AbuseIPDB » 54.151.116.138

54.151.116.138 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 49%: ?

49%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	ec2-54-151-116-138.us-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	United States of America
City	San Jose, California

Report 54.151.116.138

Whois 54.151.116.138

IP Abuse Reports for 54.151.116.138:

This IP address has been reported a total of 124 times from 105 distinct sources. 54.151.116.138 was first reported on October 5th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-10-05 14:54:24 (1 month ago)	[06/Oct/2024:00:54:23 +1000] "GET /.env HTTP/1.1" 302 211 "python-requests/2.31.0"	Hacking Web App Attack
Anonymous	2024-10-05 14:52:00 (1 month ago)	54.151.116.138 - - [05/Oct/2024:16:51:58 +0200] "GET /.env HTTP/1.1" 403 495 "-" "python-requests/2. ... show more54.151.116.138 - - [05/Oct/2024:16:51:58 +0200] "GET /.env HTTP/1.1" 403 495 "-" "python-requests/2.31.0" ... show less	Web App Attack
JCB	2024-10-05 14:49:00 (1 month ago)	54.151.116.138 - - [05/Oct/2024:11:01:48 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 404 196 ... show more54.151.116.138 - - [05/Oct/2024:11:01:48 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 404 196 "-" "Go-http-client/1.1" 54.151.116.138 - - [05/Oct/2024:11:01:48 +0300] "GET /media/system/js/core.js HTTP/1.1" 404 196 "-" "Go-http-client/1.1" show less	Web App Attack
iNetWorker	2024-10-05 14:32:35 (1 month ago)	trolling for resource vulnerabilities	Web App Attack
Xuan Can	2024-10-05 14:32:01 (1 month ago)	(mod_security) mod_security (id:77316757) triggered by 54.151.116.138 (US/United States/ec2-54-151-1 ... show more(mod_security) mod_security (id:77316757) triggered by 54.151.116.138 (US/United States/ec2-54-151-116-138.us-west-1.compute.amazonaws.com): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 05 21:31:53.338862 2024] [security2:error] [pid 18708:tid 18735] [client 54.151.116.138:40080] [client 54.151.116.138] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/007_i360_custom.conf"] [line "343"] [id "77316757"] [msg "IM360 WAF: Laravel .env file access\|\|RSV:6.33\|\|T:APACHE\|\|QS:\|\|"] [severity "CRITICAL"] [tag "service_custom"] [hostname "112.213.89.139"] [uri "/.env"] [unique_id "ZwFN2RCaR1PS8rSWyP2JtAAAAIA"] show less	Brute-Force SSH
BlueWire Hosting	2024-10-05 14:10:03 (1 month ago)	Scanning for Laravel vulnerabilities	Web App Attack
Anonymous	2024-10-05 14:05:55 (1 month ago)	54.151.116.138 - - [05/Oct/2024:16:05:54 +0200] "GET /.env HTTP/1.1" 403 400 "-" "python-requests/2. ... show more54.151.116.138 - - [05/Oct/2024:16:05:54 +0200] "GET /.env HTTP/1.1" 403 400 "-" "python-requests/2.31.0" ... show less	Web App Attack
MumcularHoneypot	2024-10-05 13:55:04 (1 month ago)	Detected HTTP Scanning/Vulnerability Hunt by Mumcular Honeypot.	Hacking Bad Web Bot Web App Attack
Vieira Filho	2024-10-05 12:19:06 (1 month ago)	54.151.116.138 - - [05/Oct/2024:09:19:04 -0300] [35.198.31.82] "35.198.31.82" "GET /.env HTTP/1.1" ... show more54.151.116.138 - - [05/Oct/2024:09:19:04 -0300] [35.198.31.82] "35.198.31.82" "GET /.env HTTP/1.1" 404 169 "-" "python-requests/2.31.0" 0.000 ... show less	Brute-Force Exploited Host Web App Attack
Alexy THOMAS	2024-10-05 11:35:30 (1 month ago)	Invalid request: GET /media/system/js/core.js HTTP/1.1 using Go-http-client/1.1	Bad Web Bot Web App Attack
www.gregorymariani.com	2024-10-05 11:34:02 (1 month ago)	54.151.116.138 - - [05/Oct/2024:13:34:02 +0200] "GET / HTTP/1.1" 404 125 "-" "Go-http-client/1.1"<br ... show more54.151.116.138 - - [05/Oct/2024:13:34:02 +0200] "GET / HTTP/1.1" 404 125 "-" "Go-http-client/1.1" 54.151.116.138 - - [05/Oct/2024:13:34:02 +0200] "GET /wp-includes/css/buttons.css HTTP/1.1" 404 125 "-" "Go-http-client/1.1" show less	Brute-Force SSH
ParaBug	2024-10-05 11:24:04 (1 month ago)	54.151.116.138 - - [05/Oct/2024:13:24:04 +0200] "GET /.env HTTP/1.1" 403 400 "-" "python-requests/2. ... show more54.151.116.138 - - [05/Oct/2024:13:24:04 +0200] "GET /.env HTTP/1.1" 403 400 "-" "python-requests/2.31.0" ... show less	Phishing Brute-Force Web App Attack
canine.tools	2024-10-05 11:13:04 (1 month ago)	[fail2ban Auto Report] 54.151.116.138 - - [05/Oct/2024:07:13:03 -0400] "GET /.env HTTP/1.1" 301 162 ... show more[fail2ban Auto Report] 54.151.116.138 - - [05/Oct/2024:07:13:03 -0400] "GET /.env HTTP/1.1" 301 162 "-" "python-requests/2.31.0" ... show less	Brute-Force Web App Attack
SecondEdge	2024-10-05 11:12:31 (1 month ago)	A web attack was detected from 54.151.116.138 (United States / California / San Jose) against 52.215 ... show moreA web attack was detected from 54.151.116.138 (United States / California / San Jose) against 52.215.230.232 (Git Variable Scan) over 3h52m24s. show less	Web App Attack
Anonymous	2024-10-05 11:05:04 (1 month ago)	Automatic report - Vulnerability scan /.env	Web App Attack