AbuseIPDB » 52.23.165.72

52.23.165.72 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 21%: ?

21%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	ec2-52-23-165-72.compute-1.amazonaws.com
Domain Name	amazon.com
Country	United States of America
City	Ashburn, Virginia

Report 52.23.165.72

Whois 52.23.165.72

IP Abuse Reports for 52.23.165.72:

This IP address has been reported a total of 19 times from 5 distinct sources. 52.23.165.72 was first reported on November 9th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Burayot	2024-11-11 11:05:00 (4 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 52.23.165.72 (US/United States/ec2-5 ... show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 52.23.165.72 (US/United States/ec2-52-23-165-72.compute-1.amazonaws.com): 2 in the last 3600 secs show less	Web App Attack
london2038.com	2024-11-11 08:54:14 (4 weeks ago)	Probing for exploits 52.23.165.72 - - [11/Nov/2024:09:17:46 +0100] "GET /.env HTTP/1.1" 422 0 ... show moreProbing for exploits 52.23.165.72 - - [11/Nov/2024:09:17:46 +0100] "GET /.env HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 52.23.165.72 - - [11/Nov/2024:09:54:13 +0100] "GET /.env HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Hacking Web App Attack
Hydra-Shield.fr	2024-11-11 08:24:23 (4 weeks ago)	Directory Traversal on: /.env	Web App Attack
YIP	2024-11-11 08:17:31 (4 weeks ago)	52.23.165.72 - - [11/Nov/2024:15:17:30 +0700] "GET /.env HTTP/2.0" 302 - "-" "Mozilla/5.0 (Macintosh ... show more52.23.165.72 - - [11/Nov/2024:15:17:30 +0700] "GET /.env HTTP/2.0" 302 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Web App Attack
YIP	2024-11-11 00:30:59 (1 month ago)	52.23.165.72 - - [11/Nov/2024:07:30:57 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.p ... show more52.23.165.72 - - [11/Nov/2024:07:30:57 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/2.0" 302 - "-" "python-requests/2.32.3" ... show less	Web App Attack
Burayot	2024-11-10 21:35:50 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 52.23.165.72 (US/United States/ec2- ... show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 52.23.165.72 (US/United States/ec2-52-23-165-72.compute-1.amazonaws.com): 1 in the last 3600 secs show less	Web App Attack
Burayot	2024-11-10 21:03:03 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 52.23.165.72 (US/United States/ec2-5 ... show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 52.23.165.72 (US/United States/ec2-52-23-165-72.compute-1.amazonaws.com): 1 in the last 3600 secs show less	Web App Attack
YIP	2024-11-10 20:25:30 (1 month ago)	52.23.165.72 - - [11/Nov/2024:03:25:28 +0700] "GET /.env HTTP/2.0" 302 - "-" "Mozilla/5.0 (Macintosh ... show more52.23.165.72 - - [11/Nov/2024:03:25:28 +0700] "GET /.env HTTP/2.0" 302 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Web App Attack
Burayot	2024-11-10 20:00:18 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 52.23.165.72 (US/United States/ec2- ... show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 52.23.165.72 (US/United States/ec2-52-23-165-72.compute-1.amazonaws.com): 2 in the last 3600 secs show less	Web App Attack
YIP	2024-11-10 19:01:17 (1 month ago)	52.23.165.72 - - [11/Nov/2024:02:01:16 +0700] "GET /.env HTTP/2.0" 302 - "-" "python-requests/2.32.3 ... show more52.23.165.72 - - [11/Nov/2024:02:01:16 +0700] "GET /.env HTTP/2.0" 302 - "-" "python-requests/2.32.3" ... show less	Web App Attack
london2038.com	2024-11-10 17:01:05 (1 month ago)	Probing for exploits 52.23.165.72 - - [10/Nov/2024:17:54:10 +0100] "GET /.env HTTP/1.1" 422 0 ... show moreProbing for exploits 52.23.165.72 - - [10/Nov/2024:17:54:10 +0100] "GET /.env HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 52.23.165.72 - - [10/Nov/2024:18:01:04 +0100] "GET /.env HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Hacking Web App Attack
YIP	2024-11-10 16:40:34 (1 month ago)	52.23.165.72 - - [10/Nov/2024:23:40:32 +0700] "GET /.env HTTP/2.0" 302 - "-" "python-requests/2.32.3 ... show more52.23.165.72 - - [10/Nov/2024:23:40:32 +0700] "GET /.env HTTP/2.0" 302 - "-" "python-requests/2.32.3" ... show less	Web App Attack
YIP	2024-11-10 14:18:17 (1 month ago)	52.23.165.72 - - [10/Nov/2024:21:18:14 +0700] "GET /.env HTTP/2.0" 302 - "-" "Mozilla/5.0 (Macintosh ... show more52.23.165.72 - - [10/Nov/2024:21:18:14 +0700] "GET /.env HTTP/2.0" 302 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Web App Attack
Hydra-Shield.fr	2024-11-10 05:39:56 (1 month ago)	Directory Traversal on: /.env	Web App Attack
Burayot	2024-11-10 03:41:25 (1 month ago)	LF_APACHE_403: 52.23.165.72 (US/United States/ec2-52-23-165-72.compute-1.amazonaws.com), more than 1 ... show moreLF_APACHE_403: 52.23.165.72 (US/United States/ec2-52-23-165-72.compute-1.amazonaws.com), more than 10 Apache 403 hits in the last 3600 secs show less	Web App Attack