JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.54.239.119

Neutral Activity

Abuse confidence score ?

0% Low Risk

47 reports

33 reporters · latest 5 months ago

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-52-54-239-119.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.54.239.119 has been reported 47 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 52.54.239.119

Export CSV

This IP address has been reported a total of 47 times from 33 distinct sources. 52.54.239.119 was first reported on November 15th 2022, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-04-22 21:59:03 (5 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-21. show less	Web App Attack SSH Hacking
🇳🇱 jjnxpct	2026-04-22 03:49:21 (5 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/config (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/config] show less	Web App Attack Hacking
🇨🇭 Peter-Johann Sarbach	2026-04-22 02:14:03 (5 months ago)	Hacking website	Hacking
🇳🇱 homeshowdomain.nl	2026-04-21 22:04:40 (5 months ago)	Auto-ban: >3000 req/min op 2026-04-21	Web App Attack SSH Hacking
Anonymous	2026-04-21 16:39:13 (5 months ago)	Portscan: TCP/443 (5x), TCP/80 (5x)	Port Scan
Anonymous	2026-04-21 08:31:50 (5 months ago)	PSCSERV WPSCAN 52.54.239.119	Bad Web Bot Web App Attack
Anonymous	2026-04-21 07:12:52 (5 months ago)	"GET /.git/config HTTP/1.1"	Hacking Web App Attack
🇵🇱 sefinek.net	2026-04-21 05:49:05 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.git/config \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.81 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-21 05:02:40 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 52.54.239.119 (ec2-52-54-239-119.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 52.54.239.119 (ec2-52-54-239-119.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 01:02:35.821095 2026] [security2:error] [pid 3110473:tid 3110473] [client 52.54.239.119:56590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edscontracting.com"] [uri "/.git/config"] [unique_id "aecE6zMN4AAQanPl2GGKHAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Sophie Nina	2026-04-21 04:40:02 (5 months ago)	Automatically blocked by server	Fraud Orders
🇫🇷 pocketpark	2026-04-21 04:34:43 (5 months ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpo ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.git/config \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.11 Safari/605.1.15 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-04-21 04:31:33 (5 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 TPI-Abuse	2026-04-21 04:30:57 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 52.54.239.119 (ec2-52-54-239-119.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 52.54.239.119 (ec2-52-54-239-119.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 00:30:50.514572 2026] [security2:error] [pid 226955:tid 226955] [client 52.54.239.119:39498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dragonfly.garden"] [uri "/.git/config"] [unique_id "aeb9erhvMwTAHpWxcpUi2gAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Inartis	2026-04-21 04:26:58 (5 months ago)	52.54.239.119 - - [21/Apr/2026:05:07:25 +0200] "GET /.git/config HTTP/1.1" 403 6139 "-" "Mozilla/5.0 ... show more 52.54.239.119 - - [21/Apr/2026:05:07:25 +0200] "GET /.git/config HTTP/1.1" 403 6139 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 52.54.239.119 - - [21/Apr/2026:05:09:32 +0200] "GET /.git/config HTTP/1.1" 403 7790 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 52.54.239.119 - - [21/Apr/2026:06:26:57 +0200] "GET /.git/config HTTP/1.1" 302 7779 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6 Safari/605.1.15" ... show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Axel	2026-04-21 04:05:13 (5 months ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config Server: UK-01 show less	Web App Attack Hacking SQL Injection

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.254.212.59

🇲🇽 189.164.226.84

🇧🇷 177.91.119.59

🇺🇸 147.185.132.220

🇺🇸 147.185.132.39

🇸🇪 85.24.200.219

🇫🇷 51.75.253.68

🇰🇷 43.128.136.162

🇺🇸 34.193.119.44

🇬🇧 31.14.254.80

🇺🇸 2620:7:6003::166

🇺🇸 2620:7:6003::148

🇮🇩 202.149.89.75

🇹🇷 194.127.117.41

🇺🇸 189.81.252.74

🇮🇳 185.100.212.141

🇳🇱 154.61.78.125

🇺🇸 147.185.132.243

🇺🇸 147.185.132.195

🇺🇸 147.185.132.100