AbuseIPDB » 54.242.129.60

Check an IP Address, Domain Name, or Subnet

e.g. 44.200.175.255, microsoft.com, or 5.188.10.0/24

54.242.129.60 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 53%: ?

53%

ISP	Amazon Data Services NoVa
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	ec2-54-242-129-60.compute-1.amazonaws.com
Domain Name	amazon.com
Country	United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 54.242.129.60

Whois 54.242.129.60

IP Abuse Reports for 54.242.129.60:

This IP address has been reported a total of 23 times from 19 distinct sources. 54.242.129.60 was first reported on June 26th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
dong-webmaster	28 Jun 2022	Warning. Matched phrase "/.env" at REQUEST_FILENAME. ----number of attacks: 22	Hacking SQL Injection
Anonymous	27 Jun 2022	PHP, PHPUnit - Code Injection	Hacking Brute-Force Web App Attack
Dave1680	27 Jun 2022	Searching for vulnerabilities, trying to access [vendor]	Hacking Web App Attack
bigorre.org	27 Jun 2022	suspicious query, try to find configuration parameters log:/.env	Web App Attack
Maykson	27 Jun 2022	54.242.129.60 - - [27/Jun/2022:13:40:49 -0300] "GET //.env HTTP/1.1" 403 3362 "-" "Mozilla/5.0 (X11; ... show more54.242.129.60 - - [27/Jun/2022:13:40:49 -0300] "GET //.env HTTP/1.1" 403 3362 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Exploited Host Web App Attack
Mihr	27 Jun 2022	Requests for nonexistant PHP files: "//vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"	Web App Attack
4server	27 Jun 2022	[MonJun2717:40:16.7633252022][:error][pid11770:tid47181755176704][client54.242.129.60:59752][client5 ... show more[MonJun2717:40:16.7633252022][:error][pid11770:tid47181755176704][client54.242.129.60:59752][client54.242.129.60]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"python-requests/\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"176\"][id\"332039\"][rev\"4\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/.\"][severity\"CRITICAL\"][hostname\"schenagym.ch\"][uri\"/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php\"][unique_id\"YrnPYHXNmFmr5Y4FWdnefwAAAEg\"][MonJun2717:40:19.2746842022][:error][pid11770:tid47181755176704][client54.242.129.60:59752][client54.242.129.60]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"python-requests/\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"176\"][id\"332039\"][rev\"4\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/ show less	Blog Spam
mawan	27 Jun 2022	Suspected of having performed illicit activity on AMS server.	Web App Attack
Maykson	27 Jun 2022	54.242.129.60 - - [27/Jun/2022:11:10:02 -0300] "GET //.env HTTP/1.1" 403 4235 "-" "Mozilla/5.0 (X11; ... show more54.242.129.60 - - [27/Jun/2022:11:10:02 -0300] "GET //.env HTTP/1.1" 403 4235 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Exploited Host Web App Attack
Epimetheus	27 Jun 2022	Unauthorized access attempts: From: 54.242.129.60 Method: HT ... show moreUnauthorized access attempts: From: 54.242.129.60 Method: HTTP GET URI Path: /app/config/.env UA: "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" show less	Web App Attack
Epimetheus	27 Jun 2022	Unauthorized access attempts: From: 54.242.129.60 Method: HT ... show moreUnauthorized access attempts: From: 54.242.129.60 Method: HTTP GET URI Path: /application/config/s3.php UA: "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" show less	Web App Attack
Epimetheus	27 Jun 2022	Unauthorized access attempts: From: 54.242.129.60 Method: HT ... show moreUnauthorized access attempts: From: 54.242.129.60 Method: HTTP GET URI Path: /aws.yml UA: "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" show less	Web App Attack
el-brujo	27 Jun 2022	27/Jun/2022:10:22:29 +0200Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 54.242. ... show more27/Jun/2022:10:22:29 +0200Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 54.242.129.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ns2.elhacker.net"] [uri "/.env"] [unique_id "[email protected]"] ... show less	Hacking Web App Attack
mangomad	27 Jun 2022	Repeated Apache mod_security rule triggers	Brute-Force Web App Attack
Mediashaker	27 Jun 2022	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 54.242.129.60 (US/United ... show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 54.242.129.60 (US/United States/ec2-54-242-129-60.compute-1.amazonaws.com) show less	Port Scan