JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.55.161.155

52.55.161.155 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 50%: ?

50%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-52-55-161-155.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.55.161.155

Whois 52.55.161.155

IP Abuse Reports for 52.55.161.155:

This IP address has been reported a total of 10 times from 8 distinct sources. 52.55.161.155 was first reported on July 29th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-30 22:01:00 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-29. show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-07-29 22:08:56 (2 days ago)	Auto-ban: >3000 req/min op 2026-07-29	Web App Attack SSH Hacking
🇳🇱 Savvii	2026-07-29 11:44:32 (3 days ago)	20 attempts against mh_ha-misbehave-ban on ethyl	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-07-29 10:48:02 (3 days ago)	block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0	SQL Injection
Anonymous	2026-07-29 10:43:15 (3 days ago)	Automated Apache suspicious-path probe detected in last 15m: hits=204; wp-login_hits=0; url=/.git/co ... show more Automated Apache suspicious-path probe detected in last 15m: hits=204; wp-login_hits=0; url=/.git/config\|/.env\|/.env.local\|/.env.staging\|/.env.development\|/.env.production\|/.env.dev\|/.env.bak\|(+196 more) show less	Web App Attack
🇫🇷 masterguru	2026-07-29 08:31:13 (3 days ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ... show more Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195) show less	Hacking
Anonymous	2026-07-29 07:09:02 (3 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan
🇮🇹 VHosting	2026-07-29 07:05:04 (3 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-07-29 07:00:00 (3 days ago)	Apache probe; attempts=408; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup1/ \| /.e ... show more Apache probe; attempts=408; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup1/ \| /.env.backup2 \| /.env.backup2/ \| /.env.backup/ \| /.env.bak \| /.env.bak/ \| /.env.ci \| /.env.ci/ \| /.env.dev \| /.env.dev/ \| /.env.development \| /.env.development/ \| /.env.dist \| /.env.dist/ \| /.env.docker \| /.env.docker/ \| /.env.example \| /.env.example/ \| /.env.json \| /.env.json/ \| /.env.live \| /.env.live/ \| /.env.local \| /.env.local/ \| /.env.old \| /.env.old/ \| /.env.preprod \| /.env.preprod/ \| /.env.prod \| /.env.prod/ \| /.env.production \| /.env.production/ \| /.env.remote \| /.env.remote/ \| /.env.sample \| /.env.sample/ \| /.env.save \| /.env.save/ \| /.env.stage \| /.env.stage/ \| /.env.staging \| /.env.staging/ \| /.env.swp \| /.env.swp/ \| /.env.test \| /.env.test/ \| /.env.txt \| /.env.txt/ \| /.env.uat \| /.env.uat/ \| /.env.yaml \| /.env.yaml/ \| /.env.yml \| /.env.yml/ \| /.env/ \| /.env~ \| /.env~/ \| /.git/.env \| /.git/.env/ \| /.g \| ... [408 exact paths total] show less	Web App Attack
🇩🇪 yitzhaq	2026-07-29 05:00:59 (3 days ago)	52.55.161.155 - - [29/Jul/2026:07:00:56 +0200] "GET /test/.env HTTP/1.1" 404 520 "-" "Mozilla/5.0 (M ... show more 52.55.161.155 - - [29/Jul/2026:07:00:56 +0200] "GET /test/.env HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.55.161.155 - - [29/Jul/2026:07:00:56 +0200] "GET /qa/.env HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.55.161.155 - - [29/Jul/2026:07:00:56 +0200] "GET /preview/.env HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.55.161.155 - - [29/Jul/2026:07:00:56 +0200] "GET /beta/.env HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.55.161.155 - - [29/Jul/2026:07:00:56 +0200] "GET /uat/.env HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ show less	Web App Attack Hacking

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.181.163.195

🇮🇩 163.7.7.193

🇺🇸 147.185.132.38

🇷🇴 80.94.92.55

🇬🇧 46.43.20.75

🇹🇷 78.135.83.200

🇺🇸 47.88.78.4

🇪🇬 41.33.105.181

🇫🇷 37.187.236.33

🇵🇱 194.180.48.221

🇬🇧 193.163.125.51

🇺🇸 172.202.104.154

🇰🇷 125.130.102.172

🇨🇳 113.110.231.96

🇳🇱 91.92.47.117

🇬🇧 35.203.210.71

🇨🇦 24.244.95.99

🇺🇸 20.65.193.204

🇨🇳 221.195.122.188

🇩🇪 213.209.159.241