JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.152.39.42

54.152.39.42 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-152-39-42.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.152.39.42

Whois 54.152.39.42

IP Abuse Reports for 54.152.39.42:

This IP address has been reported a total of 81 times from 61 distinct sources. 54.152.39.42 was first reported on July 26th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-07-27 05:14:26 (12 hours ago)	26 attacks on PHP URLs, Wordpress URLs: GET //xmlrpc.php?rsd HTTP/1.1 GET //cms/wp-includes/wlwmanif ... show more 26 attacks on PHP URLs, Wordpress URLs: GET //xmlrpc.php?rsd HTTP/1.1 GET //cms/wp-includes/wlwmanifest.xml HTTP/1.1 show less	Web App Attack
🇩🇪 paissangroup	2026-07-27 02:43:01 (15 hours ago)	Multiple WAF Violations	Web App Attack
🇧🇪 madeit	2026-07-27 02:36:00 (15 hours ago)		Web App Attack
🇩🇪 abdubhai	2026-07-27 02:35:08 (15 hours ago)	54.152.39.42 - - [27/Jul/2026:07 ...	Brute-Force
🇫🇷 Kenshin869	2026-07-27 02:35:08 (15 hours ago)	Wordpress unauthorized access attempt	Brute-Force
🇳🇱 ConsulHosting	2026-07-27 02:28:14 (15 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇫🇷 ✨	2026-07-27 02:18:14 (15 hours ago)	Rule : WEB 2026-07-27 02:17:19 54.152.39.42 49465 *hidden-privacy* 80 - - - - - 400 - BadRequest ... show more Rule : WEB 2026-07-27 02:17:19 54.152.39.42 49465 *hidden-privacy* 80 - - - - - 400 - BadRequest - TCP show less	Port Scan
🇫🇮 etasoft	2026-07-27 01:36:35 (16 hours ago)	Auto-blocked by WP Security AI: Honeypot: xmlrpc.php	Hacking
🇧🇬 HighWay	2026-07-27 01:34:42 (16 hours ago)	54.152.39.42 - - [27/Jul/2026:01:34:38 +0000] "POST //xmlrpc.php HTTP/1.1" 200 755 "-" "Mozilla/5.0 ... show more 54.152.39.42 - - [27/Jul/2026:01:34:38 +0000] "POST //xmlrpc.php HTTP/1.1" 200 755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 54.152.39.42 - - [27/Jul/2026:01:34:38 +0000] "POST //xmlrpc.php HTTP/1.1" 200 755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 54.152.39.42 - - [27/Jul/2026:01:34:39 +0000] "POST //xmlrpc.php HTTP/1.1" 200 755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Port Scan Bad Web Bot Web App Attack
Anonymous	2026-07-27 00:51:15 (17 hours ago)	[redacted]site 54.152.39.42 - - [27/Jul/2026:02:51:11 +0200] "POST //xmlrpc.php HTTP/2.0" 200 198 "- ... show more [redacted]site 54.152.39.42 - - [27/Jul/2026:02:51:11 +0200] "POST //xmlrpc.php HTTP/2.0" 200 198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted]site 54.152.39.42 - - [27/Jul/2026:02:51:12 +0200] "POST //xmlrpc.php HTTP/2.0" 200 198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted]site 54.152.39.42 - - [27/Jul/2026:02:51:12 +0200] "POST //xmlrpc.php HTTP/2.0" 200 198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted]site 54.152.39.42 - - [27/Jul/2026:02:51:12 +0200] "POST //xmlrpc.php HTTP/2.0" 200 198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted]site 54.152.39.42 - - [27/Jul/2026:02:51:12 +0200] "POST //xmlrpc.php HTTP/2.0" 200 198 "-" "Mozilla/5.0 (Windows N ... show less	Hacking Web App Attack
🇫🇷 bazter.pro	2026-07-27 00:48:54 (17 hours ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇮🇹 mgarofano80	2026-07-27 00:37:48 (17 hours ago)		Brute-Force Web App Attack
🇺🇸 KitsuneTech	2026-07-27 00:30:43 (17 hours ago)	54.152.39.42 - - [26/Jul/2026:19:30:42 -0500] "GET //wp-includes/ID3/license.txt HTTP/1.1" 301 299 " ... show more 54.152.39.42 - - [26/Jul/2026:19:30:42 -0500] "GET //wp-includes/ID3/license.txt HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Web App Attack
🇩🇪 4server	2026-07-27 00:20:36 (17 hours ago)	[MonJul2702:20:31.1915452026][security2:error][pid2264822:tid2264928][client54.152.39.42:0]ModSecuri ... show more [MonJul2702:20:31.1915452026][security2:error][pid2264822:tid2264928][client54.152.39.42:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"alessandrolucchini.ch\"][uri\"/xmlrpc.php\"][unique_id\"amakTyq1ir43LeOs6oVmogAAAQU\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 ✨	2026-07-26 23:42:07 (18 hours ago)	Rule : WEB 2026-07-26 23:40:46 54.152.39.42 61221 *hidden-privacy* 80 - - - - 400 - BadRequest -	Port Scan

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 195.64.239.142

🇨🇳 122.158.62.109

🇵🇱 79.187.129.88

🇺🇦 31.43.255.152

🇫🇮 195.26.230.103

🇲🇽 189.140.6.242

🇧🇷 189.50.63.249

🇰🇿 185.234.61.243

🇨🇳 117.72.72.15

🇰🇪 102.210.149.105

🇬🇷 83.235.16.111

🇸🇬 47.128.110.14

🇬🇧 35.203.211.127

🇳🇱 203.159.90.218

🇭🇰 199.45.154.145

🇺🇸 185.226.196.12

🇨🇳 183.146.70.128

🇮🇶 169.224.38.169

🇩🇪 45.135.141.8

🇿🇦 41.56.152.112