26 00:02:33 10.100.1.20 GET /.git/config - 80 - 54.252.207.52 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 - ecodehost.com 404 8 0 1374 201 3787 - - show less	Hacking SQL Injection

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.149.228.137

🇺🇦 176.120.110.108

🇩🇪 167.233.151.217

🇩🇪 157.90.1.104

🇺🇸 147.185.132.128

🇺🇸 147.185.132.106

🇺🇸 139.144.239.72

🇩🇪 139.19.117.130

🇻🇳 113.161.79.218

🇺🇸 54.198.201.86

🇬🇧 35.203.210.90

🇺🇸 34.139.154.93

🇧🇷 34.95.169.32

🇧🇷 34.39.179.20

🇺🇸 34.19.14.54

🇨🇳 27.155.172.80

🇺🇸 4.148.1.112

🇺🇸 216.75.132.54

🇷🇺 212.12.7.238

🇺🇸 207.180.11.13