JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.77.244.71

Neutral Activity

Abuse confidence score ?

0% Low Risk

11 reports

7 reporters · latest 3 months ago

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-52-77-244-71.ap-southeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.77.244.71 has been reported 11 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 52.77.244.71

This IP address has been reported a total of 11 times from 7 distinct sources. 52.77.244.71 was first reported on April 2nd 2025, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-05-28 19:00:09 (3 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 18:59:11 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 52.77.244.71 (ec2-52-77-244-71.ap-southeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 52.77.244.71 (ec2-52-77-244-71.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 14:59:05.364707 2026] [security2:error] [pid 31381:tid 31381] [client 52.77.244.71:52744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "genesis-castle.com"] [uri "/.env"] [unique_id "ahiQeXTnzK2T9cnsBRIEoQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 18:41:51 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 52.77.244.71 (ec2-52-77-244-71.ap-southeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 52.77.244.71 (ec2-52-77-244-71.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 14:41:47.166254 2026] [security2:error] [pid 25002:tid 25002] [client 52.77.244.71:48472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "genescleaners.com"] [uri "/.env"] [unique_id "ahiMa8tZD3GI7uILm9rzjgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇹 Bete	2025-04-03 05:37:00 (1 year ago)	52.77.244.71 - - [02/Apr/2025:18:23:46 +0000] "GET //web/.env HTTP/1.1" 404 119 "https://www.google. ... show more 52.77.244.71 - - [02/Apr/2025:18:23:46 +0000] "GET //web/.env HTTP/1.1" 404 119 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_1_5) Gecko/20031701 Firefox/13.0" 52.77.244.71 - - [02/Apr/2025:18:23:46 +0000] "GET //admin/.env HTTP/1.1" 404 121 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_1_5) Gecko/20031701 Firefox/13.0" This IP 52.77.244.71 attempted to access .env files in directories such as /web/ and /admin/. These files typically contain sensitive configuration details. show less	Web App Attack
🇧🇪 cmbplf	2025-04-03 01:20:28 (1 year ago)	4.698 requests with url.path *.env	Brute-Force Bad Web Bot
🇫🇷 dynamix	2025-04-03 01:15:13 (1 year ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2025-04-03 00:45:04 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 52.77.244.71 (ec2-52-77-244-71.ap-southeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 52.77.244.71 (ec2-52-77-244-71.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 02 20:44:55.248223 2025] [security2:error] [pid 25405:tid 25405] [client 52.77.244.71:56708] [client 52.77.244.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sahinozalit.com"] [uri "/.env"] [unique_id "Z-3aB6h9Wd8uBjdyCmcVoAAAAAs"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-03 00:40:59 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
🇸🇪 vaia.cloud	2025-04-03 00:04:01 (1 year ago)	trying wp-login.php/xmlrpc.php 60 times in 1 minutes	Brute-Force Web App Attack
Anonymous	2025-04-03 00:02:17 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-04-02 23:06:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 52.77.244.71 (ec2-52-77-244-71.ap-southeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 52.77.244.71 (ec2-52-77-244-71.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 02 19:06:05.913421 2025] [security2:error] [pid 2508206:tid 2508206] [client 52.77.244.71:34254] [client 52.77.244.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sacoriverjazz.org"] [uri "/.env"] [unique_id "Z-3C3Sif8AbsGwYELZ55WAAAABk"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 104.248.69.177

🇸🇬 101.47.14.46

🇫🇷 85.217.140.19

🇨🇳 240e:90e:2000:2006::128a

🇮🇳 216.10.245.73

🇧🇪 198.235.24.197

🇩🇪 193.124.20.246

🇺🇸 172.232.27.232

🇵🇰 103.213.112.77

🇭🇰 101.36.116.232

🇯🇵 101.33.55.172

🇬🇧 92.207.4.157

🇨🇦 85.217.149.73

🇨🇦 85.217.149.72

🇺🇸 64.16.133.137

🇨🇳 58.57.228.46

🇺🇸 20.124.84.235

🇨🇳 223.75.156.89

🇧🇷 201.63.223.141

🇧🇴 189.28.82.173