JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.180.103.242

54.180.103.242 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	AWS Asia Pacific (Seoul) Region
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-180-103-242.ap-northeast-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇰🇷 Korea (the Republic of)
City	Incheon, Incheon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.180.103.242

Whois 54.180.103.242

IP Abuse Reports for 54.180.103.242:

This IP address has been reported a total of 10 times from 8 distinct sources. 54.180.103.242 was first reported on April 5th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-27 00:49:25 (3 months ago)	(mod_security) mod_security triggered on hostname [redacted] 54.180.103.242 (KR/South Korea/ec2-54-1 ... show more (mod_security) mod_security triggered on hostname [redacted] 54.180.103.242 (KR/South Korea/ec2-54-180-103-242.ap-northeast-2.compute.amazonaws.com) show less	SQL Injection
🇳🇱 homeshowdomain.nl	2026-04-05 22:02:35 (5 months ago)	Auto-ban: >3000 req/min op 2026-04-05	Web App Attack SSH Hacking
🇨🇦 CanadaCanuck1	2026-04-05 20:24:00 (5 months ago)	Scanning for php exploits	Web App Attack
Anonymous	2026-04-05 11:10:08 (5 months ago)	\| [Dangerous/South Korea] Aggressive IP 54.180.103.242 (~30 hits). Type: DoS Defender- Web server 40 ... show more \| [Dangerous/South Korea] Aggressive IP 54.180.103.242 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-04-05 10:27:38 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 54.180.103.242 (ec2-54-180-103-242.ap-northeast ... show more (mod_security) mod_security (id:210492) triggered by 54.180.103.242 (ec2-54-180-103-242.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 06:27:34.636186 2026] [security2:error] [pid 22887:tid 22887] [client 54.180.103.242:58788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cyprus-boat-registration.com"] [uri "/.env"] [unique_id "adI5FkYiCi5I018z6xcWeQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-04-05 10:26:18 (5 months ago)	Aggressive web search of vulnerable pages: /phpinfo.php /info.php /php.php /pinfo.php /admin/phpinfo ... show more Aggressive web search of vulnerable pages: /phpinfo.php /info.php /php.php /pinfo.php /admin/phpinfo.php /test/phpinfo.php /dev/phpinfo.php /de ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-05 09:49:43 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 54.180.103.242 (ec2-54-180-103-242.ap-northeast ... show more (mod_security) mod_security (id:210492) triggered by 54.180.103.242 (ec2-54-180-103-242.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 05:49:38.626345 2026] [security2:error] [pid 3165:tid 3165] [client 54.180.103.242:51874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cynosureservices.net"] [uri "/.env"] [unique_id "adIwMkI5vRNmMOf6c4yOVAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-04-05 09:24:30 (5 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-04-05 09:14:04 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 54.180.103.242 (ec2-54-180-103-242.ap-northeast ... show more (mod_security) mod_security (id:210492) triggered by 54.180.103.242 (ec2-54-180-103-242.ap-northeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 05:13:58.154916 2026] [security2:error] [pid 9522:tid 9522] [client 54.180.103.242:38488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cygnetsilks.com"] [uri "/.env"] [unique_id "adIn1h9uAS9Wo-fGBF4EowAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-04-05 09:05:04 (5 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.70

🇮🇳 103.251.208.38

🇷🇺 77.94.204.66

🇰🇷 43.128.131.29

🇺🇸 216.25.89.66

🇺🇸 172.208.48.177

🇺🇸 147.224.162.134

🇺🇸 147.185.132.45

🇷🇴 92.118.39.77

🇧🇷 2804:2990:2402:f500:9098:9b56:bd0a:e9ce

🇺🇸 216.25.89.154

🇺🇸 216.25.89.153

🇧🇷 177.102.180.150

🇺🇦 176.98.71.204

🇺🇸 162.216.149.124

🇨🇦 159.203.57.242

🇺🇸 147.185.132.240

🇨🇳 119.115.68.14

🇩🇪 94.26.106.253

🇺🇦 92.38.41.113