JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.250.23.60

54.250.23.60 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 47%: ?

47%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-54-250-23-60.ap-northeast-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.250.23.60

Whois 54.250.23.60

IP Abuse Reports for 54.250.23.60:

This IP address has been reported a total of 13 times from 10 distinct sources. 54.250.23.60 was first reported on July 14th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-16 21:59:08 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-15. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-16 15:34:50 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 54.250.23.60 (ec2-54-250-23-60.ap-northeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 54.250.23.60 (ec2-54-250-23-60.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 11:34:46.051164 2026] [security2:error] [pid 17045:tid 17045] [client 54.250.23.60:60872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bonnesfrequences.com"] [uri "/.git/config"] [unique_id "alj6FpIZ8nChD7YOdcA5owAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 12:48:59 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 54.250.23.60 (ec2-54-250-23-60.ap-northeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 54.250.23.60 (ec2-54-250-23-60.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 08:48:53.592682 2026] [security2:error] [pid 24205:tid 24205] [client 54.250.23.60:40480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bonefrog.com"] [uri "/.git/config"] [unique_id "aljTNZCzg7zUELSWuLMJCAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-07-16 12:17:32 (2 weeks ago)	20 attempts against mh-misbehave-ban on orcus	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 06:07:33 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 54.250.23.60 (ec2-54-250-23-60.ap-northeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 54.250.23.60 (ec2-54-250-23-60.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 02:07:28.188462 2026] [security2:error] [pid 23677:tid 23677] [client 54.250.23.60:40532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bolivarbulletintimes.com"] [uri "/.git/config"] [unique_id "alh1ILJlckBF3bYt-LVOPAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-16 03:09:09 (2 weeks ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇩🇪 LRob	2026-07-16 01:12:09 (2 weeks ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: /.env \| 5 distinct paths \| UA: Mozilla/5.0 (X11; ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: /.env \| 5 distinct paths \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Hacking
🇧🇾 lns.bz	2026-07-15 12:58:38 (2 weeks ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 dynamix	2026-07-15 01:07:24 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-07-14 21:10:49 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇯🇵 ochanoko	2026-07-14 16:36:00 (2 weeks ago)	2026-07-15T01:35:59.407765+09:00 vm-67b67c06-8f nginx[12140]: vm-67b67c06-8f nginx: 2026/07/15 01:35 ... show more 2026-07-15T01:35:59.407765+09:00 vm-67b67c06-8f nginx[12140]: vm-67b67c06-8f nginx: 2026/07/15 01:35:59 [error] 12140#12140: 49691 access forbidden by rule, client: 54.250.23.60, server: crm.ochanoko.biz, request: "GET /.git/config HTTP/1.1", host: "crm.ochanoko.biz" 2026-07-15T01:35:59.460021+09:00 vm-67b67c06-8f nginx[12140]: vm-67b67c06-8f nginx: 2026/07/15 01:35:59 [error] 12140#12140: 49691 access forbidden by rule, client: 54.250.23.60, server: crm.ochanoko.biz, request: "GET /.env HTTP/1.1", host: "crm.ochanoko.biz" 2026-07-15T01:35:59.479787+09:00 vm-67b67c06-8f nginx[12140]: vm-67b67c06-8f nginx: 2026/07/15 01:35:59 [error] 12140#12140: 49691 access forbidden by rule, client: 54.250.23.60, server: crm.ochanoko.biz, request: "GET /.env.local HTTP/1.1", host: "crm.ochanoko.biz" 2026-07-15T01:35:59.499040+09:00 vm-67b67c06-8f nginx[12140]: vm-67b67c06-8f nginx: 2026/07/15 01:35:59 [error] 12140#12140: 49691 access forbidden by rule, client: 54.250.23.60, server: crm.ochanoko. ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-14 15:07:11 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 54.250.23.60 (ec2-54-250-23-60.ap-northeast-1.c ... show more (mod_security) mod_security (id:210492) triggered by 54.250.23.60 (ec2-54-250-23-60.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 11:07:03.611062 2026] [security2:error] [pid 7879:tid 7879] [client 54.250.23.60:57528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crm.kircali.net"] [uri "/.git/config"] [unique_id "alZQlwJLyo7GdJ8yxMY_yAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 gadix	2026-07-14 14:52:38 (2 weeks ago)	[14/Jul/2026:16:52:35.997585 +0200] alZNM7NUjtJeDXkhNX6DAQAAAAg 54.250.23.60 40716 127.0.0.1 7081 [1 ... show more [14/Jul/2026:16:52:35.997585 +0200] alZNM7NUjtJeDXkhNX6DAQAAAAg 54.250.23.60 40716 127.0.0.1 7081 [14/Jul/2026:16:52:36.513601 +0200] alZNNFz9WRCWEyhwqL4vNgAAAAA 54.250.23.60 40724 127.0.0.1 7081 [14/Jul/2026:16:52:36.771437 +0200] alZNNLpH50AEqHmUGOK5ugAAAAI 54.250.23.60 40732 127.0.0.1 7081 ... show less	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.231.177.54

🇨🇮 105.235.72.226

🇺🇸 20.184.175.3

🇩🇪 20.52.125.110

🇳🇱 213.176.26.94

🇻🇪 186.88.203.112

🇪🇨 181.199.42.99

🇻🇳 171.237.176.209

🇮🇩 163.7.3.26

🇨🇳 110.40.185.248

🇭🇰 103.210.237.224

🇨🇿 83.208.70.70

🇺🇸 54.90.29.237

🇳🇱 45.148.10.230

🇳🇱 45.148.10.25

🇺🇸 45.33.5.92

🇰🇷 14.42.47.150

🇳🇱 185.136.15.13

🇮🇩 157.15.67.253

🇺🇸 91.230.168.181