JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.242.123.80

54.242.123.80 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 56%: ?

56%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-54-242-123-80.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.242.123.80

Whois 54.242.123.80

IP Abuse Reports for 54.242.123.80:

This IP address has been reported a total of 12 times from 8 distinct sources. 54.242.123.80 was first reported on July 24th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-07-25 01:12:41 (2 hours ago)	Scanning for web/db/file exploits on hollandfilmnieuws.nl	SQL Injection Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-24 22:01:16 (5 hours ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-24 12:30:19 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.242.123.80 (ec2-54-242-123-80.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.242.123.80 (ec2-54-242-123-80.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 08:30:11.912270 2026] [security2:error] [pid 306196:tid 306196] [client 54.242.123.80:42792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "directnic-support.rocks"] [uri "/.git/config"] [unique_id "amNa0wwfMmQibnz1xT83nAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 11:28:25 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.242.123.80 (ec2-54-242-123-80.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.242.123.80 (ec2-54-242-123-80.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 07:28:17.877118 2026] [security2:error] [pid 1743363:tid 1743363] [client 54.242.123.80:35900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dipseanet.com"] [uri "/.git/config"] [unique_id "amNMUbS59hq4JnNR_50QuwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 10:06:41 (17 hours ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (40/60 min)'; Requests=40	Port Scan
🇺🇸 TPI-Abuse	2026-07-24 09:40:15 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.242.123.80 (ec2-54-242-123-80.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.242.123.80 (ec2-54-242-123-80.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 05:40:08.454651 2026] [security2:error] [pid 268947:tid 268981] [client 54.242.123.80:47090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dinius.org"] [uri "/.git/config"] [unique_id "amMy-O4ED4B_upDPpRWbPAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-24 09:05:35 (18 hours ago)	Abuse Detected (2)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 07:21:55 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.242.123.80 (ec2-54-242-123-80.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.242.123.80 (ec2-54-242-123-80.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:21:51.290480 2026] [security2:error] [pid 4005406:tid 4005406] [client 54.242.123.80:36946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dildog.com"] [uri "/.git/config"] [unique_id "amMSj8GUwFFxbzmnOIYq9gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 getdk	2026-07-24 07:03:43 (20 hours ago)	[Fri Jul 24 07:03:42.417661 2026] [security2:error] [pid 2128098] [client 54.242.123.80:44302] [clie ... show more [Fri Jul 24 07:03:42.417661 2026] [security2:error] [pid 2128098] [client 54.242.123.80:44302] [client 54.242.123.80] ModSecurity: Access denied with code 403 (ph ... show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-07-24 06:50:04 (20 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 05:45:10 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 54.242.123.80 (ec2-54-242-123-80.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 54.242.123.80 (ec2-54-242-123-80.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 01:45:05.205394 2026] [security2:error] [pid 501943:tid 502051] [client 54.242.123.80:36446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digitaltalkingbible.com"] [uri "/.git/config"] [unique_id "amL74Z2XQy1cURr41E1RNgAAAc8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-07-24 05:04:30 (22 hours ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 172.64.200.228

🇪🇨 129.222.179.42

🇩🇪 47.245.138.22

🇨🇳 36.163.227.186

🇯🇵 8.216.92.176

🇨🇳 182.42.113.10

🇺🇸 165.154.36.79

🇨🇳 123.165.86.28

🇮🇷 109.162.249.57

🇸🇬 101.47.159.125

🇺🇸 91.230.168.253

🇳🇱 91.92.42.52

🇺🇸 67.21.32.64

🇺🇸 18.217.208.51

🇹🇭 1.1.134.57

🇬🇧 2a06:4880:8000::ab

🇬🇧 217.146.80.104

🇺🇸 185.199.92.29

🇺🇸 185.199.92.28

🇹🇭 182.53.188.4