JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.77.239.20

52.77.239.20 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 45%: ?

45%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-52-77-239-20.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.77.239.20

Whois 52.77.239.20

IP Abuse Reports for 52.77.239.20:

This IP address has been reported a total of 10 times from 7 distinct sources. 52.77.239.20 was first reported on July 16th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-07-18 05:14:32 (18 hours ago)	257 attacks on VC URLs, env grabbing URLs, PHP URLs: GET /.git/config HTTP/1.1 GET /.env.neon HTTP/1 ... show more 257 attacks on VC URLs, env grabbing URLs, PHP URLs: GET /.git/config HTTP/1.1 GET /.env.neon HTTP/1.1 GET /includes/phpinfo.php HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 04:21:34 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 52.77.239.20 (ec2-52-77-239-20.ap-southeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 52.77.239.20 (ec2-52-77-239-20.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 00:21:31.119440 2026] [security2:error] [pid 135157:tid 135157] [client 52.77.239.20:33104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.howtolivegreener.com.easyweb-publishing.com"] [uri "/.git/config"] [unique_id "alr_S0vxJ3_H3MVYjIo2ZwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-18 04:00:09 (20 hours ago)	Bot / scanning and/or hacking attempts: GET /.env.stage HTTP/1.1, GET /.env.example HTTP/1.1, GET /. ... show more Bot / scanning and/or hacking attempts: GET /.env.stage HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.env.live HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.docker HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.ci HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-07-17 08:30:05 (1 day ago)	\| [Dangerous/Singapore] Aggressive IP 52.77.239.20 (~30 hits). Type: DoS Defender- Web server 400 er ... show more \| [Dangerous/Singapore] Aggressive IP 52.77.239.20 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-07-17 04:07:55 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 52.77.239.20 (ec2-52-77-239-20.ap-southeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 52.77.239.20 (ec2-52-77-239-20.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 00:07:47.105405 2026] [security2:error] [pid 4317:tid 4317] [client 52.77.239.20:59216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ipad.cmabiblequizzing.org"] [uri "/.git/config"] [unique_id "almqk9mcTnWnPqzIpBj9rgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 02:23:33 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 52.77.239.20 (ec2-52-77-239-20.ap-southeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 52.77.239.20 (ec2-52-77-239-20.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 22:23:29.345232 2026] [security2:error] [pid 126607:tid 126607] [client 52.77.239.20:52084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.iostation.com"] [uri "/.git/config"] [unique_id "almSIUP6HNV0tJ1lgNXGsQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 02:04:59 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 52.77.239.20 (ec2-52-77-239-20.ap-southeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 52.77.239.20 (ec2-52-77-239-20.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 22:04:54.549319 2026] [security2:error] [pid 9387:tid 9544] [client 52.77.239.20:47564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ioqm.aafm.us"] [uri "/.git/config"] [unique_id "almNxmY7gbSu3Uq6dQIlDwAAAIw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-16 22:02:42 (2 days ago)	Auto-ban: >3000 req/min op 2026-07-16	Web App Attack SSH Hacking
🇳🇱 WeCloudit-Anti-Abuse	2026-07-16 21:27:35 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇦🇺 Klaverstyn	2026-07-16 15:30:30 (2 days ago)	Repeated 403 Forbidden responses	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇩 188.237.186.237

🇹🇭 165.154.120.30

🇳🇱 160.119.69.14

🇮🇳 122.187.230.250

🇨🇦 70.54.182.130

🇩🇪 2a04:4e40:e000:0:8af:bde7:1466:85a7

🇳🇱 213.21.248.43

🇳🇱 193.110.157.47

🇮🇳 190.92.174.183

🇺🇸 162.216.149.128

🇫🇮 147.185.133.246

🇧🇷 143.95.211.56

🇭🇰 119.28.228.212

🇮🇩 114.10.120.206

🇸🇬 97.74.87.152

🇧🇾 86.57.206.21

🇫🇷 85.217.140.31

🇮🇷 85.185.201.10

🇳🇱 77.239.124.237

🇨🇦 70.51.204.123