JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.77.235.223

Neutral Activity

Abuse confidence score ?

0% Low Risk

11 reports

8 reporters · latest 10 months ago

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-52-77-235-223.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.77.235.223 has been reported 11 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 52.77.235.223

Export CSV

This IP address has been reported a total of 11 times from 8 distinct sources. 52.77.235.223 was first reported on November 28th 2025, and the most recent report was 10 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2025-11-29 22:59:27 (10 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-28. show less	Hacking Web App Attack SSH
🇺🇸 mnsf	2025-11-28 12:06:02 (10 months ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇮🇩 Burayot	2025-11-28 11:30:58 (10 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 52.77.235.223 (SG/Singapore/ec2-52-7 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 52.77.235.223 (SG/Singapore/ec2-52-77-235-223.ap-southeast-1.compute.amazonaws.com): 2 in the last 3600 secs show less	Web App Attack
🇨🇭 Origon	2025-11-28 11:29:48 (10 months ago)	http-sensitive-files - IP: 52.77.235.223 - time="2025-11-28T12:29:48+01:00" level=info msg="(555f66 ... show more http-sensitive-files - IP: 52.77.235.223 - time="2025-11-28T12:29:48+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 52.77.235.223 (SG/16509) : 4h ban on Ip 52.77.235.223" show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 11:01:06 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 52.77.235.223 (ec2-52-77-235-223.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 52.77.235.223 (ec2-52-77-235-223.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 06:00:58.876277 2025] [security2:error] [pid 22351:tid 22351] [client 52.77.235.223:39270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "martinka.org"] [uri "/.env.production"] [unique_id "aSmA6s5TSODurAMO4oId0wAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇷 crgim	2025-11-28 09:56:20 (10 months ago)	52.77.235.223 - - [28/Nov/2025:06:56:17 -0300] "GET /.env.production HTTP/1.1" 404 2502 "-" "python- ... show more 52.77.235.223 - - [28/Nov/2025:06:56:17 -0300] "GET /.env.production HTTP/1.1" 404 2502 "-" "python-httpx/0.22.0" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 09:48:17 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 52.77.235.223 (ec2-52-77-235-223.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 52.77.235.223 (ec2-52-77-235-223.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 04:48:13.552668 2025] [security2:error] [pid 2081:tid 2081] [client 52.77.235.223:55316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mgmlawnservice.buffaloweddingdeejay.com"] [uri "/vendor/.env"] [unique_id "aSlv3XK13uqUqfLZQ6N7OQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2025-11-28 02:32:01 (10 months ago)	Blocking for trying to access an exploit file: /.env.local	Hacking
🇺🇸 TPI-Abuse	2025-11-28 02:21:37 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 52.77.235.223 (ec2-52-77-235-223.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 52.77.235.223 (ec2-52-77-235-223.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 21:21:34.060545 2025] [security2:error] [pid 27387:tid 27387] [client 52.77.235.223:53938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "martinsgenser.com"] [uri "/.env.local"] [unique_id "aSkHLlpeIZcaWPijJnj6twAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 02:04:02 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 52.77.235.223 (ec2-52-77-235-223.ap-southeast-1 ... show more (mod_security) mod_security (id:210492) triggered by 52.77.235.223 (ec2-52-77-235-223.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 21:03:58.121502 2025] [security2:error] [pid 20755:tid 20755] [client 52.77.235.223:50476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "martin.gonzalez.com"] [uri "/core/.env"] [unique_id "aSkDDscQ-iHfn8pLLV4IWgAAADo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 webanyone	2025-11-28 01:00:34 (10 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.104

🇨🇳 175.169.222.217

🇭🇰 45.116.78.92

🇨🇳 222.83.114.152

🇮🇷 217.218.39.243

🇺🇸 172.212.104.156

🇳🇱 138.226.239.11

🇮🇳 117.211.74.77

🇸🇬 101.47.156.170

🇺🇸 82.29.129.160

🇷🇸 77.105.37.219

🇺🇸 65.49.1.136

🇩🇪 64.89.163.163

🇲🇾 47.250.182.206

🇬🇧 31.14.254.4

🇺🇸 104.21.19.157

🇺🇸 74.125.82.178

🇰🇷 36.39.206.40

🇮🇳 35.207.255.68

🇨🇳 218.58.73.238