AbuseIPDB » 52.57.169.241

52.57.169.241 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 55%: ?

55%

ISP	A100 ROW GmbH
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	ec2-52-57-169-241.eu-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	Germany
City	Frankfurt am Main, Hesse

Report 52.57.169.241

Whois 52.57.169.241

IP Abuse Reports for 52.57.169.241:

This IP address has been reported a total of 13 times from 11 distinct sources. 52.57.169.241 was first reported on October 18th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Bedios GmbH	2024-12-01 05:52:16 (1 week ago)	Login credentials theft attempt	Hacking
TPI-Abuse	2024-12-01 05:10:26 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 52.57.169.241 (ec2-52-57-169-241.eu-central-1.c ... show more(mod_security) mod_security (id:210492) triggered by 52.57.169.241 (ec2-52-57-169-241.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 01 00:10:18.710097 2024] [security2:error] [pid 8213:tid 8213] [client 52.57.169.241:40306] [client 52.57.169.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.aroilcontrolsystem.com"] [uri "/.env"] [unique_id "Z0vvunHZHFzn-AkJ58EUSgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
dpinse	2024-12-01 05:10:22 (1 week ago)	teler detected Directory Bruteforce against resource /.env from 52.57.169.241	Bad Web Bot
etu brutus	2024-12-01 04:38:11 (1 week ago)	52.57.169.241 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
TPI-Abuse	2024-12-01 04:35:20 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 52.57.169.241 (ec2-52-57-169-241.eu-central-1.c ... show more(mod_security) mod_security (id:210492) triggered by 52.57.169.241 (ec2-52-57-169-241.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 30 23:35:13.094106 2024] [security2:error] [pid 18558:tid 18558] [client 52.57.169.241:60770] [client 52.57.169.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.hvacmechanalysis.com"] [uri "/.env"] [unique_id "Z0vnge54xz9sJenQ51aKkQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
[email protected]	2024-12-01 03:59:19 (1 week ago)	Attempts to find pages that do not exist on website.	Web App Attack
TPI-Abuse	2024-12-01 03:57:06 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 52.57.169.241 (ec2-52-57-169-241.eu-central-1.c ... show more(mod_security) mod_security (id:210492) triggered by 52.57.169.241 (ec2-52-57-169-241.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 30 22:56:56.882383 2024] [security2:error] [pid 3244:tid 3259] [client 52.57.169.241:51690] [client 52.57.169.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.alicefaye.com"] [uri "/.env"] [unique_id "Z0veiM2So6rcfr-XLMGkagAAAQw"] show less	Brute-Force Bad Web Bot Web App Attack
MSZ	2024-12-01 00:16:18 (1 week ago)	Blocked by Fail2Ban (plesk-modsecurity)	Hacking Brute-Force Web App Attack
marcel-knorr.de	2024-12-01 00:10:47 (1 week ago)	[MK-Root1] Blocked by UFW	Port Scan Brute-Force
ToDi	2024-11-30 23:59:58 (1 week ago)	WebAttack or semilar from 52.57.169.241	Web App Attack
Mr-Money	2024-11-30 23:37:23 (1 week ago)	52.57.169.241 - - [01/Dec/2024:00:37:22 +0100] "GET //.env HTTP/1.1" 404 3555 "https://rnext.de/.env ... show more52.57.169.241 - - [01/Dec/2024:00:37:22 +0100] "GET //.env HTTP/1.1" 404 3555 "https://rnext.de/.env" "Mozilla/5.0 (X11; Linux x86_64)" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
FeG Deutschland	2024-11-30 23:31:16 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities - 12345671011	Exploited Host Web App Attack
backslash	2022-10-18 00:54:08 (2 years ago)	block ruleset bad bot: ignores robots.txt 8010B44F7E78AD8B94C70711C72D11CDE0DAC0F4	Bad Web Bot