AbuseIPDB » 52.53.238.93
52.53.238.93
This IP was reported 7 times. Confidence of
Abuse
is 31% : ?
ISP
Amazon Technologies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-52-53-238-93.us-west-1.compute.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸
United States of America
City
San Jose, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 52.53.238.93 :
This IP address has been reported a total of
7
times from
4 distinct
sources.
52.53.238.93 was first reported on
July 24th 2026 , and the most recent report was
7 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-07-25 02:50:29
(7 hours ago)
(mod_security) mod_security (id:949110) triggered by 52.53.238.93 (ec2-52-53-238-93.us-west-1.comput ...
show more
(mod_security) mod_security (id:949110) triggered by 52.53.238.93 (ec2-52-53-238-93.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 22:50:21.392622 2026] [security2:error] [pid 1082773:tid 1082773] [client 52.53.238.93:37400] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.seenandlovedstrays.org"] [uri "/.git/config"] [unique_id "amQkbXa4IhVUOC9SQis8MQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-07-25 00:57:47
(9 hours ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/api/staging/.env
Web App Attack
🇳🇱
e.fierstra
2026-07-25 00:03:13
(10 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 23:38:29
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 52.53.238.93 (ec2-52-53-238-93.us-west-1.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 52.53.238.93 (ec2-52-53-238-93.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 19:38:21.240063 2026] [security2:error] [pid 273631:tid 273704] [client 52.53.238.93:44460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.scaredycatranch.com"] [uri "/.git/config"] [unique_id "amP3bRrJFi1inhWwqROWpAAAAEI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-24 21:32:35
(13 hours ago)
(caddyscan) Scanner path probe from 52.53.238.93 (US/United States/ec2-52-53-238-93.us-west-1.comput ...
show more
(caddyscan) Scanner path probe from 52.53.238.93 (US/United States/ec2-52-53-238-93.us-west-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.53.238.93 - - [24/Jul/2026:21:32:31 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 52.53.238.93 - - [24/Jul/2026:21:32:31 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 52.53.238.93 - - [24/Jul/2026:21:32:31 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 52.53.238.93 - - [24/Jul/2026:21:32:31 +0000] "GET /.env.production HTTP/1.1"
[REDACTED] 200 2627 52.53.238.93 - - [24/Jul/2026:21:32:31 +0000] "GET /.env.staging HTTP/1.1"
show less
Port Scan
🇱🇻
garmtech.com
2026-07-24 03:58:21
(1 day ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/tools/.env
Web App Attack
🇱🇻
garmtech.com
2026-07-24 03:57:36
(1 day ago)
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ...
show more
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)
show less
Hacking
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: