This IP address has been reported a total of
273
times from
156 distinct
sources.
52.176.139.88 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
(caddyscan) Scanner path probe from 52.176.139.88 (US/United States/-): 5 in the last 3600 secs; Por ...
show more(caddyscan) Scanner path probe from 52.176.139.88 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:07:00:51 +0000] "GET /config/.env HTTP/1.1"
[REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:07:00:51 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:07:00:51 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:07:00:51 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:07:00:52 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1"
show less
Port Scan
Anonymous
(caddyscan) Scanner path probe from 52.176.139.88 (US/United States/-): 5 in the last 3600 secs; Por ...
show more(caddyscan) Scanner path probe from 52.176.139.88 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:06:43:32 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:06:43:33 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:06:43:33 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:06:43:33 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1"
[REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:06:43:33 +0000] "GET /@fs/.git/config?import?raw HTTP/1.1"
show less
(mod_security) mod_security (id:210492) triggered by 52.176.139.88 (-): 1 in the last 300 secs; Port ...
show more(mod_security) mod_security (id:210492) triggered by 52.176.139.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 01:17:38.466578 2026] [security2:error] [pid 22575:tid 22587] [client 52.176.139.88:28697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "illianapartyrentals.com"] [uri "/config/.env"] [unique_id "ag6Vcg6_nzyM5NofTdL7NQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
(PERMBLOCK) 52.176.139.88 (US/United States/-) has had more than 4 temp blocks in the last 86400 sec ...
show more(PERMBLOCK) 52.176.139.88 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
Anonymous
(caddyscan) Scanner path probe from 52.176.139.88 (US/United States/-): 5 in the last 3600 secs; Por ...
show more(caddyscan) Scanner path probe from 52.176.139.88 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:03:20:49 +0000] "GET /config/.env HTTP/1.1"
[REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:03:20:49 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:03:20:49 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:03:20:49 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 52.176.139.88 - - [21/May/2026:03:20:49 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1"
show less