AbuseIPDB » 52.39.82.45
52.39.82.45
This IP was reported 8 times. Confidence of
Abuse
is 47% : ?
ISP
Amazon Technologies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-52-39-82-45.us-west-2.compute.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸
United States of America
City
Boardman, Oregon
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 52.39.82.45 :
This IP address has been reported a total of
8
times from
8 distinct
sources.
52.39.82.45 was first reported on
October 11th 2023 , and the most recent report was
12 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-29 07:00:00
(12 hours ago)
Apache probe; attempts=236; exact paths: /.env | /.env.backup | /.env.backup1 | /.env.backup2 | /.en ...
show more
Apache probe; attempts=236; exact paths: /.env | /.env.backup | /.env.backup1 | /.env.backup2 | /.env.bak | /.env.ci | /.env.dev | /.env.development | /.env.dist | /.env.docker | /.env.example | /.env.fly | /.env.json | /.env.live | /.env.local | /.env.neon | /.env.old | /.env.preprod | /.env.prod | /.env.production | /.env.railway | /.env.remote | /.env.render | /.env.sample | /.env.save | /.env.stage | /.env.staging | /.env.supabase | /.env.swp | /.env.test | /.env.txt | /.env.uat | /.env.vault | /.env.vercel | /.env.yaml | /.env.yml | /.env~ | /.git/.env | /.git/config | /actions/.env | /admin-panel/.env | /admin/.env | /administrator/.env | /angular/.env | /ansible/.env | /api/.env | /api/dev/.env | /api/staging/.env | /api/v1/.env | /api/v2/.env | /api/v3/.env | /app/.env | /application/.env | /apps/.env | /assets/.env | /aws/.env | /azure/.env | /backend/.env | /backup/.env | /backups/.env | /beta/.env | ... [211 exact paths total]
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 03:07:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 52.39.82.45 (ec2-52-39-82-45.us-west-2.compute. ...
show more
(mod_security) mod_security (id:210492) triggered by 52.39.82.45 (ec2-52-39-82-45.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 23:07:35.131899 2026] [security2:error] [pid 25370:tid 25370] [client 52.39.82.45:33440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goodfor247.com"] [uri "/.git/config"] [unique_id "amgc9z0ukosjn0kYXbi8uAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-07-27 15:20:10
(2 days ago)
(mod_security) mod_security (id:1000001) triggered by 52.39.82.45 (US/United States/Oregon/Portland/ ...
show more
(mod_security) mod_security (id:1000001) triggered by 52.39.82.45 (US/United States/Oregon/Portland/-/[AS16509 AMAZON-02]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Jul 27 18:20:09.682399 2026] [security2:error] [pid 2811:tid 2931] [client 52.39.82.45:40980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/p.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /p.php"] [severity "CRITICAL"] [tag "security"] [hostname "grafeioteletonkaragiannis.gr"] [uri "/p.php"] [unique_id "amd3KVYQMCac4iqAwmNqRwAAAoU"]
show less
Port Scan
🇫🇷
Octopuce
2026-07-27 03:05:14
(2 days ago)
Aggressive web search of vulnerable pages: / /.env /.env.local /app/.env /apps/.env ...
Web App Attack
🇦🇺
screwlooseit.com.au
2026-07-27 00:36:54
(2 days ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/ec2-52-39-82-45.us-west-2.compute ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/ec2-52-39-82-45.us-west-2.compute.amazonaws.com
show less
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-26 22:05:01
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-25.
show less
Web App Attack
SSH
Hacking
🇳🇱
Site.eu
2026-07-25 13:52:45
(4 days ago)
Excessive 404/403 errors
Brute-Force
🇲🇾
syokadmin
2023-10-11 16:33:47
(2 years ago)
52.39.82.45 (US/United States/ec2-52-39-82-45.us-west-2.compute.amazonaws.com), more than 2 Apache 4 ...
show more
52.39.82.45 (US/United States/ec2-52-39-82-45.us-west-2.compute.amazonaws.com), more than 2 Apache 403 hits in the last 3600 secs
show less
Brute-Force
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: